{ "id": "cf6afcee-12ce-45ea-829d-2918345ac5cf", "tags": [ "cybersecurity incidents", "cybersecurity preparation", "incident management", "Incident Response", "incident response policy", "IR frameworks", "IR playbooks", "NIST IR process", "SANS IR process", "TheHive platform" ], "images": { "main_image_url": "https://courses.assets.ine.com/courses/images/cf6afcee-12ce-45ea-829d-2918345ac5cf/original.jpg", "small_image_url": "https://courses.assets.ine.com/fit-in/800x800/courses/images/cf6afcee-12ce-45ea-829d-2918345ac5cf/original.jpg", "medium_image_url": "https://courses.assets.ine.com/fit-in/1200x1200/courses/images/cf6afcee-12ce-45ea-829d-2918345ac5cf/original.jpg", "main_image_resize_url_template": "https://courses.assets.ine.com/fit-in/{w}x{h}/courses/images/cf6afcee-12ce-45ea-829d-2918345ac5cf/original.jpg" }, "direct_passes": [ "1f92d62a-53a9-4b4d-b650-46a019b7fdfd", "55cec27a-6fce-4d9c-a33d-d7cc31a2ac41", "ec55679f-b724-4b92-a689-6880993bef89", "8d4ab297-9c35-443c-8ef3-efdd98cd43bc", "65637ca1-1b2b-487c-b876-3b484901bcd8", "07bf99fe-f021-41a7-a951-0f4f577d7451" ], "has_trackable_content": true, "files": [], "files_uuids": [ "bfd7ee20-f3d5-4b73-bcca-c0d67d91d355" ], "related_learning_paths": [ "ba1ab597-6d57-4038-9d4e-a7af271aa18b" ], "summary": { "total_groups": 4, "total_videos": 21, "total_labs": 0, "total_iframes": 0, "total_quizzes": 19, "total_exercises": 0 }, "learning_paths": [ { "id": "ba1ab597-6d57-4038-9d4e-a7af271aa18b", "name": "Incident Handling & Response Professional (New!)", "slug": "incident-handling-response-professional-new" } ], "created": "2025-03-11T14:14:29.703627Z", "modified": "2025-06-05T19:52:35.920204Z", "status": "published", "status_changed": "2025-05-30T13:01:10.875859Z", "name": "Incident Response: Preparation", "slug": "incident-response-preparation", "difficulty": "professional", "content": [ { "name": "Welcome", "content": [ { "name": "Overview", "content": [ { "uuid": "1153e8db-219a-41ee-8917-4a35c38d7ff7", "content_type": "video" } ], "content_type": "topic" } ], "content_type": "group" }, { "name": "Incident Response", "content": [ { "name": "IR Introduction", "content": [ { "uuid": "f51bbc64-d91e-46a9-b8eb-3d9e831e421e", "content_type": "video" }, { "uuid": "6b919fa0-2980-4fd3-ab19-daf1b33d69ac", "content_type": "quiz" }, { "uuid": "99628b87-90bb-452b-9a6a-2244d5cfbfd5", "content_type": "video" }, { "uuid": "27552144-0754-481b-a350-48adc38db2a7", "content_type": "quiz" }, { "uuid": "6672b7c4-45f9-4ccd-aeef-1c57edd9a655", "content_type": "video" }, { "uuid": "fc938c7b-fe22-42d4-b2a1-1343c2aacb6b", "content_type": "quiz" } ], "content_type": "topic" }, { "name": "IR Teams", "content": [ { "uuid": "3c700dc6-36bd-4a2f-839d-035859bb6ad2", "content_type": "video" }, { "uuid": "2c3d798a-074a-49ba-a884-0dbfbcbb8b55", "content_type": "quiz" }, { "uuid": "691ba2da-0a78-46c2-9dfb-54261799f5e9", "content_type": "video" }, { "uuid": "12176044-4671-407f-86a8-c289a7eb6bd1", "content_type": "quiz" }, { "uuid": "2678b19e-a374-4632-a8aa-729c9d99487d", "content_type": "video" }, { "uuid": "df01bbcd-79d3-49f7-bbc4-e1b127e7abd5", "content_type": "quiz" } ], "content_type": "topic" }, { "name": "IR Process", "content": [ { "uuid": "01fee613-b614-48bd-a064-c6322cb3adc5", "content_type": "video" }, { "uuid": "ee78fd80-30d3-4b1e-a8aa-bce2059927da", "content_type": "quiz" }, { "uuid": "5e826251-9dda-492d-a8cc-4b6e4277076e", "content_type": "video" }, { "uuid": "45d3f032-a51f-4cd2-85c2-b4190d5be5d5", "content_type": "quiz" }, { "uuid": "428c54c7-9308-4473-8c93-94e36d434620", "content_type": "video" }, { "uuid": "d68f817b-031f-4f29-a394-f7c7ec498838", "content_type": "quiz" } ], "content_type": "topic" } ], "content_type": "group" }, { "name": "Preparation", "content": [ { "name": "Preparation Introduction", "content": [ { "uuid": "aa7e7696-ef6f-4efd-ae57-87cf1e1ea5b1", "content_type": "video" }, { "uuid": "9ebcf706-1dc6-475f-b8de-c31a797fab92", "content_type": "quiz" }, { "uuid": "98265867-7ee4-4d87-b434-84d27c8aec2b", "content_type": "video" }, { "uuid": "85538d14-a20a-4a26-9e5d-4efb29ec9cc2", "content_type": "quiz" } ], "content_type": "topic" }, { "name": "Processes", "content": [ { "uuid": "333187d6-aa9f-463d-b68e-e3220eb3e3f9", "content_type": "video" }, { "uuid": "27d428b9-79fe-4653-a7f1-1f6fc728381a", "content_type": "quiz" }, { "uuid": "05b21019-ad41-4bbc-a291-d307de80bbc6", "content_type": "video" }, { "uuid": "f1712f81-f624-4484-a367-cf8166891774", "content_type": "quiz" }, { "uuid": "3d92f80d-0514-4fc6-9c98-550e8500929f", "content_type": "video" }, { "uuid": "759f29fa-b640-402e-b564-8a3a9fcf3950", "content_type": "quiz" }, { "uuid": "4c8f7357-e2ba-4b5f-a791-dd56a7dac299", "content_type": "video" }, { "uuid": "4d5c0893-ae62-4ae2-b04b-dec2bf92a025", "content_type": "quiz" } ], "content_type": "topic" }, { "name": "Technology", "content": [ { "uuid": "64c62427-5386-4ead-9f6f-dd0f8b3ca732", "content_type": "video" }, { "uuid": "65878393-4234-4e52-83ef-2f81dc07c015", "content_type": "quiz" }, { "uuid": "5900df29-4d60-4d06-a9f2-0fa188514a5d", "content_type": "video" }, { "uuid": "f56b149d-c16a-4def-97e9-568e91cdde05", "content_type": "quiz" }, { "uuid": "c3ff137a-808a-49e1-af19-2b8ac54ba390", "content_type": "video" }, { "uuid": "7a062a24-1f41-4f63-8524-d62306291a22", "content_type": "quiz" }, { "uuid": "ad872370-9d73-44a2-875e-d43819340190", "content_type": "video" }, { "uuid": "9bde593d-24bd-4fb8-aabd-f6a539daeea3", "content_type": "quiz" } ], "content_type": "topic" } ], "content_type": "group" }, { "name": "Goodbye", "content": [ { "name": "Summary", "content": [ { "uuid": "a55d5cba-8ad6-4f4e-8af7-3224666bba95", "content_type": "video" } ], "content_type": "topic" } ], "content_type": "group" } ], "url": "https://my.ine.com/course/incident-detection-response/cf6afcee-12ce-45ea-829d-2918345ac5cf", "trailer_jwplayer_id": "FgrlD0j9", "description": "This course will introduce you to the core principles, teams, and frameworks that define modern incident response. This course begins by providing you with an overview of why incident response is critical, the types of incidents and attack vectors organizations face, and the various structures and roles of IR teams.\u00a0It then explores industry-standard frameworks like the NIST and SANS IR processes, followed by practical guidance on developing IR policies, plans, playbooks, and responsibility matrices.\u00a0The course concludes by showing you how to build a technological backbone for response, in the form of developing an Incident Response Toolkit, and how to use real-world Incident Management platforms like TheHive.