Duration:
3 days
Course Synopsis:
This latest iteration of EC-Council’s Certified Incident Handler (E|CIH) program has been designed and developed in collaboration with cybersecurity and incident handling and response practitioners across the globe. It is a comprehensive specialistlevel program that imparts knowledge and skills that organizations need to effectively handle post breach consequences by reducing the impact of the incident, from both a financial and a reputational perspective.
Course Objectives:
At the end of this course, you will able to:
Understand the key issues plaguing the information security world
Learn to combat different types of cybersecurity threats, attack vectors, threat actors and their motives
Learn the fundamentals of incident management including the signs and costs of an incident
Understand the fundamentals of vulnerability management, threat assessment, risk management, and incident response automation and orchestration
Master all incident handling and response best practices, standards, cybersecurity frameworks, laws, acts, and regulations
Decode the various steps involved in planning an incident handling and response program
Gain an understanding of the fundamentals of computer forensics and forensic readiness
Comprehend the importance of the first response procedure including evidence collection, packaging, transportation, storing, data acquisition, volatile and static evidence collection, and evidence analysis
Understand anti-forensics techniques used by attackers to find cybersecurity incident cover-ups
Apply the right techniques to different types of cybersecurity incidents in a systematic manner including malware incidents, email security incidents, network security incidents, web application security incidents, cloud security incidents, and insider threat-related incidents
Course Prerequisites:
Candidate must either attend official E|CIH training through any of ECCouncil’s Authorized Training Centers (ATCs) or attend EC-Council’s live online training via iWeek or join our self-study program through iLearn
Candidates with a minimum of 1 year of work experience in the domain that would like to apply to take the exam directly without attending training are
The age requirement for attending the training or the exam is restricted to any candidate that is permitted by his/her country of origin/residency
If the candidate is under the legal age as permitted by his/her country of origin/residency, they are not eligible to attend the official training or eligible to attempt the certification exam unless they provide the accredited training center/EC-Council a written consent/indemnity of their parent/legal guardian and a supporting letter from their institution of higher learning. Only candidates from a nationally accredited institution of higher learning shall be considered
Who Should Attend:
Penetration Testers
Vulnerability Assessment Auditors
Risk Assessment Administrators
Network Administrators
Application Security Engineers
Cyber Forensic Investigators/Analyst and SOC Analyst
System Administrators/Engineers
Firewall Administrators and Network Managers/IT Managers
Domain 10: Handling and Responding to Endpoint Security Incidents
Examination Information
Length of exam 3 hours
Number of questions 100
Question format Multiple choice
Passing grade 70 Out of 100 Questions
Exam availability English
Testing center EC-Council exam portal
Programme scope, delivery arrangements and suitability are confirmed during enquiry.