COURSE 062 · Technical
Incident response and cyber resilience
Free cybersecurity education for anyone who wants to protect people and technology. Study published lessons, examples and exercises without creating an account.
Loading this course…
Published lessons in this course
Each link opens the complete lesson on its own permanent page. New manuscript edits appear there after publication.
EN · 0 daily lessons · 18 full chapters
Chapter 1: Chapter 1 — Computing and service architectureChapter 2: Chapter 2 — Networks and protocolsChapter 3: Chapter 3 — Operating systems and identitiesChapter 4: Chapter 4 — Scripting and data formatsChapter 5: Chapter 5 — Security scope and evidenceChapter 6: Chapter 6 — Response system models and service dependenciesChapter 7: Chapter 7 — Event-source mapping and log retentionChapter 8: Chapter 8 — Identity, host and network failure modesChapter 9: Chapter 9 — Host and network evidence collection methodsChapter 10: Chapter 10 — Containment control configuration in a labChapter 11: Chapter 11 — Clock-offset and record-integrity verificationChapter 12: Chapter 12 — Laboratory: ingest and preserve synthetic incident recordsChapter 13: Chapter 13 — Troubleshooting conflicting alerts and missing telemetryChapter 14: Chapter 14 — Scripted triage with bounded inputs and audit logsChapter 15: Chapter 15 — Cross-service incident timeline integrationChapter 16: Chapter 16 — Technical documentation and safetyChapter 17: Chapter 17 — Laboratory: compare containment and restoration optionsChapter 18: Chapter 18 — Supervised technical incident case and handoff
COURSE 062
Incident response and cyber resilience
Loading the current book and lesson guide…
View worked answers
YOUR PROGRESS · OPTIONAL
Save this lesson
Reading is open without an account. Saving progress with optional sign-in will be added later.