Cybersecurity Incident Response
Coursera
The Cyber Incident Response course will give students an understanding of how incidents are responded to at a high level, as well as allow them to build important technical skills through the hands-on labs and projects. This course starts with a high-level discussion of what happens at each phase of responding to an incident, followed by a technical deep dive into some of the more exciting parts of memory, network, and host analysis and forensics. This course is for anyone wishing to apply learned forensics and offensive knowledge such as ethical hacking to the incident response process.
More resources on Incident Response
r/incidentresponse
A subreddit where security practitioners discuss live incident handling: triage decisions, forensic tooling, containment tradeoffs, career paths, and postmortems. Useful for seeing how working responders reason about real cases rather than how textbooks describe the process.
FOR508: Advanced Incident Response
Master advanced incident response and threat hunting techniques with expert SANS instructors in FOR508. Elevate your skills today!
SANS Reading Room - DFIR Papers
SANS's archive of student-written whitepapers on forensics, incident handling, and security operations, plus its reference posters. Browsing it gives free practitioner-level writeups of tools and techniques, though quality varies since papers are certification coursework.
MITRE ATT&CK
MITRE's public knowledge base of adversary tactics, techniques and procedures drawn from real-world intrusions, organised into enterprise, mobile and ICS matrices with linked threat groups, software, mitigations and detections. Defenders use it to describe attacker behaviour consistently and map detection coverage and gaps.
Incident Response Path
Learn incident response from the TryHackMe Team! This course guides you through identifying, analyzing, and containing security incidents.
Defensive Security Podcast
Defensive Security is a weekly information security podcast which reviews recent high profile cyber security breaches, data breaches, malware infections and intrusions to identify lessons that we can learn and apply to the organizations we protect.