Cyber Response & Forensics Training in Kraków, Poland

This course provides participants with the knowledge and practical skills to detect, respond to, and investigate cybersecurity incidents. It covers incident response methodologies, threat hunting techniques, and digital forensics practices to strengthen organizational cyber resilience.

Introduction to Cyber Response & Forensics

• Understanding today’s cyber threat landscape

• Role of incident response, threat hunting, and forensics

• Cyber kill chain & MITRE ATT&CK framework

Incident Response Framework

• NIST and SANS response models

• Phases of incident response: Preparation, Identification, Containment, Eradication, Recovery, Lessons Learned

• Building an incident response playbook

Threat Hunting

• Fundamentals of threat hunting

• Hypothesis-driven vs. intelligence-driven hunting

• Tools and techniques (SIEM, EDR, packet capture, OSINT)

• Identifying IoCs and IoAs (Indicators of Attack)

• Case study: Hunting advanced persistent threats (APT)

Digital Forensics Fundamentals

• Principles of digital forensics (chain of custody, evidence handling)

• Disk and file system forensics

• Memory forensics and volatile data analysis

• Network forensics and packet analysis

• Tools: Autopsy, Volatility, Wireshark, FTK/EnCase overview

Malware and Log Analysis

• Understanding malware behavior

• Static and dynamic analysis basics

• Log correlation for forensic investigation

• Identifying persistence and lateral movement

Cyber Crisis Management & Reporting

• Communication during incidents

• Working with legal, compliance, and management teams

• Regulatory considerations (GDPR, HIPAA, ISO, etc.)

• Building post-incident reports and lessons learned

Hands-on Exercises

Summary and Conclusion