GIAC Certified Incident Handler Certification (GCIH) Training

About Course

The GIAC Certified Incident Handler (GCIH) Certification validates expertise in detecting, responding to, and mitigating cybersecurity incidents. It covers key areas such as incident handling, hacker exploits, malware, network forensics, and defensive techniques. Aimed at security professionals, incident responders, and system administrators, it demonstrates proficiency in managing security incidents, understanding attack vectors, and implementing effective countermeasures. This certification enhances career prospects in cybersecurity, incident response, and IT security management, ensuring that certified individuals can effectively protect and defend organizational assets against cyber threats. GCIH holders are equipped to lead incident response teams and develop robust security protocols.

Course Content

Module 1: Incident Handling: Identification

Get an understanding of important strategies to gather events, analyse them, and determine if you have an incident

Module 2: Incident Handling: Overview and Preparation

Module 3: Buffer Overflows and Format String Attacks

Module 4: Client Attacks

Module 5: Covering Tracks: Networks

Module 6: Covering Tracks: Systems

Module 7: Denial of Service Attacks

Module 8: Incident Handling: Containment

Module 9: Incident Handling: Eradication, Recovery, and Lessons Learned

Module 10: Network Attacks

Module 11: Password Attacks

Module 12: Reconnaissance

Module 13: Scanning: Discovery and Mapping

Module 14: Scanning: Techniques and Defence

Module 15: Session Hijacking and Cache Poisoning

Module 16: Techniques for maintaining access

Module 17: Web Application Attacks

Module 18: Worms, Bots & Bot-Nets

Add this certificate to your resume to demonstrate your skills & increase your chances of getting noticed.

About Course

What Will You Learn?

Course Content

Module 1: Incident Handling: Identification

Get an understanding of important strategies to gather events, analyse them, and determine if you have an incident

Module 2: Incident Handling: Overview and Preparation

Prove your understanding of Incident Handling, why it is important, and gain an understanding of best practices to take in preparationforan incident

Module 3: Buffer Overflows and Format String Attacks

Demonstrate an understanding of how buffer overflows andformatstring attacks work and how to defend against them

Module 4: Client Attacks

Gain an understanding of various client attacks and howtodefendagainst them

Module 5: Covering Tracks: Networks

Learn how attackers use tunnelling and covert channels tocover their tracks on a network, and the strategies involved in defendingagainst them

Module 6: Covering Tracks: Systems

Discover how attackers hide files and directories on Windows andLinux hosts and how they attempt to cover their tracks

Module 7: Denial of Service Attacks

Get a comprehensive understanding of the different kinds of Denial ofService attacks and how to defend against them

Module 8: Incident Handling: Containment

You’ll demonstrate an understanding of high-level strategies toprevent an attacker from causing further damage to the victimafterdiscovering the incident.

Module 9: Incident Handling: Eradication, Recovery, and Lessons Learned

Gain an understanding of the general approaches to get ridof theattacker’s artefacts on compromised machines, the general strategyto safely restore operations, and the importance of the incident report and lessons learned meetings

Module 10: Network Attacks

You’ll get an understanding of various network attacks andhowtodefend against them

Module 11: Password Attacks

Prove your detailed understanding of the three methods of passwordcracking

Module 12: Reconnaissance

Demonstrate your understanding of public and open sourcereconnaissance techniques

Module 13: Scanning: Discovery and Mapping

Get introduced to scanning fundamentals; to discover andmapnetworks and hosts, and reveal services and vulnerabilities

Module 14: Scanning: Techniques and Defence

Learn the techniques and tools used in scanning, and howtoresponse and prepare against scanning

Module 15: Session Hijacking and Cache Poisoning

Demonstrate an understanding of tools and techniques usedtoperform session hijacking and cache poisoning, and howtorespondand prepare against these attacks

Module 16: Techniques for maintaining access

Learn how Trojan horses and rootkits operate, what their capabilitiesare and how to defend against them

Module 17: Web Application Attacks

Demonstrate an understanding of the value of the Open WebApplication Security Project (OWASP), as well as different WebAppattacks such as account harvesting, SQL injection, Cross-SiteScripting and other Web Session attacks

Module 18: Worms, Bots & Bot-Nets

Demonstrate a detailed understanding of what worms, bots andbot-nets are, and how to protect against them

Earn a certificate