incident response exam walkthrough

Ensuring Success: Our approach guarantees success by immersing you in
real exam environments, where we tackle exam scenarios head-on. We provide detailed explanations on detecting various attacks using advanced tools like Splunk and Elastic's Kibana, equipping you with essential skills and knowledge for effective incident response.

Exam Overview

incident response exam from the real exam environment

Exam Machines

Exam Intro

Available in days

days after you enroll

Exam Overview (2:08)
Exam Manual
HERA LAB
eCIR_Letter_of_Engagement

Splunk

Available in days

days after you enroll

Splunk-win10 (21:02)
WIN 10 Queries
Splunk-win10-server (35:05)
Invoke-Inveigh
Search Queries
Splunk-lab-dc01 (14:59)
Search Queries
Splunk-child-dc01 (29:49)
Search Queries
Splunk-UATSERVER (22:54)
Splunk UAT-HELPDESK (9:46)
Splunk jumpbox (10:16)

Elastic "Kibana"

Available in days

days after you enroll

Elastic-W2012r2-DC01 (27:41)
Elastic DEV1 (9:18)
Elastic VICITM (18:56)
Wireshark (10:27)
scenario2-traffic-capture
Elastic HR01 (5:31)