Evergreen Alliance Training Program for GIAC Enterprise Incident Response (GEIR)

Cloud Response and Analysis
You will gain a solid understanding of common cloud attack scenarios and learn both manual and automated techniques for identifying, extracting, and analyzing artifacts when responding to cloud-based incidents.

Container DFIR Fundamentals
You will develop a foundational understanding of container technology and common attack techniques used against containers, along with essential digital forensics and incident response strategies for container-based incidents.

Detecting Modern Attacks
You will learn how to apply threat intelligence and insights gathered through proactive threat hunting to enhance the detection and response to modern cyber threats.

Enterprise Incident Response Management
You will understand how to effectively manage and conduct incident response within an enterprise environment, becoming familiar with techniques to address operational challenges encountered during large-scale investigations.

Enterprise Visibility and Incident Scoping
You will learn to aggregate telemetry from a wide range of data sources within an enterprise to scope incidents and gain visibility across the environment, helping to identify and respond to threats.

Foundational Cloud Concepts
You will develop a fundamental understanding of cloud computing and become familiar with the most commonly used cloud services that enterprises rely on to support their business operations.

Linux DFIR Fundamentals
You will gain foundational knowledge of digital forensics and incident response (DFIR) for Linux systems, including an understanding of the Linux file system, key logs, and configuration files necessary for effective incident analysis.

Linux Essentials
You will learn the essentials of Linux operating systems, including common challenges related to securing and monitoring Linux systems, as well as popular attack techniques used throughout an attack lifecycle.

macOS DFIR Fundamentals
You will gain foundational knowledge of DFIR for macOS systems, including an understanding of the file system, important logs, and configuration files relevant to responding to macOS incidents.

macOS Essentials
You will become familiar with macOS operating systems, including common security and monitoring challenges, as well as the attack techniques frequently used on this platform.

Rapid Response Triage at Scale
You will learn efficient methods for collecting, processing, and analyzing incident response data across a large volume of endpoints, enabling you to triage incidents quickly and effectively at scale.