First Incident Responder Training

This course aims to equip first responders with the foundations to be effective in responding to incidents.

• System/network/database administrators and other IT team members who might be called to assist in incident response

• Equip participants with foundational knowledge and skills that they could use to assist in the incident response within their own sphere of expertise and without being a forensic or IR specialist

• Attack/scenario driven detection/response
• Adversary tactics, techniques and procedures (TTP) from the MITRE ATT&CK framework

• Workshop on range of attacks & vectors used in the scenarios
• Adversary TTPs and how to detect/response to them
  • Reconnaissance
  • Initial entry 
  • Web application attack e.g. SQL Injection
  • Phishing attack
  • Persistence e.g. web shell
  • Command & Control
  • Credential attacks e.g. password spraying
  • Lateral movement
  • Exfiltration via covert channels
• Wrap up and debrief

For questions regarding the event, please contact the KPMG Business School.