Incident response and investigation

Prepare to detect, contain, investigate and learn from cybersecurity incidents.

Audience

SOC staff, incident responders and technical managers

Learning Outcome

What you will learn

Learners connect threat recognition and detection with response practice, Cyber Range scenarios and forensic analysis.

Recommended course sequence

Follow the courses in order. Each step builds the knowledge needed for the next one.

Recognise common cyber threats and vulnerabilities affecting SMEs and apply practical measures to reduce risk.

Use ACAS to detect malicious network activity, investigate alerts and support effective response actions.

Practise attack and defence techniques through Cyber Range simulations, monitoring and mitigation exercises.

Use network, memory, disk and mobile forensic techniques to uncover digital evidence and investigate incidents.

Explore AI-related threats, ethical challenges and legal responsibilities for SMEs.

Planned

Description

Planned

Apply your knowledge

Use guided exercises to practise realistic scenarios after the related courses.

Practise responding to ransomware incidents and applying appropriate security measures.

Explore how publicly available information can support social engineering and tailgating attacks.

Explore the risks hidden in malicious or compromised documents.

Practise recognising manipulation techniques and suspicious requests.

Start with Common Cybersecurity Threats & Vulnerabilities for SMEs and follow the pathway at your own pace.