Welcome to Incident Response Consulting
$5,250
/Year
In this track, you will learn the fundamentals of incident response consulting at an associate consultant level. This is a Consultant with limited relevant work experience in information security. This is an entry level position consistent with the role that could be played by new college graduates or individuals with minimal prior security industry experience.
“This course is designed to equip aspiring cybersecurity professionals with the essential skills needed to succeed as an Associate Security Consultant. Whether you’re a recent graduate or transitioning into cybersecurity from another field, you’ll gain the foundational technical knowledge and consulting skills required to make an immediate impact in client engagements.”
By the end of this course, a student will be able to demonstrate the following abilities in these categories
Technical Abilities (Core)
Working knowledge of network security architecture: how packets traverse a network, ability to assess security configurations of network devices with minimal guidance
Working knowledge of Windows security model: common vulnerabilities, ability to assess security configuration with minimal guidance
Working knowledge of UNIX security model: common vulnerabilities, ability to assess security
configuration with minimal guidance
Basic understanding of security organization: common models, strengths/weaknesses of each, ability
to compare/contrast other organizations with current client
Communication Skills (Core)
Able to effectively interface with peers and managers
Capable of documenting and explaining technical details in a concise, understandable manner
Able to effectively gauge time and estimate effort
Responsive and professional in all communication (email,
phone, voicemail)
Keeps his/her manager and engagement manager informed on project progress and issues
List how it will make their life better
Job Scope, Complexity & Impact
Develops resolutions to problems of limited scope and complexity
Work is closely managed and reviewed regularly
Uses readily available information and follows standard practices and procedures
Follows specific, outlined and detailed procedures
Incident Response
Basic understanding of the incident response process (investigation and remediation)
Basic understanding of malware analysis (i.e., dynamic and static analysis); Understanding of the attack lifecycle and techniques used by the attacks
Basic understanding of log analysis, familiar with proxy, firewall, windows, UNIX, DNS and IDS log analysis
Basic understanding of programming languages and ability to automate manual tasks
Basic understanding of NTFS, registry, artifacts
Basic understanding of EDR tooling, X-Ways, FTK
Basic understanding of network traffic analysis and related tools
Collects and preserves evidence in accordance with established standards
Performs basic IR tasks with minimal guidance
Working knowledge of company reporting tools
Completes system analysis reports with guidance
Contributes to investigation reports with guidance
In addition, we shall prepare you to transition from an Associate Consultant to a Consultant level (min 2-3 years). The following skills will be assessed:
Consistently and fully satisfies core and specialized skills of an Associate level
Demonstrate competency in interacting with clients on a day-to-day basis
Develops working knowledge in Incident Response Consulting)
Makes discretionary effort to go above and beyond what is required
Volunteers for more complexity and requires less regular support
Shows consistent accuracy and flawless execution on all assigned tasks
Able to develop reports with little oversight and correction
Shows interest and uses expanded knowledge in day to day task
Develops own ideas – begins to influence others
Want to Find Evil. Solve Crime and learn from some of the best of Mandiant Consulting Alumni? And the best part? Either an internship or full time role will be ready when your assessment is finalized.