Certified Incident Handler (ECIH)

EC-Council Certified Incident Handler (ECIH) is a hands-on, Instructor-led, comprehensive ‘Specialist’ level course that presents a structured approach for effective handling and responding to cyber security incidents. The course will help students gain in-depth knowledge and skills in incident handling and response preparation, incident validation and prioritization, incident escalation and notification, forensic evidence gathering and analysis, incident containment, systems recovery, and incident eradication.

Students who successfully complete this class will be able to:

1. Identify various types of cyber security threats, attack vectors, threat actors and their motives, goals, and objectives of cyber security attacks

2. Understand fundamentals of incident management, vulnerability management, threat assessment, risk management, and incident response automation and orchestration

3. Compare and Contrast different incident handling and response best practices, standards, cybersecurity frameworks, laws, acts, and regulations

4. Analyze various steps involved in planning incident handling and response program

5. Comprehend fundamentals of computer forensics, forensic readiness and the importance of first response and first response procedure

6. Learn how to handle and respond to different types of cybersecurity incidents in a systematic way