GIAC - Enterprise Incident Response (GEIR)

Kesto

Kesto:

Vain 2 päivän

Menetelmä

Menetelmä:

luokkahuone / Online / Hybridi

Seuraava päivä

Seuraava päivä:

10/2/2025 (Maanantai)

Overview

This accelerated GIAC Enterprise Incident Response (GEIR) certification validates a practitioner's mastery of enterprise-class incident response and threat hunting tools and techniques. GEIR certification holders have demonstrated the ability to use analysis methodologies to understand attacker movement across varying functions and operating systems.


In just 2 days, you’ll also learn:

  • Incident Response Team Management and Coordination
  • Enterprise Incident Detection and Threat Hunting
  • Large Scale Event Correlation and Timeline Analysis
  • Multi-platform Artifact Analysis
  • Analysis of Windows Artifacts
  • Analysis of Linux Artifacts
  • Analysis of macOS Artifacts
  • Analysis of Container Artifacts
  • Analysis of Cloud Environment Artifacts

At the end of this course, you’ll sit the GIAC exam, and achieve your GIAC Enterprise Incident Response (GEIR) certification. Through Firebrand’s Lecture | Lab | Review methodology, you’ll get certified at twice the speed of the traditional training and get access to courseware, learn from certified instructors, and train in a distraction-free environment.

 

Audience

This course is ideal for:

  • Incident Response Team Leads and Advanced Practitioners
  • Threat Hunting Professionals
  • Experienced Digital Forensic Analysts
  • Enterprise Detection Engineers
  • Federal Agents and Law Enforcement Professionals
  • SANS DFIR Alumni looking to apply their forensic skills at scale.

8 syytä, miksi kannattaa hankkia Firebrand Trainingiltä:

  1. Koulutuksen ja todistuksen saaminen kestää vain 2 päivän. Meidän kanssamme saat -koulutuksen ja -todistuksen ennätysajassa. Todistuksen ansaitset koulutuskeskuksessamme osana intensiivistä ja nopeutettua koulutusta.
  2. Hintaan sisältyy kaikki.Kertamaksu kattaa kaikki kurssimateriaalit, kokeet, kuljetuksen, majoituksen ja ateriat ja tarjoaa kustannustehokkaimman tavan hankkia koulutus ja todistus. Ilman mitään lisäkustannuksia.
  3. Suorita tutkinto ensimmäisellä kerralla tai kertaa koulutus ilmaiseksi. Tämä on takuumme. Olemme varmoja, että läpäiset -kurssin ensimmäisellä kerralla. Mutta jos näin ei käy, voit tulla takaisin vuoden kuluttua ja maksaa vain majoituksesta ja kokeista. Kaikki muu on ilmaista.
  4. Opit enemmän.Päivä perinteisen koulutuksen tarjoajan kanssa on yleensä klo 9–17, mihin sisältyy pitkä lounastauko. Firebrand Trainingiltä saat vähintään 12 tuntia päivässä keskittynyttä ja häiriötöntä laatukoulutusaikaa opettajasi kanssa.
  5. Opit nopeammin. Yhdistämme 3 eri oppimistyyliä (visuaalisen|kuuloon perustuvan|kosketukseen perustuvan) tarjotaksemme materiaalin tavalla joka varmistaa, että opit nopeammin ja helpommin.
  6. Opiskelet huippujen kanssa.Olemme kouluttaneet ja sertifioineet 134.561 ammattilaista ja olemme kumppaneita kaikkien alan suurien nimien kanssa ja olemme saaneet lukuisia palkintoja, mm. Microsoftin Danmarki Vuoden koulutuspartneri 2010, 2011, 2012 ja 2013, Institue of IT Trainingin ”Training Company of the Year 2006, 2007, 2008” Englannissa, ISC(2):n ”Highest Performing Affiliate of the Year 2009 & 2010 – EMEA” sekä EC-Councilin ”Accredited Training Centre of the Year 2010 og 2011”, ”Newcomer of the Year 2011” ja ”Instructors Circle of Excellence”.
  7. Opit enemmän kuin pelkän teorian. Olemme kehittäneet kurssia edelleen käyttämällä laboratorioita, esimerkkitapauksia ja harjoittelukokeita varmistaaksemme, että osaat soveltaa uutta tietoa työympäristöön.
  8. Opit parhailta. Ohjaajamme kurssilla ovat alan parhaita. He tarjoavat ainutlaatuisen yhdistelmän asiantuntemusta, kokemusta ja intohimoa opetukseen.

