{ "id": "1c059cf9-e0a3-4d5f-8aa9-cbfc8e5981ed", "tags": [ "Digital Forensics", "endpoint analysis", "evtxecmd", "Incident Response", "log analysis", "Network Analysis", "pcap analysis", "splunk", "windows logging", "Wireshark" ], "images": { "main_image_url": "https://courses.assets.ine.com/courses/images/1c059cf9-e0a3-4d5f-8aa9-cbfc8e5981ed/original.jpg", "small_image_url": "https://courses.assets.ine.com/fit-in/800x800/courses/images/1c059cf9-e0a3-4d5f-8aa9-cbfc8e5981ed/original.jpg", "medium_image_url": "https://courses.assets.ine.com/fit-in/1200x1200/courses/images/1c059cf9-e0a3-4d5f-8aa9-cbfc8e5981ed/original.jpg", "main_image_resize_url_template": "https://courses.assets.ine.com/fit-in/{w}x{h}/courses/images/1c059cf9-e0a3-4d5f-8aa9-cbfc8e5981ed/original.jpg" }, "direct_passes": [ "1f92d62a-53a9-4b4d-b650-46a019b7fdfd", "07bf99fe-f021-41a7-a951-0f4f577d7451", "55cec27a-6fce-4d9c-a33d-d7cc31a2ac41", "ec55679f-b724-4b92-a689-6880993bef89", "8d4ab297-9c35-443c-8ef3-efdd98cd43bc", "65637ca1-1b2b-487c-b876-3b484901bcd8" ], "has_trackable_content": true, "files": [], "files_uuids": [ "c1d59275-8d02-4681-89d0-8915ca9314d1" ], "related_learning_paths": [ "ba1ab597-6d57-4038-9d4e-a7af271aa18b" ], "summary": { "total_groups": 5, "total_videos": 24, "total_labs": 8, "total_iframes": 0, "total_quizzes": 22, "total_exercises": 0 }, "learning_paths": [ { "id": "ba1ab597-6d57-4038-9d4e-a7af271aa18b", "name": "Incident Handling & Response Professional (New!)", "slug": "incident-handling-response-professional-new" } ], "created": "2025-04-15T20:45:43.027490Z", "modified": "2025-06-30T21:23:16.557850Z", "status": "published", "status_changed": "2025-06-30T21:22:30.383085Z", "name": "Incident Response: Analysis", "slug": "incident-response-analysis", "difficulty": "professional", "content": [ { "name": "Welcome", "content": [ { "name": "Overview", "content": [ { "uuid": "20401795-70b6-4408-999d-e15d08252289", "content_type": "video" } ], "content_type": "topic" } ], "content_type": "group" }, { "name": "Incident Analysis", "content": [ { "name": "Analysis Primer", "content": [ { "uuid": "361c0e32-7879-421e-8f4d-189eb40345fc", "content_type": "video" }, { "uuid": "a00630cc-ee15-4361-81c3-0155fbb2eae5", "content_type": "quiz" }, { "uuid": "8f14cad0-4f86-44d8-9acb-5e4488429f78", "content_type": "video" }, { "uuid": "979c75ca-8551-48d1-9a2d-857d32f4dfab", "content_type": "quiz" }, { "uuid": "b1f5ceb2-6063-4503-9519-0c807d3df19a", "content_type": "video" }, { "uuid": "668f2128-b085-4639-9c4a-09405af7d9ae", "content_type": "quiz" }, { "uuid": "509e6f2e-87bf-45ce-9f22-7aab35ff4c11", "content_type": "video" }, { "uuid": "9a00befb-a72b-4313-a72f-36b27fd53111", "content_type": "quiz" } ], "content_type": "topic" } ], "content_type": "group" }, { "name": "Endpoint Analysis", "content": [ { "name": "Endpoint Introduction", "content": [ { "uuid": "b491b736-2c09-41ac-9e49-754f051b5251", "content_type": "video" }, { "uuid": "6b8b5072-f1e4-4282-ba36-bfbdb1aabb70", "content_type": "quiz" }, { "uuid": "9ad5e3ef-9deb-4e85-b553-c4276e0f3813", "content_type": "video" }, { "uuid": "473795f0-3e60-4ecc-9adc-f1caeea66842", "content_type": "quiz" } ], "content_type": "topic" }, { "name": "Log Analysis", "content": [ { "uuid": "548f5182-7fd1-4a98-848e-1cbf4eee1112", "content_type": "video" }, { "uuid": "a8510e13-caad-4881-9990-f7d4a5748e1a", "content_type": "quiz" }, { "uuid": "bc4cbda8-1a45-458e-a43b-63d280249e2c", "content_type": "video" }, { "uuid": "94470fcd-9b82-4f6b-af56-492edc07177c", "content_type": "quiz" }, { "uuid": "1b4bae46-82fe-4730-b1d5-da3503acaa35", "content_type": "lab" }, { "uuid": "756eebe1-454c-42f7-820b-b3d34582cdb7", "content_type": "video" }, { "uuid": "793bf7d8-ef4e-43ce-affb-e784a0a66304", "content_type": "quiz" }, { "uuid": "69dd2ef3-797d-4a0c-ba54-34c63544f346", "content_type": "lab" } ], "content_type": "topic" }, { "name": "Windows