GIAC - Firebrand Training for GIAC Certified Incident Handler certification

Varaktighet:

Bara 5 dagar

Metod:

Klassrum / Uppkopplad / Hybrid

Nästa datum:

24/6/2024 (Måndag)

Overview

Get the skills you need to detect, respond to and resolve computer security incidents in just 5 days. On this accelerated GIAC Certified Incident Handler (GCIH) course, you'll develop the skills and knowledge needed to manage sensitive security incidents.

As organisations strive to improve their cyber security, Incident Handlers are increasingly in demand and the GCIH certification qualifies you for this critical role.

You’ll build knowledge of common attack techniques, vectors and tools as you learn how to defend and respond to potentially devastating cyber attacks. On this GCIH course, you’ll also learn:

The incident handling process
How to detect malicious applications and network activity
High-level containment strategies to prevent attackers causing further damage
Incident recovery and system restoration
How to detect and analyse system and network vulnerabilities

Firebrand's GCIH training will prepare you for the GIAC Certified Incident Handler (GCIH) exam and provides knowledge equivalent to the SANS SEC504: Hacker Tools, Techniques, Exploits and Incident Handling.

Firebrand’s unique Lecture | Lab | Review methodology will immerse you in your accelerated GCIH course as you combine GIAC curriculum with practical and technical hands-on labs. This is crucial as GIAC recommends hands-on experience with the technology covered by your certification.

This accelerated GCIH training is ideal for IT Incident Handlers, IT Operational Team Leaders, Managers of incident handling teams, IT Security staff, IT System administrators and IT Support staff.

Det tar bara ett ögonblick att se hur billig din kurs är...

Se priser

Sju anledningar till varför du bör välja din kurs med Firebrand Training

Två utbildningsalternativ. Välj mellan boende på plats med klassrumsundervisning eller onlinekurser
Du blir certifierad snabbt. Hos oss blir du utbildad rekordsnabbt
Vår kurs är heltäckande. En engångsavgift täcker alla kursmaterial, examina**, boende* och måltider*. Inga dolda extra kostnader.
Godkänn första gången eller träna om gratis. Detta är vår garanti. Vi är övertygade om att du kommer klara kursen på första försöket. Men om inte, kom tillbaka inom ett år och betala endast för boende, examina och tillkommande kostnader
Du kommer lära dig mer. En dag med en traditionell utbildningsleverantör brukar generellt pågå från kl. 9 till 17, med en lång paus för lunch. Med Firebrand Training får du minst 12 timmar/dag av kvalitativ inlärningstid med din instruktör
Du kommer lära dig snabbare. Sannolikheten är att du har en annan inlärningsstil än de omkring dig. Vi kombinerar visuella, auditiva och taktila stilar för att leverera materialet på ett sätt som säkerställer att du lär dig snabbare och enklare
Du kommer studera med de bästa. Vi har varit med på Training Industrys lista "Top 20 IT Training Companies of the Year" varje år sedan 2010. Förutom många fler utmärkelser har vi utbildat och certifierat över 100 000 yrkesverksamma

* Endast för boende på plats. Gäller inte för onlinekurser
** Vissa undantag gäller. Vänligen se Exam Track eller prata med våra experter

Benefits

Please Note

Examination vouchers not included for GIAC, CREST and CISSP CBK Review
On site testing not included for GIAC, CREST or ITIL Managers and Revision Certification Courses

Är du redo för kursen? Ta ett KOSTNADSFRITT test för att mäta och utvärdera din kunskap.

