Evergreen Alliance Training Program for GIAC Experienced Incident Handler (GX-IH)

Command-Line Security and Analysis
The candidate will review command history to determine the purpose of an attacker’s actions, use tools like netcat, and analyze Windows Alternate Data Streams to uncover hidden data.

In-Depth Attack Analysis
The candidate will execute a multi-stage attack or task, focusing on both Windows and Linux/Unix systems.

Incident Investigation
The candidate will investigate a compromised Linux system, examine a breached Windows machine, and analyze logs or conduct live analysis to identify the scope and nature of the incident.

Infrastructure Analysis
The candidate will conduct cloud scanning, perform vulnerability assessments, and collect information using DNS protocol.

Password Attacks and Analysis
The candidate will carry out a password guessing attack and analyze password attacks based on logs or system tools.

Pivoting
The candidate will pivot through an intermediary point to reach a target system.

Protocol Security and Attacks
The candidate will analyze vulnerabilities from an expert perspective, including the ability to verify and prioritize vulnerabilities, identify false positives, and perform actions to assess vulnerabilities and security improvements in services such as SMB, FTP/SFTP, and SCP.

Reconnaissance
The candidate will scan a local host or network for open ports to gather reconnaissance information.

Website Security
The candidate will perform web application and injection attacks to identify vulnerabilities in a website.