Conducting Forensics and Incident Analysis Using Cisco CyberOps Technologies (CBRFIR 300-215) Certification Training

Master digital forensics, chain of custody, reverse engineering malware samples, investigating compromised endpoints, and post-incident reporting.

Vendor: Cisco | Duration: 5 Days (40 Hours) | Level: Advanced

Course Learning Objectives

• Extract and preserve digital evidence adhering to legal chain-of-custody standards
• Analyze malware samples in sandboxed environments to uncover C2 communication channels

Curriculum Modules

• Module 1: Digital Forensics Principles, Evidence Handling & Chain of Custody
• Module 2: Windows & Linux Artifact Analysis (MFT, Registry, Syslog, Prefetch)
• Module 3: Static & Dynamic Malware Analysis in Isolated Sandboxes
• Module 4: Investigating Cloud Breaches (AWS CloudTrail, Azure Monitor, M365)
• Module 5: Root-Cause Analysis, Remediation & Executive Incident Reports