Online training material

Training Resources

ENISA Cyber Security Training material was introduced in 2008. Since then it has been complemented with new additions containing essential material for success in the CSIRT community and in the field of Cyber Security. In these pages you will find the training material, containing Handbooks for teachers, Toolsets for students and Virtual Images to support hands on training sessions.

In order to deliver trainings more efficiently with better and longer lasting results, the following resources can be used.

The ENISA CERT training material covers four main areas:

	Topics
Technical	Building artefact handling and analysis environment Processing and storing artifacts Artefact analysis fundamentals Advanced artefact handling Introduction to advanced artefact analysis Dynamic analysis of artefacts Static analysis of artefacts Forensic analysis: Local Incident Response (2016) Forensic analysis: Network Incident Response (2016) Forensic analysis: Webserver Analysis (2016) Developing Countermeasures Common framework for artefact analysis activities Using indicators to enhance defence capabilities Identification and handling of electronic evidence Digital forensics Mobile threats incident handling Mobile threats incident handling (Part II) Proactive incident detection Automation in incident handling Orchestration of CSIRT Tools (2019-2021) Network forensics Honeypots Vulnerability handling Presenting, correlating and filtering various feeds
Operational	Incident handling during an attack on Critical Information Infrastructure Advanced Persistent Threat incident handling Social networks used as an attack vector for targeted attacks Writing Security Advisories Cost of ICT incident Incident handling in live role playing Incident handling in the cloud Large scale incident handling
Setting Up a CSIRT	Incident handling management (2016) Recruitment of CSIRT staff (2016) Developing CSIRT infrastructure (2016)
Legal and Cooperation	Establishing external contacts Cooperation with law enforcement Assessing and Testing Communication Channels with CERTs and all their stakeholders Identifying and handling cyber-crime traces Incident handling and cooperation during phishing campaign Cooperation in the Area of Cybercrime CERT participation in incident handling related to the Article 13a obligations CERT participation in incident handling related to the Article 4 obligations

Browse the Topics