CBR 530 Advanced Incident Response

3 Credits

This course is designed to build advanced skills to identify, counter and recover from threats to hosts and networks using recognized standards such as NIST 800-61. Students will learn how to:

Detect how and when a breach occurred.
Identify compromised and affected systems.
Perform damage assessments and determine what was stolen or changed.
Contain and remediate incidents.
Develop key sources of threat intelligence.
Hunt down additional breaches using the knowledge of the adversary.
Use well-known formal guidelines (i.e., Daubert standard) for developing a forensic investigation.
Use DRP and BCP planning to recover from an incident.