Case Study: Incident Response Simulation — Roadmap Step & Resources
Responding to a simulated breach from initial alert through containment and report
- Level: advanced
- Estimated time: 2 days
- Roadmap: Cybersecurity Analyst / Ethical Hacker
Before this step
Mini projects
- Run a tabletop incident response exercise for a simulated ransomware event
Study resources
- NIST Computer Security Incident Handling Guide (PDF) — NIST's official incident handling guide, the primary reference for this simulation.
- Incident Response Tabletop Exercise Explained (Video) — A practical walkthrough directly applicable to running a tabletop IR exercise.
- Being On-Call (Article) — Google's SRE book chapter on preparing for and running incidents, directly applicable to this simulation.
Part of
- Certifications, Career and Capstone — section
- Cybersecurity Analyst / Ethical Hacker roadmap — the full learning path