Event Log Analysis", "content": [ { "uuid": "10618822-0b28-4fd4-95dd-7e084f279a7f", "content_type": "video" }, { "uuid": "b697d327-2b54-48ef-bd40-834df9462eb3", "content_type": "quiz" }, { "uuid": "bf90fb90-d858-4ffe-84c6-d8376651eadb", "content_type": "video" }, { "uuid": "ff55e831-c27d-4675-b658-72b1601383f3", "content_type": "quiz" }, { "uuid": "6a802445-ac67-41ad-855b-692813ccc0d5", "content_type": "lab" }, { "uuid": "b7fffde7-b7eb-4c1f-b31a-a5074cff5a3c", "content_type": "video" }, { "uuid": "a170a4bc-728e-4e67-b5cb-04bd9f447318", "content_type": "quiz" }, { "uuid": "2b8f0085-48f8-4dce-94be-3af93e65076f", "content_type": "video" }, { "uuid": "2cc55558-26f7-4822-98b8-ab439bf3b06e", "content_type": "quiz" }, { "uuid": "c5345ada-e82a-4e0d-bf7f-e9a8ebb792ff", "content_type": "video" }, { "uuid": "0c195c5f-53e3-4358-96b2-81716487d09f", "content_type": "quiz" }, { "uuid": "e6adc80f-8d82-4811-b704-5fc9c89d362d", "content_type": "video" }, { "uuid": "58c24d09-9bcf-4526-92f5-430feb28cfb7", "content_type": "quiz" }, { "uuid": "98e0287d-c885-4efb-868f-f39a1e4ee798", "content_type": "video" }, { "uuid": "e3616c53-9be0-4213-9067-e7d8768e8d47", "content_type": "quiz" }, { "uuid": "924bd007-82e7-4175-88a3-33e8981b9c2b", "content_type": "lab" } ], "content_type": "topic" } ], "content_type": "group" }, { "name": "Network Analysis", "content": [ { "name": "Network Introduction", "content": [ { "uuid": "54be68ef-26b1-4eb4-9514-76f34be32a72", "content_type": "video" }, { "uuid": "9e4e4b45-969b-4c43-ab89-7b32b2564e86", "content_type": "quiz" }, { "uuid": "24555fe6-3eb9-438b-b4d6-1f0e469cf241", "content_type": "video" }, { "uuid": "725465e7-58f2-4cce-bf38-5f31055bc87c", "content_type": "quiz" } ], "content_type": "topic" }, { "name": "Network Traffic Analysis", "content": [ { "uuid": "e17d0583-a38f-42ee-9c47-0b49e9f0b96e", "content_type": "video" }, { "uuid": "7fa81ff6-1bd1-491e-865d-8dbe017a1cbb", "content_type": "quiz" }, { "uuid": "fd23b229-3b7c-4067-8559-c55901ea1c51", "content_type": "lab" }, { "uuid": "033df255-714c-4e7e-928d-26d547ff9670", "content_type": "video" }, { "uuid": "c0d388a6-f796-415b-8cf4-005be8a128bf", "content_type": "quiz" }, { "uuid": "b89a328f-24c3-4e1a-a074-0cc0d72af87d", "content_type": "lab" }, { "uuid": "4bd75480-c694-421e-a991-986b7c2ab341", "content_type": "video" }, { "uuid": "c5ac07f3-2eae-4c91-87a8-be238ec8cfd8", "content_type": "quiz" }, { "uuid": "e9205cb4-1d5a-4ac5-8faf-b238764132f4", "content_type": "lab" }, { "uuid": "542edbcc-643a-4383-86d3-fefc3a5b0c37", "content_type": "video" }, { "uuid": "7af8c767-26b1-4095-b329-c1573069ea37", "content_type": "quiz" }, { "uuid": "46776acb-56e4-4632-abfe-4bbbf7d49987", "content_type": "lab" } ], "content_type": "topic" } ], "content_type": "group" }, { "name": "Goodbye", "content": [ { "name": "Summary", "content": [ { "uuid": "5a8434bb-508d-49b5-8499-d9f4d4119c1c", "content_type": "video" } ], "content_type": "topic" } ], "content_type": "group" } ], "url": "https://my.ine.com/course/empty-shell-to-use/1c059cf9-e0a3-4d5f-8aa9-cbfc8e5981ed", "trailer_jwplayer_id": "QOlqrvt0", "description": "Building on the foundations of the previous course, Incident Response: Detection, this course guides you through key analysis phases, including deep-dive investigations, evidence triage, and log analysis. You\u2019ll learn how to interpret endpoint and