EC-Council Certified Incident Handler (ECIH)

Information Security Concepts

Information Security Threats and Attack Vectors

Information Security Incident

Incident Management

Vulnerability Management

Threat Assessment

Risk Management

Incident Response Automation and Orchestration

Handling and Response Best Practices

Overview of Standards

Cybersecurity Frameworks

Laws in Incident Handling

Incident Handling and Legal Compliance

Preparation for Incident Handling and Response

Incident Recording and Assignment

Incident Triage

Notification

Containment

Evidence Gathering and Forensics Analysis

Eradication

Recovery

Post-Incident Activities

Introduction to Computer Forensics

Forensic Readiness

First Response

Digital Evidence

Understanding the Principles of Digital Evidence Collection

Collecting the Evidence

Securing the Evidence

Data Acquisition

The Volatile Evidence Collection

The Static Evidence Collection

Evidence Analysis

Anti-Forensics

Malware Incident Response

Handling Malware Incidents

Detecting Malware Incidents

Containment of Malware Incidents

Eradication of Malware Incidents

Recovery after Malware Incidents

Guidelines for Preventing Malware Incidents

Email Security Incidents

Preparation for Handling Email Security Incidents

Detection and Containment of Email Security Incidents

Eradication of Email Security Incidents

Recovery after Email Security Incidents

Network Security Incidents

Preparation for Handling Network Security Incidents

Detection and Validation of Network Security Incidents

Handling Unauthorized Access Incidents

Handling Inappropriate Usage Incidents

Handling Denial-of-Service Incidents

Handling Wireless Network Security Incidents

Overview of Web Application Incident Handling

Web Application Security Threats and Attacks

Preparation to Handle Web Application Security Incidents

Detecting and Analyzing Web Application Security Incidents

Containment of Web Application Security Incidents

Eradication of Web Application Security Incidents

Recovery from Web Application Security Incidents

Best Practices for Securing Web Applications

Cloud Computing Concepts

Overview of Handling Cloud Security Incidents

Cloud Security Threats and Attacks

Preparation for Handling Cloud Security Incidents

Detecting and Analyzing Cloud Security Incidents

Containment of Cloud Security Incidents

Eradication of Cloud Security Incidents

Recovering from Cloud Security Incidents

Best Practices Against Cloud-based Incidents

Introduction to Insider Threats

Handling Insider Threats

Analyzing Insider Threats

Containment of Insider Threats

Eradication of Insider Threats

Recovery after Insider Attacks

Best Practices Against Insider Threats