Official EC-Council Certified Incident Handler (ECIH)

EC-Council’s Certified Incident Handler program equips students with the knowledge, skills, and abilities to effectively prepare for, deal with, and eradicate threats and threat actors in an incident.

This course package includes:

• ECIH Online Self-Paced Course (1 year access)
• E-Courseware
• CyberQ Labs (6 months)
• Certificate of Completion
• Certification Exam

EC-Council Certified Incident Handler (ECIH)

Digital certificate - Included

This program provides the entire process of Incident Handling and Response and hands-on labs that teach the tactical procedures and techniques required to effectively Plan, Record, Triage, Notify and Contain.

ECIH also covers post incident activities such as Containment, Eradication, Evidence Gathering and Forensic Analysis,

leading to prosecution or countermeasures to ensure the incident is not repeated.

With over 95 labs, 800 tools covered, and exposure to Incident Handling activities on four different operating systems, E|CIH provides a well-rounded, but tactical approach to planning for and dealing with cyber incidents.

EC-Council’s Certified Incident Handler provides students with a method-driven program that uses a holistic approach to cover vast concepts concerning organizational incident handling and response from preparing and planning the incident handling response process to recovering organizational assets after a security incident. The skills taught in EC-Council’s ECIH program are desired by cybersecurity professionals from around the world and is respected by employers.

What you will learn:

• Key issues plaguing the information security world
• Various types of cyber security threats, attack vectors, threat actors, and their motives, goals, and objectives of cyber security attacks
• Various attack and defense frameworks (Cyber Kill Chain Methodology, MITRE ATT&CK Framework, etc.)
• Fundamentals of information security concepts (Vulnerability assessment, risk management, cyber threat intelligence, threat modeling, and threat hunting)
• Fundamentals of incident management (information security incidents, signs and costs of an incident, incident handling and response, and incident response automation and orchestration)
• Different incident handling and response best practices, standards, cyber security frameworks, laws, acts, and regulations
• Various steps involved in planning incident handling and response program (Planning, recording and assignment, triage, notification, containment, evidence gathering and forensic analysis, eradication, recovery, and post-incident activities)
• Importance of first response and first response procedure (Evidence collection, documentation, preservation, packaging, and transportation)
• How to handle and respond to different types of cyber security incidents in a systematic way (malware incidents, email security incidents, network security incidents, web application security incidents, cloud security incidents, insider threat-related incidents, and endpoint security incidents).

• Passing Score

  In order to maintain the high integrity of our certifications exams, EC-Council Exams are provided in multiple forms (I.e. different question banks). Each form is carefully analyzed through beta testing with an appropriate sample group under the purview of a committee of subject matter experts that ensure that each of our exams not only has academic rigor but also has “real world” applicability. We also have a process to determine the difficulty rating of each question. The individual rating then contributes to an overall “Cut Score” for each exam form. To ensure each form has equal assessment standards, cut scores are set on a “per exam form” basis. Depending on which exam form is challenged, cut scores can range from 60% to 78%.

  Exam Name: ECIH 212-89

  Number of Questions: 100

  Test Delivery: EC-Council Exam Portal

  Test Format: Multiple Choice

  Please Note:

  1. Upon enrolment, it will take up to 48 hours (business days) for portal credentials to be shared with you by EC-Council.

  DoviLearn Global Education Limited is an authorised reseller partner of EC-Council, and by enrolling on this course, you will get access to the official package delivered by EC-Council itself. Access to the course on the EC-Council portal will be provided within 48 hours of enrolling here.

  A three-month payment plan is available for UK residents via Klarna through Stripe. This means that you have the option to split your payments into three.

  *We are VAT-exempt, so you save an extra 20% on VAT!

This course is designed for IT professionals, cybersecurity specialists, incident response teams, and anyone seeking to enhance their skills in managing and mitigating cybersecurity incidents. It is ideal for individuals aiming to pursue a career in cybersecurity or strengthen their expertise in incident handling and response.

No special requirements are needed to take this course.

The EC-Council Certified Incident Handler (ECIH) course leads to roles such as Incident Response Specialist, Cybersecurity Analyst, SOC Analyst, IT Security Consultant, and Threat Intelligence Analyst. It also provides a foundation for advancing into leadership positions in cybersecurity management, forensics, and risk assessment, focusing on incident mitigation.