\u00a0This course is ideal for aspiring incident responders, SOC analysts, and cybersecurity professionals seeking a formal introduction to modern incident response, with a specific focus on building a structured and practical understanding of the Preparation phase of IR.", "short_description": "", "published_date": "2025-05-30T13:01:10.847985Z", "auto_publish_at": null, "duration_in_seconds": 31981, "is_featured": false, "has_sample_content": false, "has_cc": false, "under_construction": false, "cpe_credits": 11, "has_skill_check_labs": false, "company": { "id": "a491bc32-c056-4946-9169-cc053387bada", "name": "INE" }, "vendor": { "id": "178dafe4-8894-4f35-a203-4dfbf47db6eb", "name": "INE" }, "main_learning_area": "3e1aa06f-2e9f-4789-b50d-aa027ad8dcfa", "bootcamp_origin": null, "categories": [ { "id": "044b1d14-dd3b-46e2-8d37-c66626f2ee32", "name": "Incident Handling & Response" } ], "learning_areas": [ { "id": "3e1aa06f-2e9f-4789-b50d-aa027ad8dcfa", "name": "Cyber Security" } ], "instructors": [ { "id": "3b828fe9-356d-47fd-a7bf-02045b20c1d4", "name": "Alexis Ahmed", "bio": "Alexis Ahmed is an experienced penetration tester and security researcher with over 7 years of experience in the cybersecurity industry. He started off his career as a Linux system administrator and soon discovered a passion and aptitude for security and transitioned into a junior penetration tester role. In 2017, he founded HackerSploit, a cybersecurity consultancy company that specializes in penetration testing and security training, where he currently works as a senior penetration tester and trainer. Alexis has multiple cybersecurity certifications, ranging from the CEH, eJPT, and Sec+ to OSCP, and is a certified ISO 27001 associate. He is also an experienced DevSecOps engineer and helps companies secure their container and cloud infrastructure.\r\n\r\nIn the Infosec & cybersecurity community, Alexis is better known as HackerSploit. That is his platform as a content creator on YouTube. His channel has a massive audience of over 600,000 subscribers where he delivers training content related to penetration testing, red teaming, Linux security, and malware analysis.", "certifications": [], "profile_img_url": "https://assets.ine.com/instructors/ine-alexis-ahmed-final.jpg", "twitter_username": "" } ], "skills": [], "technologies": [], "user_status": { "progress": 0.0, "has_trackable_content": true, "total_videos": 21, "finished_videos": 0, "total_quizzes": 19, "finished_quizzes": 0, "total_labs": 0, "finished_labs": 0, "total_links": 0, "finished_links": 0, "total_exercises": 0, "finished_exercises": 0, "total_iframes": 0, "finished_iframes": 0, "is_active": false, "prompt_review_50_perc_completion": false, "prompt_review_90_perc_completion": false, "last_activity_date": null, "started_date": null, "finished_date": null }, "access": { "related_passes": [ { "id": "1f92d62a-53a9-4b4d-b650-46a019b7fdfd", "name": "B2B Enterprise" }, { "id": "55cec27a-6fce-4d9c-a33d-d7cc31a2ac41", "name": "B2B Enterprise + Lab experience" }, { "id": "07bf99fe-f021-41a7-a951-0f4f577d7451", "name": "B2B Professional" }, { "id": "ec55679f-b724-4b92-a689-6880993bef89", "name": "B2C Individual" }, { "id": "8d4ab297-9c35-443c-8ef3-efdd98cd43bc", "name": "B2C Premium" }, { "id": "65637ca1-1b2b-487c-b876-3b484901bcd8", "name": "Cyber Security" } ], "user_passes": [ { "id": "07bf99fe-f021-41a7-a951-0f4f577d7451", "name": "B2B Professional" } ], "has_access": true, "available_content_types": [ "exercise", "iframe", "lab:azure", "lab:els", "lab:github", "lab:pta", "quiz", "video" ] }, "user_rating": null }