Training Resources

Published under Online training material

Training Resources

ENISA CSIRT training material was introduced in 2008. In 2012, 2013 and 2014 it was complemented with new exercise scenarios containing essential material for success in the CSIRT community and in the field of information security. In these pages you will find the ENISA CSIRT training material, containing Handbooks for teachers, Toolsets for students and Virtual Images to support hands on training sessions.

In order to deliver trainings more efficiently with better and longer lasting results, the following resources can be used.

The ENISA CSIRT training material covers four main areas:

	Topics
Technical	Building artefact handling and analysis environment Processing and storing artifacts Artefact analysis fundamentals Advanced artefact handling Introduction to advanced artefact analysis Dynamic analysis of artefacts Static analysis of artefacts Forensic analysis: Local Incident Response Forensic analysis: Network Incident Response Forensic analysis: Webserver Analysis Developing Countermeasures Common framework for artefact analysis activities Using indicators to enhance defence capabilities Identification and handling of electronic evidence Digital forensics Mobile threats incident handling Mobile threats incident handling (Part II) Proactive incident detection Automation in incident handling Orchestration of CSIRT Tools New Introduction to network forensics Honeypots Vulnerability handling Presenting, correlating and filtering various feeds
Operational	Incident handling during an attack on Critical Information Infrastructure Advanced Persistent Threat incident handling Social networks used as an attack vector for targeted attacks Writing Security Advisories Cost of ICT incident Incident handling in live role playing Incident handling in the cloud Large scale incident handling
Setting Up a CSIRT	Incident handling management Recruitment of CSIRT staff Developing CSIRT infrastructure
Legal and Cooperation	Establishing external contacts Cooperation with law enforcement Assessing and Testing Communication Channels with CERTs and all their stakeholders Identifying and handling cyber-crime traces Incident handling and cooperation during phishing campaign Aspects of Cooperation between CSIRTs and Law Enforcement Agencies New Cooperation in the Area of Cybercrime Cooperation across CSIRTs, Law Enforcement Agencies and the judiciary Cooperation between CSIRTs and Law Enforcement: Behavioural Aspects Cooperation between CSIRTs and Law Enforcement: Legal and Organisational Aspects Cooperation between CSIRTs and Law Enforcement: Technical Aspects CERT participation in incident handling related to the Article 13a obligations CERT participation in incident handling related to the Article 4 obligations

Browse the Topics