|
所在平台: Coursera |
课程主页: https://www.coursera.org/learn/ibm-incident-response-digital-forensics
课程评论：没有评论
课程名称：事件响应与数字取证 课程概述：这门由IBM提供的课程将教授您管理和调查网络安全事件所需的重要技能。您将学习关键主题，包括事件响应框架（NIST和SANS）、数字取证方法论以及处理数字证据的最佳实践。通过实践实验和项目，您将获得检测、分析和缓解网络安全威胁的实际经验，以及使用行业标准工具进行取证调查的能力。 课程大纲： 1. **事件响应** - 描述：本模块专注于事件响应的概念和重要性。您将学习事件响应的关键准备步骤及在事件响应过程中彻底记录的重要性。深入探讨识别和理解安全事件的检测与分析技术，随后进行遏制、根除和恢复策略，以防止进一步损害并恢复系统。本模块还强调增强响应工作的工具和自动化技术，并涵盖事件后活动。完成本模块后，您将能够有效管理和缓解安全事件。 2. **数字取证** - 描述：本模块探讨数字取证和调查的基本方面。提供数字取证的概述，强调其在调查网络事件中的重要性。您将学习数据收集与检查方法，包括使用Cowrie进行日志调查。该模块涵盖处理数字证据以确保其完整性的关键主题、分析和报告发现，以及理解取证数据文件。模块介绍多种数字取证工具，并包括实践活动，让您能够在模拟调查中应用知识。此外，还讨论了影响数据恢复的因素。完成本模块后，您将能够进行全面的数字取证调查。 3. **最终项目与课程总结** - 描述：将在课程结束时进行的总结与项目实践。
Name:Incident Response
Description:This module focuses on the concept and importance of incident response. You’ll learn about the key preparatory steps for incident response and the importance of thorough documentation throughout the incident response process. You will delve into detection and analysis techniques used to identify and understand security incidents, followed by containment, eradication, and recovery strategies to prevent further damage and restore systems. The module also highlights the tools and automation technologies that enhance response efforts and covers post-incident activities. By the end of this module, you will be well-equipped to manage and mitigate security incidents effectively.
Name:Digital Forensics
Description:This module explores the essential aspects of digital forensics and investigation. It provides an overview of digital forensics and highlights its importance in investigating cyber incidents. You'll learn the data collection and examination methods, including using Cowrie for log investigation. The module covers key topics about handling digital evidence to ensure integrity, analyzing and reporting findings, and understanding forensic data files. The module introduces various digital forensics tools and includes practical activities to apply knowledge in simulated investigations. Additionally, it covers the factors influencing data recovery. By the end of this module, you will be able to conduct thorough digital forensic investigations.
Name:Final Project and Course Wrap-up
Description:
This IBM course will teach you the critical skills needed to manage and investigate cybersecurity incidents. You will learn about key topics, including incident response frameworks (NIST and SANS), digital forensics methodologies, and best practices for handling digital evidence. Through hands-on labs and projects, you’ll gain practical experience in detecting, analyzing, and mitigating cybersecurity threats, as well as conducting forensic investigations using industry-standard tools. By the e
