IR250 - Incident Investigation Training

Live Online & Classroom Enterprise Training

A hands-on incident investigation course that teaches how to collect and analyze digital evidence — including disk, memory, file system, and registry artifacts — using forensic tools such as OpenText Endpoint Investigator within investigation scenarios.

Looking for a private batch ?

REQUEST A CALLBACK

Enterprise Reporting
Lifetime Access
CloudLabs
24x7 Support
Real-time code analysis and feedback

What is IR250 - Incident Investigation Training about?

This hands-on course focuses on the use of OpenText™ Endpoint Investigator and other tools to acquire and analyze data in a manner that demonstrates the relevance of various file system, network, and memory-based artifacts in the context of an investigative scenario. Students will examine the different factors that affect incident investigations, including planning, basic forensic principles, and examination and response options. They will observe how failing to take note of important issues and implement suitable policies can lead to weaknesses in IT infrastructure and the loss of evidential data. Conversely students will learn to appreciate the benefits of forward planning, employee education, audit and event logging, and suitable access-control policies. This course is very much focused on the recovery of data for the purposes of an investigation and the context in which said data may prove valuable. Students will participate in practical exercises throughout the course to underscore and drive home the skills taught.

What are the objectives of IR250 - Incident Investigation Training ?

After completing this course, you will be able to:

Understand incident investigation and response planning fundamentals.
Capture and analyze disk and memory data using Endpoint Investigator and related tools.
Interpret Windows file system metadata, timestamps, and registry artifacts.
Identify and recover encrypted and hidden data artifacts (e.g., EFS/BitLocker, alternate data streams).
Examine event logs, shellbags, USN change logs, shortcuts, browser histories, and shadow copies for investigative context.

Who is IR250 - Incident Investigation Training for?

This training is ideal for:

Digital forensic analysts and incident responders.
Security operations center (SOC) personnel involved in investigations.
IT professionals responsible for handling breaches and evidence collection.
Security engineers wanting practical forensic skills.
Practitioners preparing for more advanced DFIR and EnCase training.

What are the prerequisites for IR250 - Incident Investigation Training?

Participants should ideally have:

Completed DF120 – Foundations in Digital Forensics or equivalent knowledge.
Basic understanding of Windows operating systems and file systems.
Familiarity with command-line tools and data acquisition basics.
General knowledge of cybersecurity and incident response concepts.
Access to forensic tools and lab environment for exercises.

Available Training Modes

Live Online Training

4 Days

Course Outline Expand All

Expand All

Incident Investigation Fundamentals

Data Acquisition Techniques

Windows Metadata & Registry Analysis

Encrypted Data and Access Control

Artifact Interpretation

Event Logs & Shadow Copy Examination

Memory Analysis

Who is the instructor for this training?

The trainer for this IR250 - Incident Investigation Training has extensive experience in this domain, including years of experience training & mentoring professionals.

IR250 - Incident Investigation Training - Certification & Exam

SpringPeople is the Authorized Training Partner of Opentext.
The training fees is exclusive of exam cost.
For any queries, feel free to reach us at Opentext@springpeople.com

Reviews

My outlook on training changed completely after attending SpringPeople BPC training. The content, the trainer and infrastructure at SpringPeople were top notch and perfectly in tune with the industry requirements. Regardless to say, training is now something that I look forward to to. Kudos to everyone at SpringPeople!

Shweta Priya

Sony

I attended the 3-day AngularJs training at SpringPeople. The trainer was an industry veteran with vast experience in the subject. Notably, the hands-on training, and the Q&A session stood out. Overall, I found SpringPeople a great place to learn with excellent facilities and great trainers. Would recommend SpringPeople to my colleagues and friends.

Swati Singh

I attended the training on API Design for Mulesoft. The sessions were well planned and value-laden. I benefited immensely from the hands-on experience enabled through virtual labs. I would like to specifically commend the efficiency of the support team who were always available to resolve my concerns.

Nikhil Kohli

Stryker

I attended the jQuery training batch, conducted by Mr. Vijay, an SME who did a thorough coverage of all the essentials. He took us through concepts such as jQuery animations, event handlers, plugins, and jQuery-UI by small programs, very easily. The sessions were useful and well structured. By the end of the training, I was well equipped to develop a SPA on Product Management System. Overall, the learning experience at SpringPeople was great!

Heena Rajan

Mindtree