Cybersecurity
Incident Response Basics
A calm first hour: who to call, what to preserve, and how to write an incident note.
9 lessons11 minIntermediate
Overview
A calm first hour: who to call, what to preserve, and how to write an incident note.
- 9 lessons
- 11 min
- Intermediate
Curriculum
3 modules
- 1
The first hour
- Who is on the call9 min
- Contain before you explain9 min
- What not to delete9 min
- 2
Notes and evidence
- A timeline anyone can follow9 min
- Screenshots, logs and custody9 min
- Talking to people outside the team9 min
- 3
Practice incident
Includes hands-on lab- A leaked credential scenario9 min
- Write the incident note9 min
- Lab: list the next three actions14 min
Open sources & licenses
This curriculum is an original outline informed by these openly-licensed resources.