ECIH-Product-Cover

EC-Council Certified Incident Handler | ECIH Course

EC-Council Certified Incident Handler (ECIH)

The ECIH program focuses on a structured approach for performing the incident handling and response (IH&R) process. The IH&R process includes stages like incident handling and response preparation, incident validation and prioritization, incident escalation and notification, forensic evidence gathering and analysis, incident containment, systems recovery, and incident eradication. This systematic incident handling and response process creates awareness among incident responders in knowing how to respond to various types of security incidents.

Cybersecurity Professionals interested in pursuing incident handling and response as a career require comprehensive training on the IH&R concepts as well as real-world scenarios. The ECIH program includes hands-on learning delivered through iLabs, online labs within the training program.

Meet your Instructor:

iLabs Demo:

Why ECIH?

EC-Council’s Certified Incident Handler provides students with a method-driven program that uses a holistic approach to cover vast concepts concerning organizational incident handling and response from preparing and planning the incident handling response process to recovering organizational assets after a security incident. The skills taught in EC-Council’s ECIH program are desired by cybersecurity professionals from around the world and is respected by employers.

The Purpose of ECIH is

  • To enable individuals and organizations with the ability to handle and respond to different types of cybersecurity incidents in a systematic way.
  • To ensure that organization can identify, contain, and recover from an attack.
  • To reinstate regular operations of the organization as early as possible and mitigate the negative impact on the business operations.
  • To be able to draft security policies with efficacy and ensure that the quality of services is maintained at the agreed levels.
  • To minimize the loss and after-effects breach of the incident.
  • For individuals: To enhance skills on incident handling and boost their employability.

Who is it for?

The incident handling skills taught in ECIH are complementary to the job roles below as well as many other cybersecurity jobs:

  • Penetration Testers
  • Vulnerability Assessment Auditors
  • Risk Assessment Administrators
  • Network Administrators
  • Application Security Engineers
  • Cyber Forensic Investigators/ Analyst and SOC Analyst
  • System Administrators/Engineers
  • Firewall Administrators and Network Managers/IT Managers

ECIH is a specialist-level program that caters to mid-level to high-level cybersecurity professionals. In order to increase your chances of success, it is recommended that you have at least 1 year of experience in the cybersecurity domain.

ECIH members are ambitious security professionals who work in Fortune 500 organizations globally.

Course Outline

  • Module 01: Introduction to Incident Handling and Response
  • Module 02: Incident Handling and Response Process
  • Module 03: Forensic Readiness and First Response
  • Module 04: Handling and Responding to Malware Incidents
  • Module 05: Handling and Responding to Email Security Incidents
  • Module 06: Handling and Responding to Network Security Incidents
  • Module 07: Handling and Responding to Web Application Security Incidents
  • Module 08: Handling and Responding to Cloud Security Incidents
  • Module 09: Handling and Responding to Insider Threats
NICE FrameworkCRESTNAVYARMYMARINE CORPSAIR FORCE
iclassECIH maps 100 percent to the NICE framework under the category “Protect and Defend (PR)” and the specialty “Incident Response (CIR)”. NICE stands for National Initiative for Cybersecurity Education (NICE). The Incident Response (CIR) specialty area deals with investigating, analyzing, and responding to cyber incidents within the network environment or enclave. This area enables incident responders to handle crises within the pertinent domain and mitigate potential threats. CIRs evaluate the effectiveness of and improvements to existing practices in any organization, which in turn leads to maximizing the survival of life, preservation of property, and information security.

iclassECIH maps 100 percent to the CREST Certified Incident Manager (CCIM) framework. It is focused on maintaining an appropriate standard for incident response that determines the path of investigation based on considerable real-world incident handling experience and the pertinent information available. ECIH maps to CREST Certified level examinations which are designed to set the benchmark for senior incident handlers. By gaining the ECIH certification, individuals are globally recognized as certified incident handlers.

iclass
 

EC-Council Cyber Security Certifications and the US NAVY

 

Six EC-Council Certifications are recognized by the United States Navy in over 100 Cyber Security Job roles, across 18 occupations. Ranging from Commander in Executive Cyberspace Leadership to Cyber Warfare Engineer, Special Agents, Incident Handlers, to Cryptologic Warfare Engineers, Cybersecurity careers with the US NAVY are exciting, holding an EC-Council certification provides great opportunity for advancement in a US NAVY career.

The decisions of Department of the NAVY to incorporate industry recognized certifications into the Cyber IT & Cyber Security Workforce Framework ensures as our service personnel advance their careers and eventually transition to civilian life, their skills and credentials are widely recognized by the Industries they will continue to work in as Veterans.

