Windows Enterprise Incident Response

Windows Enterprise Incident Response is an intensive two-day course designed to teach the fundamental investigative techniques and digital forensics skills needed to respond to complex intrusions by motivated and persistent attackers. The class is built upon a series of hands-on labs that highlight the phases of a targeted attack, key sources of evidence, and the forensic analysis know-how required to analyze them. Created and taught by consultants who do this work daily, this class is based on first-hand experience responding to incidents all around the world for major organizations. At Mandiant, we investigate the incidents that matter, and we're bringing that knowledge to the students of this class.