network data, distinguish between live and dead-box analysis, and use tools like Splunk, Wireshark, and EvtxECmd. By mastering techniques for analyzing PCAPs, system logs, and network activity, you'll be equipped to respond confidently to complex incidents and uncover critical forensic insights.", "short_description": "", "published_date": "2025-06-30T21:22:30.370960Z", "auto_publish_at": null, "duration_in_seconds": 57200, "is_featured": false, "has_sample_content": false, "has_cc": false, "under_construction": false, "cpe_credits": 21, "has_skill_check_labs": false, "company": { "id": "a491bc32-c056-4946-9169-cc053387bada", "name": "INE" }, "vendor": { "id": "178dafe4-8894-4f35-a203-4dfbf47db6eb", "name": "INE" }, "main_learning_area": "3e1aa06f-2e9f-4789-b50d-aa027ad8dcfa", "bootcamp_origin": null, "categories": [ { "id": "044b1d14-dd3b-46e2-8d37-c66626f2ee32", "name": "Incident Handling & Response" } ], "learning_areas": [ { "id": "3e1aa06f-2e9f-4789-b50d-aa027ad8dcfa", "name": "Cyber Security" } ], "instructors": [ { "id": "3b828fe9-356d-47fd-a7bf-02045b20c1d4", "name": "Alexis Ahmed", "bio": "Alexis Ahmed is an experienced penetration tester and security researcher with over 7 years of experience in the cybersecurity industry. He started off his career as a Linux system administrator and soon discovered a passion and aptitude for security and transitioned into a junior penetration tester role. In 2017, he founded HackerSploit, a cybersecurity consultancy company that specializes in penetration testing and security training, where he currently works as a senior penetration tester and trainer. Alexis has multiple cybersecurity certifications, ranging from the CEH, eJPT, and Sec+ to OSCP, and is a certified ISO 27001 associate. He is also an experienced DevSecOps engineer and helps companies secure their container and cloud infrastructure.\r\n\r\nIn the Infosec & cybersecurity community, Alexis is better known as HackerSploit. That is his platform as a content creator on YouTube. His channel has a massive audience of over 600,000 subscribers where he delivers training content related to penetration testing, red teaming, Linux security, and malware analysis.", "certifications": [], "profile_img_url": "https://assets.ine.com/instructors/ine-alexis-ahmed-final.jpg", "twitter_username": "" } ], "skills": [], "technologies": [], "user_status": { "progress": 0.0, "has_trackable_content": true, "total_videos": 24, "finished_videos": 0, "total_quizzes": 22, "finished_quizzes": 0, "total_labs": 0, "finished_labs": 0, "total_links": 0, "finished_links": 0, "total_exercises": 0, "finished_exercises": 0, "total_iframes": 0, "finished_iframes": 0, "is_active": false, "prompt_review_50_perc_completion": false, "prompt_review_90_perc_completion": false, "last_activity_date": null, "started_date": null, "finished_date": null }, "access": { "related_passes": [ { "id": "1f92d62a-53a9-4b4d-b650-46a019b7fdfd", "name": "B2B Enterprise" }, { "id": "55cec27a-6fce-4d9c-a33d-d7cc31a2ac41", "name": "B2B Enterprise + Lab experience" }, { "id": "07bf99fe-f021-41a7-a951-0f4f577d7451", "name": "B2B Professional" }, { "id": "ec55679f-b724-4b92-a689-6880993bef89", "name": "B2C Individual" }, { "id": "8d4ab297-9c35-443c-8ef3-efdd98cd43bc", "name": "B2C Premium" }, { "id": "65637ca1-1b2b-487c-b876-3b484901bcd8", "name": "Cyber Security" } ], "user_passes": [ { "id": "07bf99fe-f021-41a7-a951-0f4f577d7451", "name": "B2B Professional" } ], "has_access": true, "available_content_types": [ "exercise", "iframe", "lab:azure", "lab:els", "lab:github", "lab:pta", "quiz", "video" ] }, "user_rating": null }