Certifications recognized, accepted, and often funded by the US NAVY include:

iclass
 

Funding opportunities for career advancement are available for Active Duty NAVY personnel through the NAVY COOL program.

US NAVY approves EC-Council Certifications across 18 Occupations and over 100 Job roles


Cryptologic Warfare LDO

  • Cryptologic Warfare LDO


CTN-Cryptologic Technician Networks

  • CTN – Global Network Operations Director
  • CTN – Global Network Operations Manager
  • CTN – Global Network Operations Technician


Cyber IT/CSWF Cyber Defense Infrastructure Support

  • CNDSP-IS
  • CPT Network Infrastructure Service Specialist
  • Systems Security Engineer


Cyber IT/CSWF Executive Cyberspace Leadership

  • Commander
  • Deputy Commander


Cyber IT/CSWF Security Program Management (CISO)

  • Chief Information Security Officer (CISO)
  • Common Control Provider
  • Cybersecurity Officer
  • Enterprise Security Officer
  • Facility Security Officer
  • Information Technology (IT) Director
  • Principal Security Architect
  • Risk Executive
  • Security Domain Specialist
  • Senior Agency Information Security (SAIS) Officer


Cyber IT/CSWF Vulnerability Assessment and Management

  • Blue Team Technician
  • Close Access Technician
  • CNDSP AU
  • Network Security Vulnerability Technician (NSVT)
  • Penetration Tester


Cryptologic Warfare Officer

  • Cryptologic Warfare Officer


Cyber IT/CSWF All Source Analysis

  • Computer Network Defense (CND) Analyst


Cyber IT/CSWF Cyber Operations Planning

  • CPT Operations Officer
  • CPT Platoon Leader
  • Network Warfare Cyber Planner




Cyber IT/CSWF Incident Response

  • CNDSP IR
  • Incident Handler
  • Intrusion Analyst
  • Network Security Vulnerability Technician (NSVT)


Cyber IT/CSWF Strategic Planning and Policy Development

  • Chief Information Officer (CIO)
  • Chief Information Security Officer (CISO)
  • Command Information Officer
  • Information Security Policy Analyst
  • Information Security Policy Manager
  • Policy Writer and Strategist
  • Cyberspace Workforce Developer and Manager (CSWF-PM) (DCWF Role Code 751)
  • Cyberspace Policy and Strategy Planner (DCWF Role Code 752)


Cyber Warfare Engineer

  • Cyber Warfare Engineer


Cryptologic Warfare Technician CWO

  • Cryptologic Warfare Technician CWO


Section 2Cyber IT/CSWF Cyber Defense Analysis

  • CNDSP Analyst
  • CNDSP Manager
  • CPT CND Manager
  • CPT Interactive Operator
  • CPT Systems Architect
  • Cyber Security Analyst
  • Incident Analyst


Cyber IT/CSWF Digital Forensics

  • Computer Forensic Analyst
  • Computer Network Defense (CND) Analyst
  • Digital Forensic Examiner
  • Digital Media Collector
  • Forensic Analyst
  • Forensic Analyst (Cryptologic)
  • Forensic Technician
  • Network Forensic Examiner


Cyber IT/CSWF Investigation

  • Computer Crime Investigator
  • Special Agent


Cyber IT/CSWF Threat Analysis

  • Computer Network Defense (CND) Analyst
  • Threat Analyst


Cyber Warrant Officer CWO

  • Cyber Warrant Officer CWO


*All information represented here can be found on the NAVY COOL site. To find what EC-Council Certifications map to your eligible Job role, select “Full Credential Search” then under Credential Agency, select or search for “International Council of E-Commerce Consultants”.

To get more information or still have questions:

 

Contact Us

iclass
 

EC-Council Cyber Security Certifications and the US ARMY

 

Five EC-Council Certifications are recognized by the United States ARMY across 15 occupations. Ranging from Cyber Operations Technician to Target Digital Network Analyst. Our certifications are in use as baseline credentials across ARMY Cyber throughout intelligence as well as deployed infantry. EC-Council is proud to work with various groups in the ARMY to support the Mission of ARMY Cyber.

Certifications recognized, accepted, and often funded by the US ARMY include:

iclass
 

Funding opportunities for career advancement are available for Active Duty ARMY personnel through the ARMY COOL program.

