Next boot camp starts soon. Enroll now.

Incident Response & Network Forensics Training Boot Camp

Transform your career in 5 days

Learn how to detect and respond to security incidents! This popular boot camp builds your knowledge around network forensics and incident response with hands-on labs and expert instruction.

4.06 (211 ratings)

Course essentials

Boot camp at a glance

  • Method

    Online, in-person, team onsite

  • Duration

    5 days

  • Experience

    0-1 year

What you'll learn

Training overview

Infosec’s Incident Response and Network Forensics Boot Camp covers the essential information you need to properly detect, contain and mitigate security incidents. You’ll learn the ins and outs of incident response as well as the tools used by incident responders on a daily basis. You’ll gain hands-on experience in how systems are compromised and what traces are left behind by attackers on the network, on disk and in volatile memory.

Security incidents are a way of life in the modern world, and how organizations respond to them makes a massive difference in how much damage is ultimately done. This boot camp addresses cutting-edge attack vectors as well as tried-and-true methods for compromise. You leave with the knowledge of how to prevent incidents and the skills to defend against a security incident if it does happen.

Award-winning training you can trust

What's included

Everything you need to know

  • 90-day extended access to Boot Camp components, including class recordings
  • 100% Satisfaction Guarantee
  • Free 90-day Infosec Skills subscription (access to 1,400+ additional courses and labs)
  • Hands-on cyber ranges and labs
  • Knowledge Transfer Guarantee
  • Pre-study learning path

Before your boot camp


Before enrolling in the Incident Response & Network Forensics Training Boot Camp, it is recommended you have:

  • One or more years of experience in incident handling or equivalent information security experience


Training schedule

Day 1
  • Plan
  • Identify
  • Contain
  • Eradicate
  • Recover
  • Constructing your live incident response toolkit
Day 2
  • Event/incident detection
  • Sources of network evidence
  • TCP reconstruction
  • Flow analysis
  • Log analysis
  • Firewall log investigation
  • Log aggregation
Day 3
  • Triage & analysis
  • Network artifact discovery
  • DNS forensics and artifacts
  • NTP forensics and artifacts
  • HTTP forensics and artifacts
  • HTTPS and SSL analysis
  • FTP and SSH forensics
  • Email protocol artifacts
  • Wireless network forensics
  • Perform vulnerability analysis
Day 4
  • Timeline analysis
  • Volatile data sources and collection
Day 5

Incident response

  • Defensive review and recommendations
  • Communications about an organizational incident
  • Liaison with law enforcement personnel
  • Track and document incidents from initial detection through final resolution
  • Perform risk assessments on incident management systems and networks
  • Run vulnerability scanning tools on incident management systems and networks

Guaranteed results

Our boot camp guarantees

100% Satisfaction Guarantee

100% Satisfaction Guarantee

If you’re not 100% satisfied with your training at the end of the first day, you may withdraw and enroll in a different online or in-person course.

Knowledge Transfer Guarantee

Knowledge Transfer Guarantee

If an employee leaves within three months of obtaining certification, Infosec will train a different employee at the same organization tuition-free for up to one year.

Unlock team training discounts

If you’re like many of our clients, employee certification is more than a goal — it’s a business requirement. Connect with our team to learn more about our training discounts.

You're in good company


The instructor was able to take material that prior to the class had made no sense, and explained it in real world scenarios that were able to be understood.

Erik Heiss, United States Air Force


I really appreciate that our instructor was extremely knowledgeable and was able to provide the information in a way that it could be understood. He also provided valuable test-taking strategies that I know not only helped me with this exam, but will help in all exams I take in the future.

Michelle Jemmott, Pentagon


The course was extremely helpful and provided exactly what we needed to know in order to successfully navigate the exam. Without this I am not confident I would have passed.

Robert Caldwell, Salient Federal Solutions

Enroll in a boot camp

  • July 10, 2023 - July 14, 2023

    Online only

  • November 27, 2023 - December 1, 2023

    Online only

  • February 19, 2024 - February 23, 2024

    Online only