Forensic Incident Management

Course details

This subject aims to equip students with the knowledge and skills to analyse and respond to computer and network security incidents based on industry best practices. Students will learn how to apply tools and techniques for incident containment, and identify issues relating to real world incident response handling. They will also learn how to capture and analyse network traffic anomalies. Students will also have chance to apply what they have learnt to respond to real world security incidents in a simulated laboratory environment with access to state-of-art SIEM (Security Information and Event Management) tools.

Objectives

• Explain the issues affecting network security and forensics;
• Analyse network traffic to provide network forensic evidence;
• Explain the concepts of security incident response capability;