Incident Response and Digital Forensics

A rapid, well-executed Incident Response (IR) capability is critical for minimising the financial and reputational damage of a cyber attack. This course provides a hands-on, procedural deep dive into the full incident response lifecycle, from preparation to post-incident review. Participants will master forensic collection techniques, malware analysis basics, and evidence handling to support legal requirements. The focus is on developing robust playbooks, leading effective cross-functional response teams, and conducting thorough post-mortems to ensure continuous security posture improvement.