EC-Council Certified Incident Handler (ECIH)
Program sertifikasi resmi EC-Council untuk profesional yang ingin menguasai penanganan insiden keamanan siber — dari deteksi dini hingga recovery pasca insiden.
Tujuan Pelatihan
- Memahami konsep dan proses incident response sesuai standar EC-Council dan framework internasional (NIST, SANS, ISO)
- Mendeteksi dan menganalisis insiden siber termasuk malware, phishing, ransomware, dan serangan jaringan
- Menangani insiden dengan metode proaktif, mulai dari containment, eradication, hingga recovery
- Menyusun laporan dan dokumentasi insiden secara profesional untuk kepatuhan, audit, dan evaluasi internal
- Menggunakan tools dan framework Incident Response modern untuk praktik lapangan, threat hunting, dan investigasi forensik
- Mengembangkan keterampilan karier sebagai Incident Handler atau SOC Analyst dengan kemampuan analisis, komunikasi, dan koordinasi tim
Jadwal & Materi Pelatihan
Kurikulum ECIH mengikuti standar resmi EC-Council, mencakup seluruh fase penanganan insiden keamanan siber — dari persiapan hingga pemulihan.
08:00 – 08:30
Welcome & ECIH v3 Overview
- Perkenalan kelas
- Struktur training
- Proses sertifikasi
08:30 – 11:30
Module 01: Introduction to Incident Handling and Response
- Ancaman keamanan informasi & attack vector
- Attack & defense framework (Cyber Kill Chain, MITRE ATT&CK)
- Konsep dasar keamanan informasi & insiden keamanan informasi
- Proses manajemen insiden serta otomasi & orkestrasi (SOAR)
- Best practice, standar, framework keamanan siber, hukum & kepatuhan
Lab: Eksplorasi platform SOAR & framework respons insiden12:30 – 15:45
Module 02: Incident Handling and Response Process
- Proses IH&R (9 tahap): preparation hingga post-incident activities
- Incident recording, assignment, triage
- Notifikasi, containment, eradication
- Evidence gathering, forensic analysis, recovery
- Information sharing activities
Lab: Simulasi end-to-end proses IH&R pada studi kasus insiden15:45 – 16:00
Review & Diskusi Hari 1
08:00 – 11:00
Module 03: Forensic Readiness and First Response
- Computer forensics & forensic readiness
- First response
- Securing/documenting digital crime scene
- Evidence collection, preservation, packaging, transport
- Anti-forensics
Lab: Praktik pengumpulan & preservasi bukti digital12:00 – 15:45
Module 04: Handling and Responding to Malware Incidents
- Malware incident handling & preparation
- Detection & containment
- Static & dynamic malware analysis
- Eradication & recovery
- Case study/best practice
Lab: Basic malware analysis & containment in simulated environment15:45 – 16:00
Review & Diskusi Hari 2
08:00 – 11:15
Module 05: Handling and Responding to Email Security Incidents
- Email security incident concepts/preparation
- Detection & containment
- Analysis, eradication, recovery
- Case study/best practice
Lab: Phishing email analysis & social engineering indicators12:15 – 15:45
Module 06: Handling and Responding to Network Security Incidents
- Network security incident handling/preparation
- Detection & validation
- Unauthorized access & inappropriate usage
- DoS/DDoS
- Wireless network security incidents
Lab: Detection & validation using traffic analysis tools15:45 – 16:00
Review & Diskusi Hari 3
08:00 – 11:15
Module 07: Handling and Responding to Web Application Security Incidents
- Web application incident handling/preparation
- Detection & containment
- Analysis
- Eradication & recovery
- Case study/best practice
Lab: Forensic investigation of web application attack incident12:15 – 15:45
Module 08: Handling and Responding to Cloud Security Incidents
- Cloud security incident handling
- Steps for cloud security incident handling
- Azure, AWS, Google Cloud
- Case study/best practice
Lab: Cloud incident response simulation15:45 – 16:00
Review & Diskusi Hari 4
08:00 – 10:30
Module 09: Handling and Responding to Insider Threats
- Insider threat handling/preparation
- Detection & containment
- Analysis, eradication, recovery
- Case study/best practice
Lab: Insider threat behavioral indicators analysis11:30 – 14:00
Module 10: Handling and Responding to Endpoint Security Incidents
- Endpoint security incident handling
- Mobile security incidents
- IoT incidents
- OT/ICS incidents
- Endpoint security case study
Lab: Endpoint & IoT incident response simulation14:15 – 16:00
Final Review & Persiapan Ujian
- Review 10 modules
- Exam strategy
- Sample questions
- Q&A
- Certificate of Attendance
Untuk Siapa Pelatihan Ini
SOC Analyst & Incident Response Team
IT Security Professional yang menangani insiden siber
Digital Forensic Investigator
Profesional IT yang ingin membangun karier di bidang Incident Handling
Investasi Program
Termasuk:
- Intensive Training (5 Days)
- Official EC-Council Exam Voucher
- Official Training Material (e-Courseware)
- Official iLabs Access
- Certificate of Attendance
Komponen paket dapat disesuaikan — konsultasikan kebutuhan tim Anda untuk penawaran lebih detail.
Konsultasi Gratis 30 MenitPertanyaan yang Sering Diajukan
Tertarik dengan Sertifikasi ECIH?
Konsultasikan kebutuhan tim Anda — jadwal, harga, dan format pelatihan akan kami sesuaikan.