Incident Response Foundations

Catalog description

Students develop the foundational skills required for entry-level operations within a Security Operations Center (SOC), focusing specifically on the incident response lifecycle. Using a vendor-neutral approach grounded NIST 800-61 framework, students move from initial detection and triage through containment, eradication, and recovery. In this course students analyze common attack vectors, perform initial forensic preservation, and practice professional incident documentation.