
EC-Council Authorized Partner

Lifetime access to learning resources

Industry-expert trainers

Post training support
EC-Council Certified Incident Handler v2 Training Course
Information security breaches can occur anytime, in spite of having hi-tech, carefully planned IT infrastructure in place. Organizations need to have a plan-B to overcome the unanticipated incident in order to reduce the impact of the occurred incident and faster data recovery. The EC-Council’s Certified Incident Handler v2 Training is developed in collaboration with incident handling and cybersecurity practitioners across the globe.
Learners will be introduced to real-world incident handling scenarios and consist of a careful job task analysis (JTA) that will be effectively covered in this highly interactive, standards-based, intensive certification program.
Our E|CIH Program involves extensive hands-on sessions to give a practical approach towards learning. This course is officially accredited by the EC-Council and uses a holistic approach towards explaining concepts that concern organizational incident handling, preparing responses and incident handling response process to reduce the impact and recover organizational assets post security incidents.
Course Curriculum
Audience
ECIH is a specialist-level program that intends to train mid-level to high-level cybersecurity professionals on incident handling skills. The target audience for this course includes:
- Application Security Engineers
- Risk Assessment Administrators
- Penetration Testers
- Vulnerability Assessment Auditors
- Network Administrators
- System Administrators/ Engineers
- Firewall Administrators/ IT Managers/ Network Managers
- Cyber Forensic Investigators/ SOC Analysts
Eligibility Criteria
To appear for the E|CIH certification exam, learners must:
- Attend official E|CIH training program through any of the EC-Council’s Authorized Training Centers (ATCs) like Vinsys or EC-Council’s live online training via iWeek.
OR
- Have a minimum 1 year of work experience in the cybersecurity domain and are required to pay the USD100 Eligibility Application Fee. This fee is included in your training fee should you choose to attend training.
Training Options
ONLINE TRAINING
Instructor-Led Session
- 2 days Instructor-led Online Training
- Experienced Subject Matter Experts
- Approved and Quality Ensured training Material
- 24*7 leaner assistance and support
CORPORATE TRAINING
Customized to your team's need
- Blended Learning Delivery Model (Self-Paced E-Learning And/Or Instructor-Led Options)
- Course, Category, And All-Access Pricing
- Enterprise-Class Learning Management System (LMS)
- Enhanced Reporting For Individuals And Teams
- 24x7 Teaching Assistance And Support
Course Outline
- Overview
- Information Security And Incident Management
- What Is Vulnerability Management
- What Are Threat Assessments
- Risk Management - Vocabulary
- Risk Management - The Process
- Risk Management - The NIST RMF
- Incident Handling Best Practices, Std., Frameworks
- Incident Handling And Legal Compliance
- STEP 1: PREPARE FOR INCIDENT HANDLING, RESPONSE
- STEP 2: INCIDENT RECORDING AND ASSIGNMENT
- STEP 3: INCIDENT TRIAGE
- STEP 4: NOTIFICATION
- STEP 5: CONTAINMENT
- STEP 6: EVIDENCE GATHERING AND FORENSIC ANALYSIS
- STEP 7: ERADICATION
- STEP 8: RECOVERY
- STEP 9: POST-INCIDENT ACTIVITIES
- Forensics And First Response
- Principles Of Digital Evidence Collection
- Data Acquisition
- Volatile Evidence Collection
- Static Evidence Collection And Anti-Forensics
- Preparation For Handling Malware Incidents
- Detection Of Malware Incidents
- Containment Of Malware Incidents
- Eradication Of Malware Incidents
- Recovery After Malware Incidents
Handling Email Security Incidents
- Preparation Handling Network Security Incidents
- Detection, Validation Network Security Incidents
- Handling Unauthorized Access Incidents
- Handling Inappropriate Usage Incidents
- Handling Denial-Of-Service Incidents
- Handling Wireless Network Security Incidents
- Preparation To Handle Web App Security Incidents
- Detecting, Analyzing Web App Security Incidents
- Containment Of Web Application Security Incidents
- Eradication Of Web Application Security Incidents
- Recovery From Web Application Security Incidents
- Web Application Security Threats And Attacks
- Cloud Computing Concepts
- Best Practices Against Cloud Security Incidents
- Best Practices Against Insider Threats
- Security Checks Using Buck-Security On Linux
- Volatile Evidence Collection - Linux, Windows
- Using OSForensics To Find Hidden Material
- Analyzing Non-Volatile Data Using Autopsy
- Malware Analysis
- Collecting Information By Tracing Emails
- Using OSSIM
- Using Wireshark And NMAP
- Using Suricata IDS
- What Does A SQL Injection Attack Look Like
- What Does A XSS Attack Look Like
Course Reviews


Ali Asgar
Cyber Security Specialist


Darshan Parab
Cyber Security Analyst
FAQ's
CIH stands for Certified Incident Handler. CIH is a training offered by EC-Council that provides learners with a well-thought, careful reaction to security incidents for minimal loss and maximum recovery. The training course focuses on preparing individuals to handle and respond systematically to security incidents.
Candidates appearing for the E|CIH training must complete training from an official EC-Council ATC or possess one year of working experience in the cybersecurity field. Candidates who do not wish to attend the training, are required to pay a membership fee of $100.
All the EC-Council training including the E|CIH are valid for three years.
Cybersecurity being one of the most popular fields in the IT industry, experiences high demand for certified professionals. Organizations of today are more aware about incidence recovery and investigations and have a dedicated team of certified professionals for the same. Certified Incidence Handlers occupy responsible positions as they are equipped with the right skills to respond to such security incidents in a proficient manner so as to reduce the impact financially and reputationally.
Yes, when you enroll to our E|CIH training course, we provide everything from training to course material, learning resources and certification exam application to our students.
Vinsys is the right place to get trained for the E|CIH credential as we enable active learning for our students with a well-equipped training infrastructure (online + offline), highly accredited trainers, real-time scenario-based learning and complete certification exam guidance. Our motive is to create learned professionals with the necessary on-the-job skills and our students speak highly of us. We have trained more than 600,000 professionals across the globe in various fields.