Benefits

Curriculum

  • Module 1: Cloud Response and Analysis
  • Demonstrate a familiarity with popular cloud attack scenarios and display an understanding of common manual and automated techniques for identifying, extracting, and analyzing artifacts when responding to a cloud-based incident.
  • Module 2: Container DFIR Fundamentals
  • Demonstrate a basic understanding of container technology, a familiarity with common attack techniques performed against containers, and a foundational digital forensic and incident response strategy when responding to a container-based incident.
  • Module 3: Detecting Modern Attacks
  • Demonstrate an understanding of how to apply threat intelligence and information gathered through proactive threat hunting to support the detection and response to modern attacks.
  • Module 4: Enterprise Incident Response Management
  • Demonstrate an understanding of how to manage and conduct effective incident response within an enterprise environment and will display a familiarity with techniques used to address common operational challenges while performing large scale investigations.
  • Module 5: Enterprise Visibility and Incident Scoping
  • Demonstrate a familiarity with common data source types in an enterprise environment and will display an understanding of strategies to aggregate telemetry from a large volume of disparate resources in order to scope an incident.
  • Module 6: Foundational Cloud Concepts
  • Demonstrate an understanding of fundamental cloud concepts and a familiarity with the most common cloud services that enterprises use to support business operations.
  • Module 7: Linux DFIR Fundamentals
  • Demonstrate an understanding of digital forensics and incident response fundamentals for a Linux system, including foundational knowledge of the file system, locations and format of important logs, and key configuration files.
  • Module 8: Linux Essentials
  • Demonstrate a basic understanding of a Linux operating system, common challenges when securing and monitoring Linux systems, and popular platform-specific attack techniques across an attack lifecycle.
  • Module 9: macOS DFIR Fundamentals
  • Demonstrate an understanding of digital forensics and incident response fundamentals for a macOS system, including foundational knowledge of the file system, locations and format of important logs, and key configuration files.
  • Module 10: macOS Essentials
  • Demonstrate a basic understanding of a macOS operating system, common challenges when securing and monitoring macOS systems, and popular platform-specific attack techniques across an attack lifecycle.
  • Module 11: Rapid Response Triage at Scale
  • Demonstrate an understanding of how to efficiently collect, process, and analyze incident response triage data across a large volume of endpoints.

Exam Track

At the end of this accelerated course, you’ll sit the following exam at the Firebrand Training centre, covered Certification Guarantee:

GIAC Enterprise Incident Response (GEIR) exam

  • Duration: 3 hours
  • Format: 1 proctored exam
  • Number of questions: 82 questions
  • Passing score: Minimum passing score of 72%

What's Included

Prerequisites

There are no prerequisites for this accelerated course.

Arvioinnit

Olemme kouluttaneet kymmenen vuoden aikana yli 134.561 opiskelijaa. Heitä kaikkia on pyydetty arvioimaan pikakurssimme. Tällä hetkellä 94,80% on sitä mieltä, että Firebrand on ylittänyt heidän odotuksensa:

"Best way to fully focus for complex certifications while benefiting from the real-life experience of the instructor"
Anonymous. (4/9/2023 (Maanantai) - 8/9/2023 (Perjantai))

"The instructor has a wealth of knowledge in OT, controls and automation. This especially true within the Oil and Gas industry. The training was significantly enhanced through this real-world experience and his ability interact with the class to cover off syllabus topics."
Anonymous. (28/11/2022 (Maanantai) - 2/12/2022 (Perjantai))

"Ive used Firebrand several times now over multiple job roles. I found this course GICSP was the most interesting course so far. This was hugely down to the instructor's interaction with the team and his shared real life scenarios. He is very knowledgeable indeed and presents the course in such a manner he made the subject feel much easier than it was. Its obvious that he is both passionate and dedicated in what he does. I look forward to attending onsite next year with him as the tutor"
Dave white, Essar Oil. (28/11/2022 (Maanantai) - 2/12/2022 (Perjantai))

"The GICSP training was excellent!"
AS. (28/11/2022 (Maanantai) - 2/12/2022 (Perjantai))

"Firebrand are well organised and their facilities, accommodation and training rooms are more than fit for purpose. The all-inclusive course represents good value and I would not hesitate to recommend to a friend or colleague, and have already done so!"
P.J., EDF Energy. (26/4/2021 (Maanantai) - 30/4/2021 (Perjantai))

Kurssipäivämäärät

Alkaa

Loppuu

Saatavuus

Sijainti

Rekisteröidy

26/8/2024 (Maanantai)

27/8/2024 (Tiistai)

Päättynyt - Jätä palautetta

-

 

 

10/2/2025 (Maanantai)

11/2/2025 (Tiistai)

Rajoitettu määrä paikkoja

Maanlaajuinen

 

24/3/2025 (Maanantai)

25/3/2025 (Tiistai)

Paikkoja saatavilla

Maanlaajuinen

 

5/5/2025 (Maanantai)

6/5/2025 (Tiistai)

Paikkoja saatavilla

Maanlaajuinen

 

16/6/2025 (Maanantai)

17/6/2025 (Tiistai)

Paikkoja saatavilla

Maanlaajuinen

 

Uusimmat arvostelut opiskelijoiltamme