Kaspersky launches new digital security course to improve incident response

Kaspersky has added a new cybersecurity course on digital forensics to its ever-growing expert training portfolio. InfoSec professionals can now learn the techniques for identifying, processing and analyzing digital evidence alongside experienced Kaspersky experts.

In 2023, more than a fifth of cyberattacks lasted over a month, prompting companies to emphasize the need for shorter “detection to resolution” times. One of the challenges hindering fast and efficient incident management is the ongoing skills shortage. To address this issue, Kaspersky has developed a training course that covers one of the most important parts of the incident response process and helps professionals acquire the necessary skills.

The Windows Digital Forensics course is designed to give participants a fundamental understanding of digital forensics and provide them with valuable insight and hands-on experience. The ability to identify digital traces of an attack’s development is one of the most valuable skills for cybersecurity professionals, as attacks can occur even when all prevention measures are in place.

In this course, participants will learn the methods for obtaining various digital evidence, finding traces of malicious actions, and using timestamps from various Windows artifacts to reconstruct an incident scenario. They will also gain expertise in analyzing browser and email histories. By the end of the course, participants will be familiar with incident containment, evidence gathering, log file analysis, network analysis, creating indicators of compromise (IoCs), and memory forensics.

The training program was developed by Ayman Shaaban, Digital Forensics and Incident Response Group Manager at Kaspersky, who has many years of expertise in cybersecurity. In addition to gaining comprehensive knowledge of digital forensics from the Kaspersky expert, participants will also be able to apply their newly acquired knowledge in a virtual lab. This secure virtual environment is specifically designed to assess participants’ level of understanding and improve their practical skills.

Part of a series of courses focused on incident response, this training allows specialists to customize their educational path in this field. It is equally useful for organizations looking to improve their incident response teams, as well as individual cybersecurity professionals looking to improve their technical analysis skills in digital forensics.

To achieve cyber resilience, organizations must be prepared for incidents by centrally managing logs, retaining them for extended periods of time, and protecting them from tampering, malicious access, or accidental loss. They must also be able to promptly conduct forensic investigations when needed. During this training course, you will learn about digital forensics as an important part of the incident response process and be equipped with useful knowledge that will help you quickly manage, contain, understand, and recover from cyber attacks and effectively minimize their impact as quickly as possible.

Ayman Shaaban, Digital Forensics and Incident Response Group Manager, Kaspersky