Kostnadsfritt Test

Curriculum

Incident Handling: Identification

Get an understanding of important strategies to gather events, analyse them, and determine if you have an incident

Incident Handling: Overview and Preparation

Prove your understanding of Incident Handling, why it is important, and gain an understanding of best practices to take in preparation for an incident

Buffer Overflows and Format String Attacks

Demonstrate an understanding of how buffer overflows and format string attacks work and how to defend against them

Client Attacks

Gain an understanding of various client attacks and how to defend against them

Covering Tracks: Networks

Learn how attackers use tunnelling and covert channels to cover their tracks on a network, and the strategies involved in defending against them

Covering Tracks: Systems

Discover how attackers hide files and directories on Windows and Linux hosts and how they attempt to cover their tracks

Denial of Service Attacks

Get a comprehensive understanding of the different kinds of Denial of Service attacks and how to defend against them

Incident Handling: Containment

You’ll demonstrate an understanding of high-level strategies to prevent an attacker from causing further damage to the victim after discovering the incident.

Incident Handling: Eradication, Recovery, and Lessons Learned

Gain an understanding of the general approaches to get rid of the attacker's artefacts on compromised machines, the general strategy to safely restore operations, and the importance of the incident report and lessons learned meetings

Network Attacks

You’ll get an understanding of various network attacks and how to defend against them

Password Attacks

Prove your detailed understanding of the three methods of password cracking

Reconnaissance

Demonstrate your understanding of public and open source reconnaissance techniques

Scanning: Discovery and Mapping

Get introduced to scanning fundamentals; to discover and map networks and hosts, and reveal services and vulnerabilities

Scanning: Techniques and Defence

Learn the techniques and tools used in scanning, and how to response and prepare against scanning

Session Hijacking and Cache Poisoning

Demonstrate an understanding of tools and techniques used to perform session hijacking and cache poisoning, and how to respond and prepare against these attacks

Techniques for maintaining access

Learn how Trojan horses and rootkits operate, what their capabilities are and how to defend against them

Web Application Attacks

Demonstrate an understanding of the value of the Open Web Application Security Project (OWASP), as well as different Web App attacks such as account harvesting, SQL injection, Cross-Site Scripting and other Web Session attacks

Worms, Bots & Bot-Nets

Demonstrate a detailed understanding of what worms, bots and bot-nets are, and how to protect against them

FAQs

Frequently asked questions

Q. How do I get my GIAC GCIH certification?

To achieve your GCIH certification, you must pass the GIAC Certified Incident Handler (GCIH) exam.

Q. How much does the accelerated GCIH course cost?

You can find the accelerated GCIH course price here.

Q. What are the GCIH course prerequisites?

There are no official prerequisites to take any GIAC certification, including GCIH. However, you should be aware of the technical level of the course you want to take.

For this GCIH course, you should possess knowledge of networking protocols, Windows Command Line, and an understanding of basic computer networking and security.

Q. Are GIAC exams open book?

Yes, GIAC exams are open book and you’re encouraged to take advantage of this.

Q. What happens if I fail my GCIH exam?

If you fail your GCIH exam, you’ll be subjected to a 30-day waiting period before you can sit the exam again. The 30-day period provides candidates with additional time that can be used to master certification knowledge.

Q. Are GIAC certifications recognised by employers?

GIAC certifications are a good indication of cyber security skill and knowledge and are used by employers to select employees for hiring and promotion.

GIAC certifications fill gaps in security knowledge and few other qualifications cover the same material. Plus, GIAC certifications also contain invaluable practical knowledge, proving you know how to perform the task required.

Q. What’s the average salary for a GCIH certified professional?

The average salary for a GIAC Certified Incident Handler (GCIH) professional is £60,000 in the UK, according to ITJobsWatch.

Q. What is GIAC Gold?

The GIAC Gold is a second level certification which requires completion of a technical paper covering an important area of security.

GIAC Gold demonstrates that a GIAC certification holder understands and can communicate their knowledge in key areas of information security.

Pass any GIAC certification and you’ll get the option to apply for GIAC Gold. Applicants will work closely with an advisor to develop a technical report.

If the report is approved, you will receive GIAC Gold status and you report will be accepted into the SANS Reading Room.

Q. What is the GIAC Advisory Board, and how can I join it?

Score an average of 90% or above on your GIAC certification exam and you’ll be invited to join the GIAC Advisory Board.

