The Windows Incident Response Course is based on the book, but takes it several steps further. The base course is two days in length, and runs the entire spectrum of incident response, from understanding how incidents occur, what they look like, and how to prevent them. The course also presents attendees with the opportunity to walk through incident verification and identification for themselves. All attendees have the opportunity to run the tools used in the course, and learn how to interpret their output.
The course is taught on-site, at your location, and can accommodates approximately 20 attendees. You provide the facilities and catering, while I provide the course materials and instruction. This greatly reduces travel costs while maximizing knowledge transfer. While this course has been taught, attendees have used the information that they’ve learned in order to resolve issues that have come up, returning from lunch with the problem solved.