Who Should Participate?
Cyber Security Analysts, SOC Analysts, Network Security Specialists, Security Incident Management Teams
Program
• Cyber Incident Response Concepts
• IR Pyramid of Needs
• Incident Response Procedures (SANS-NIST)
• Theorems
• Detecting anomaly (Windows Process)
• Digital Forensics Basics
• Concepts | Imaging | Documentation
• Windows Forensics Basics
• File System Forensics
• Alternate Data Streams
• Windows Execution Artifacts
- KAPE
- Windows Persistency Points
- EDR
- Alert&Live Analysis
- Scenario Windows Host Analytics