Over the last decade, the rise of cloud services has significantly changed the role and requirements of Incident Response (IR) teams. The shift from on-prem to cloud environments– oftentimes using multiple cloud providers simultaneously–adds complexity to managing data volume and accessibility in tandem with mitigating evolving cyber threats. Today’s incident responders require specialized security skills that apply foundational IR concepts and techniques within respective cloud domains.

N2K’s Cloud IR course is a four-hour, 100% online program designed to introduce and familiarize security professionals with the requisite cloud incident response functions and capabilities. This course will review Incident Response as a function within the cloud environment. Practitioners will work their way through both Amazon Web Services (AWS) and Microsoft Azure environments while learning about further cloud concepts and technologies. Lastly, this course will cover the ELK stack and the importance it plays within IR functions in the cloud.

It is recommended that participants have at minimum a Security+ certification or have completed N2K’s Cloud SOC course.

Following the Cloud IR course, practitioners can take Critical Knowledge: Incident Response for further training.

• [Download] Course Overview Sheet

• Incident Responders or Forensics Analysts
• Cybersecurity Analysts
• Cyber Incident Response Analysts
  • Current IR Security Professionals: Those who want to refamiliarize themselves with AWS/Azure incident response processes and techniques.
  • New IR Security Professionals: Those who need an introduction to IR in the cloud along with exposure to the AWS/Azure platforms.
  • Security Management: Those who want to familiarize themselves with Cloud IR concepts and be more fluent in Cloud IR literacy.

Organizations participating in this offering will experience the following major benefits:

• Modular training lessons to easily digest concepts and techniques
• Course developed for professionals to improve IR abilities immediately
• Demonstrate IR techniques and processes in real cloud environments that are applicable to organizations of all sizes

The Cloud IR course consists of four domains that establish foundational cybersecurity knowledge on incident response in the cloud, forensics in AWS, forensics in Azure, and ELK Stack in IR. Click on the sections below to see the expanded topic areas within each domain.