CBR 402 Intrusion Detection, Incident Response and Computer Forensics

3 Credits

This course educates students on how to prepare for the inevitable security incident. Emphasis is placed on what constitutes an incident, the incident response process, pre-incident preparation, starting the investigation, understanding the scope of the incident andhow to collect data properly. Understanding how to manage incidents on different platforms (i.e. Macintosh, Windows and Linux) including how to access, analyze and retrieve the necessary logs/data to investigate/ examine a breach will also be important topics. Intrusion detection topics include incident response theory, process and planning. Blue team vs. red team exercises will simulate attacks designed to educate students on how to create a real-world hack and how to stop a cyber-attack. At the end of the course, students will have the opportunity to create a remediation plan for a real-world security exposure.