Exam Track

This accelerated GCIH course will prepare you for the following exam. The exam fee is not included in the course price; if you wish to take the exam, we’ll provide instructions on how to register with GIAC.

GIAC Certified Incident Handler (GCIH) exam

Number of Questions: 150
Duration: 4 hours
Type: Proctored Exam
Passing score: 73%

You will be required to renew your GCIH certification every four years through Continuing Professional Experience (CPE) credits.

What's Included

The following is included on your accelerated GCIH course:

Firebrand courseware

Prerequisites

You should possess:

An understanding of basic computer networking and security principles
Knowledge of networking protocols
Knowledge of the Windows command line

Är du redo för din Firebrand kurs?

Vi intervjuar alla potentiella deltagare om deras bakgrund, utbildning, certifiering och personliga inställning. Om du kommer igenom denna process så har du riktigt goda möjligheter att klara din certifiering.

Firebrand Training erbjuder en ambitiös utbildningsmiljö som förutsätter att du verkligen dedikerar dig till kursen. Ovanstående förkunskaper är endast vägledande, många deltagare med mindre erfarenhet men med en annan bakgrund eller kunskap har framgångsrikt genomfört sin utbildning hos Firebrand Training.

Om du funderar på huruvida du uppfyller rekommenderade förkunskaper vänligen ring oss på (0)8 44 68 27 85 och prata med en av våra utbildningsrådgivare som kan hjälpa dig.

Kundreferenser

Här är Firebrand Training recension avsnittet. Sedan 2001 har vi utbildat exakt 134.561 studenter och proffs och bett dem alla att recensera vår Accelerated Learning. För närvarande har, 96,41% sagt att Firebrand överträffade deras förväntningar.

Läs recensioner från avslutade accelereradekurser nedan eller besök Firebrand Stories för skriftliga och videointervjuer med våra tidigare alumni.

"Best way to fully focus for complex certifications while benefiting from the real-life experience of the instructor"
Anonymous. (4/9/2023 (Måndag) till 8/9/2023 (Fredag))

"The instructor has a wealth of knowledge in OT, controls and automation. This especially true within the Oil and Gas industry. The training was significantly enhanced through this real-world experience and his ability interact with the class to cover off syllabus topics."
Anonymous. (28/11/2022 (Måndag) till 2/12/2022 (Fredag))

"Ive used Firebrand several times now over multiple job roles. I found this course GICSP was the most interesting course so far. This was hugely down to the instructor's interaction with the team and his shared real life scenarios. He is very knowledgeable indeed and presents the course in such a manner he made the subject feel much easier than it was. Its obvious that he is both passionate and dedicated in what he does. I look forward to attending onsite next year with him as the tutor"
Dave white, Essar Oil. (28/11/2022 (Måndag) till 2/12/2022 (Fredag))

"The GICSP training was excellent!"
AS. (28/11/2022 (Måndag) till 2/12/2022 (Fredag))

"Firebrand are well organised and their facilities, accommodation and training rooms are more than fit for purpose. The all-inclusive course represents good value and I would not hesitate to recommend to a friend or colleague, and have already done so!"
P.J., EDF Energy. (26/4/2021 (Måndag) till 30/4/2021 (Fredag))

Kursdatum

Startar	Slutar	Tillgänglighet	Plats
19/2/2024 (Måndag)	23/2/2024 (Fredag)	Avslutad - Lämna feedback	-
24/6/2024 (Måndag)	28/6/2024 (Fredag)	Väntelista	Rikstäckande
5/8/2024 (Måndag)	9/8/2024 (Fredag)	Begränsat antal platser	Rikstäckande
16/9/2024 (Måndag)	20/9/2024 (Fredag)	Platser tillgängliga	Rikstäckande
28/10/2024 (Måndag)	1/11/2024 (Fredag)	Platser tillgängliga	Rikstäckande
9/12/2024 (Måndag)	13/12/2024 (Fredag)	Platser tillgängliga	Rikstäckande