US ARMY approves EC-Council Certifications across 15 Occupations

  • Cryptologic Cyberspace Intelligence Collector - Analyst
  • CYBER Operations Technician
  • Information Protection Technician
  • Military Intelligence (MI) Systems Maintainer/Integrator
  • Senior Network Operations Technician
  • Cryptologic Cyberspace Intelligence Collector - Analyst
  • CYBER Operations Technician
  • Information Protection Technician
  • Military Intelligence (MI) Systems Maintainer/Integrator
  • Senior Network Operations Technician
  • Counterintelligence Agent
  • Cyber Operations Specialist
  • Infantryman
  • Information Technology Specialist
  • Nodal Network Systems Operator-Maintainer

To get more information or still have questions:

 

Contact Us

iclass
 

EC-Council Cyber Security Certifications and the Marine Corps

 

Five EC-Council Certifications are recognized by the United States Marine Corps in 79 Cyber Security Job roles, across 17 occupations. Ranging from Cyber Security Technician, to Signals Intelligence and Electronic Warfare Operator, to Cyber Security Chief.

Certifications recognized, accepted, and often funded by the US Marine Corps include:

iclass
 

Funding opportunities for career advancement are available for Active Duty MARINE CORPS personnel through the Marine COOL program.

US ARMY approves EC-Council Certifications across 15 Occupations


Aviation Logistics Information Management System (ALIMS) Specialist

  • Aviation Logistics Information Management System (ALIMS) Specialist


Cyber IT/CSWF Cyber Defense Analysis

  • CNDSP Analyst
  • CNDSP Manager
  • CPT CND Manager
  • CPT Interactive Operator
  • CPT Systems Architect
  • Cyber Security Analyst
  • Incident Analyst


Cyber IT/CSWF Investigation

  • Computer Crime Investigator
  • Special Agent


Cybersecurity Technician

  • Cybersecurity Technician


Cyber IT/CSWF All Source Analysis

  • Computer Network Defense (CND) Analyst


Signals Intelligence and Electronic Warfare Operator/Analyst

  • Signals Intelligence and Electronic Warfare Operator/Analyst


Communications Chief

  • Cyber Network Systems Chief
  • Telecommunications Systems Chief
  • Transmissions Chief


Cyber IT/CSWF Cyber Defense Infrastructure Support

  • CNDSP-IS
  • CPT Network Infrastructure Service Specialist
  • Systems Security Engineer


Cyber IT/CSWF Threat Analysis

  • Computer Network Defense (CND) Analyst
  • Threat Analyst




Information Security Technician

  • Information Security Technician


Cyber IT/CSWF Incident Response

  • CNDSP IR
  • Incident Handler
  • Intrusion Analyst
  • Network Security Vulnerability Technician (NSVT)


Signals Intelligence/Electronic Warfare Technician

  • Signals Intelligence/Electronic Warfare Technician


Cryptologic Cyberspace Analysts

  • Cryptologic Cyberspace Analysts


Cyber IT/CSWF Digital Forensics

  • Computer Forensic Analyst
  • Computer Network Defense (CND) Analyst
  • Digital Forensic Examiner
  • Digital Media Collector
  • Forensic Analyst
  • Forensic Analyst (Cryptologic)
  • Forensic Technician
  • Network Forensic Examiner


Cyber IT/CSWF Vulnerability Assessment and Management

  • Blue Team Technician
  • Close Access Technician
  • CNDSP AU
  • Network Security Vulnerability Technician (NSVT)
  • Penetration Tester


Intelligence Surveillance Reconnaissance (ISR) Systems Engineer

  • Intelligence Surveillance Reconnaissance (ISR) Systems Engineer


Cyber Security Chief

  • Cyber Security Chief
  • Cyber Network Operator
  • Cyber Network Systems Chief
  • Intelligence Surveillance Reconnaissance (ISR) Systems Engineer


To get more information or still have questions:

 

Contact Us

iclass
 

EC-Council Cyber Security Certifications and the US Air Force

 

Four EC-Council Certifications are recognized by the United States Air Force in 150 Cyber Security Job roles, across 8 occupations. Occupations are recognized in fields like; Cyber Transport Systems, Intelligence, and Cyber Warfare Operations.

Certifications recognized, accepted, and often funded by the US AIR FORCE include:

iclass
 

Funding opportunities for career advancement are available for Active Duty AIR FORCE personnel through the AIR FORCE COOL program.


