This course uses blended learning methods that include a balance of classroom lecture, hands-on laboratory exercises and the use of cyberterrorism response tools against real world simulated cyber-attacks. Students learn the proper steps of an incident response to include incident assessment, detection and analysis, and
the containing, eradicating, and recovering process from a system or network-based attack.

At the end of the course, the participants will be able to:
● define steps for handling cybersecurity attacks,
including incident assessment, detection and analysis
for security incidents, and containing, eradicating and
recovering from a system or network-based attack;
● Identify, define and practice with tools and resources
required in the cybersecurity incident response
process in order to accurately and successfully detect,
analyze and mitigate a cyberattack; and
● define the proper techniques used to properly review,