Entry Point
An overview of everything. Start here if you're just getting into incident investigation!
What to expect

This course will focus on introducing topics with brief lectures, followed by hands-on exercises to further explore those topics. During the exercises, instructors and teaching assistants will be available to answer questions and provide guidance. Classes general start at 8:00 AM and wrap up at 5:00 PM. Please consult the schedule for this event for exact times. Breaks mid-morning, lunch and mid-afternoon give you a chance to clear your mind or continue working on exercises at your discretion.

  • Entry Level Network Operation Center Analysts
  • Entry Level Security Operations Center Analysts
  • Managers wanting to gain a basic understanding of security concepts
  • Windows Users interested in security

If you looked at the other Cyber Fire course descriptions and are concerned that they are too advanced, you are in the right spot.

If you have basic skills in network protocols, network packet capture, viewing files in hex editors and/or calculating file hashes, you may want to consider one of the more advanced courses.


The class requires laptops with virtualization software. We recommend VMWare products such as Workstation Pro or Workstation Player for Windows and Linux or VMWare Fusion for OSX. VirtualBox will work, but you may be limited on advanced virtual machine functionality.

Setup instructions and a link to download the class Virtual Machine will be provided to registrants via email before the event.