Intelligence-driven Incident Response

About

The course teaches a modern approach to incidence response based on information provided by intelligence. The content covers both the response to IT security incidents and their prevention through early intervention. The investigation of IT security incidents is determined by the steps that an attacker is likely to have taken or will take. The focus is on the active defense against IT security incidents. Common models of intelligence-based incident response, such as the Diamond Model, the Kill Chain, and TTPs used by attackers are introduced and used to structure responses. After completing the module, students should be able to understand and mitigate procedures of an attacker.

Course leader

Prof. Dr. Tobias Schmidbauer; Contact: tobias.schmidbauer@th-nuernberg.de

Target group

Course is designed for: undergraduate and graduate students

Fields of study: any field covering fundamental knowledge of computer science, such as network technology and operating systems

Fee info