Client Systems

  • Computer Operation Series
  • Computer Science Series
  • Cryptanalysis Series
  • Cryptography Series
  • Information Technology Management Series
  • Intelligence Series
  • Telecommunications Mechanic


Cyber Surety

  • Security Administration Series
  • Intelligence Series
  • Information Technology Management Series
  • Computer Science Series
  • Computer Operation Series
  • Security Administration Series


Cyber Transport Systems

  • Intelligence Series
  • Information Technology Management Series
  • Cryptography Series
  • Cryptanalysis Series
  • Computer Science Series
  • Computer Operation Series


Flight Engineer

  • Air Safety Investigating Series
  • Aircraft Attending
  • Aircraft Electrician
  • Aircraft Engine Mechanic
  • Aircraft Mechanic
  • Aircraft Operation Series
  • Aircrew Technician Series
  • Chief Electrician
  • Electrician
  • Electrician-Maintenance
  • Electronic Digital Computer Mechanic
  • Electronic Industrial Controls Mechanic
  • Electronic Integrated Systems Mechanic
  • Electronic Measurement Equipment Mechanic
  • Electronics Mechanic
  • Electronics Technical Series
  • Electronics Technician
  • Second Electrician
  • Third Electrician



Computer Systems Programming

  • Intelligence Series
  • Information Technology Management Series
  • Electronics Technician
  • Electronics Technical Series
  • Computer Science Series
  • Computer Operation Series


Cyber Systems Operations

  • Telecommunications Mechanic
  • Security Administration Series
  • Intelligence Series
  • Information Technology Management Series
  • Computer Science Series
  • Computer Operation Series
  • Computer Clerk and Assistant Series


Cyberspace Warfare Operations

  • Information Technology Management Series
  • Cryptography Series
  • Cryptanalysis Series
  • Computer Science Series
  • Computer Operation Series
  • Computer Clerk and Assistant Series


Fusion Analyst

  • Statistical Assistant Series
  • Intelligence Series
  • Information Technology Management Series
  • Computer Science Series


To get more information or still have questions:

 

Contact Us

About the Exam

Exam Name: ECIH 212-89

Number of Questions: 100

Test Duration: 3 Hours

Test Delivery: ECC Exam Portal

Test Format: Multiple Choice

Passing Score: 70%

Eligibility Criteria

To be eligible to sit the ECIH Exam, the candidate must either:

  • Attend official ECIH training through any of EC-Council’s Authorized Training Centers (ATCs) or attend EC-Council’s live online training via iWeek or join our self-study program through iLearn (see https://iclass.eccouncil.org).

OR

  • Candidates with a minimum of 1 year of work experience in the domain that would like to apply to take the exam directly without attending training are required to pay the USD100 Eligibility Application Fee. This fee is included in your training fee should you choose to attend training.

Add the Mobile Security Tool Kit to Your Training

For the past several years we have offered our training on a mobile device so that you can take your training with you and eliminate the need to stream the videos. This device is the next generation mobile device. This is a fully loaded pen test tool kit comes equipped with a custom Linux Hacking OS and, wait for it… we can load your course (or 2) onto the device. In the sage words of Ray Bradbury, “Something Wicked This Way Comes.”

Terms of Use

Getting Started

Terms of Use

Note: The STORM mobile security tool kit contains STORM Linux (a Raspbian based, customized distro of Linux) including all of the associated security tools. These tools are very powerful and all proper precautions should be adhered to at all times.

Always remember that the difference between illegal and ethical hacking comes down to one word; permission. It is illegal to utilize these or any other pen testing tools on a network or website without permission.

As stated in the terms and conditions, EC-Council is not responsible for illegal use of these tools and you accept the full liability for its usage. The entire code of ethics can be found here.

Specs

  • Broadcom BCM2837B0, Cortex-A53 (ARMv8) 64-bit SoC @ 1.4GHz Mobile System with Case
  • 1GB LPDDR2 SDRAM
  • 7 inch Touch Screen Display
  • 2.4GHz and 5GHz IEEE 802.11.b/g/n/ac wireless LAN, Bluetooth 4.2, BLE
  • Gigabit Ethernet over USB 2.0 (maximum throughput 300 Mbps)
  • Extended 40-pin GPIO header
  • Full-size HDMI
  • 4 USB 2.0 ports
  • CSI camera port for connecting a Raspberry Pi camera

  • DSI display port for connecting a Raspberry Pi touchscreen display
  • 4-pole stereo output and composite video port
  • Micro SD port for loading your operating system and storing data, with Hacker StormOS, Raspbian-based OS included.
  • 5V/2.5A DC power input
  • USB 2.0 A to B Micro Power Cable. [The Storm can be powered from a 5V micro-USB source, Power Supply not included with base package.]
  • Power-over-Ethernet (PoE) support (requires separate PoE HAT)
  • Rollup Water Resistant Keyboard
  • Field Case Organizer for all your gear

Introducing the STORM!

Hack like the Pros

Take Your Hacking by STORM!

Still have questions?

1-888-330-HACK Mon - Fri / 8:00 AM - 5:00 PM