The ECIH training is part of our SOC Expert Track, consisting of three practical 3-day trainings, through which you are trained to become a complete SOC employee at an attractive bundle discount. Of course, the ECIH training can also be taken as a standalone course.

Master the most important first line of defense in cybersecurity. Develop the essential skills to identify, contain, and minimize the impact of cyber incidents.

The Certified Incident Handler (ECIH) training from EC-Council equips you with the knowledge and skills to effectively prepare an organization for threats and threat actors, manage them, and eradicate them in the event of a possible incident. This program covers the entire process of incident handling and response, including practical labs and the tactical procedures and techniques needed to effectively plan, document, triage, inform, and contain. You will learn to address different types of incidents, understand and use risk assessment methodologies, as well as laws and policies related to incident handling. After completing the training, you will be able to develop an Incident Handling & Response (IH&R) policy and manage various types of security incidents, such as malware, email security, network security, web application security, cloud security, and incidents related to insider threats.

The ECIH training also covers post-incident activities such as containment, eradication, evidence collection, and forensic analysis, providing opportunities for prosecution or countermeasures to ensure that the incident does not recur.

The key features of ECIH compared to competing trainings are:

• A lab setup that simulates a real-time environment with real-life networks and platforms
• Each learning objective is demonstrated using complex and advanced labs
• Hands-on lab-intensive program (demonstration of various cybersecurity incidents through scenario-based labs)
• Latest patched operating systems from Windows
• Ubuntu, Parrot Security, Pfsense Firewall, OSSIM Server, and Android for conducting labs
• Advanced forensic software
• Latest Threat Intelligence Platforms
• Latest Network Monitoring Solutions scenario-based labs
• Learn how to handle and respond to various types of security incidents in a real-time corporate network
• Understand, detect, and analyze modern attack TTPs using various incident handling tools

E|CIH is a method-driven training that offers a holistic approach to organization-wide IH&R. You gain knowledge of preparing/planning the incident handling and response process to restoring business components from the impact of security incidents. These concepts are essential for handling and responding to security incidents and protecting organizations from future threats or attacks.

With over 95 advanced labs, 800 different tools, and gaining experience with Incident Handling activities across a wide range of operating systems, E|CIH offers a comprehensive, tactical, and hands-on approach to planning and dealing with cyber incidents.

The E|CIH program covers all phases of the IH&R process. With a focus on a realistic and future-oriented approach, E|CIH is one of the most comprehensive Incident Handling & Response certifications you can achieve.

The ECIH training is classroom-based but can also be attended Live Online if desired. You will then follow the training live remotely with our own instructor, view the notes on the whiteboard, participate in all labs, and can ask questions to both the trainer and your fellow participants. So, it's basically just like being present at the classroom training, but from your own location. If the Live Online training does not meet your expectations, you may attend the classroom training again free of charge within a year.