OffSec’s Incident Response Essentials (IR-200) course provides cybersecurity professionals with practical training to prepare for, identify, and handle security incidents effectively. The course focuses on core incident response concepts and explores how organizations manage and mitigate cyber threats in real-world situations.
Topics covered in the IR-200 course
Incident Response Overview
This module introduces the concepts of incident response with the main focus being NIST Special Publication 800-61.
Fundamentals of Incident Response
This module covers the roles and responsibilities of incident response teams, and the main frameworks used by incident responders (CREST, SANS, NIST).
Phases of Incident Response
NIST SP800-61 provides a four-phase model of Incident Response. This module describes what each phase of an incident response plan comprises.
Incident Response Communication Plans
Learn about the value and contents of incident response communications plans, and review examples of good and bad external communications.
Common Attack Techniques
This module covers opportunistic and targeted attacks.
Incident Detection and Identification
This module covers the detection and analysis of malicious activities.
Initial Impact Assessment
The first thing we need to do when a security incident occurs is an initial assessment of the scope and impact of the incident. This module covers the way in which this is accomplished.
Digital Forensics for Incident Responders
This Module covers forensic measures and evidence handling considerations.
Incident Response Case Management
This module covers case management theory with an IRIS lab.
Active Incident Containment
This module covers how to isolate and neutralize detected threats. It explores techniques such as design-led isolation, dynamic containment during incidents, and addresses topics like isolation techniques, containment strategies, and their implications for businesses.
Who is this course for?
The IR-200 course is designed for individuals seeking to build a strong foundation in incident response. It’s ideal for:
- Aspiring incident responders. - Security Operations Center (SOC) analysts. - IT security specialists. - Professionals aiming to transition into specialized cybersecurity roles focused on incident management.
The course provides the knowledge and skills necessary to effectively manage incidents and respond to cyber threats.
Benefits of the IR-200 Course
Current Challenges
The IR-200 course provides up-to-date training on the latest incident response strategies and technologies. By staying current, Learners can effectively counter new types of cyber attacks, ensuring your organization’s resilience and security.
Hands-on Experience
Through hands-on labs and instruction from seasoned professionals, OffSec’s IR-200 course strengthens the core competencies required for effective incident response.
Defense Capabilities
Investing in IR-200 training equips individuals and teams with specialized skills crucial for addressing today’s cyber threats.
Certificate
The course ends with an exam, the successful completion of which results in awarding the OffSec Certified Incident Responder (OSIR) certificate. The certification expires three years after being awarded.
Exam
- IR-200 course and online labs will prepare you for OSIR certification - The exam lasts 12 hours - The exam is supervised
The IR-200 course does not require any strict qualifications, but it is recommended that you:
- Basic understanding of networking concepts - Basic understanding of operating systems (Windows and Linux) - Familiarity with fundamental cybersecurity principles
These foundations will facilitate effective learning of the course material and full use of the skills offered.
All prices are given in USD (US dollars) net. We also allow payment in PLN (zloty) - in this case the final amount to be paid will be converted at the current NBP exchange rate on the day of the decision to purchase the product. 23% VAT should be added to the prices.
If the training and course are financed from public funds (applies to public sector entities), please contact us to agree on the price.
Note: A separate subscription is required for each course participant. Sharing a subscription between different individuals/companies is a violation of the Offensive Security course policy and may result in immediate termination of the course agreement.
Course + Cert Exam
1 749$
IR-200 course + 90 days of access to the laboratory + 1 attempt at the OSIR exam.
Learn One
2 749$
IR-200 Course (2 exam attempts) + Level 100 Courses + 365 days of lab access + PEN-103 Kali Linux Certified Professional (KLCP) Course (1 exam attempt) + PEN-210 Course (1 exam attempt) + Providing Grounds Practice Labs.
Learn Unlimited
6 099$
All courses (unlimited exam attempts) + 365 days of access to labs + Providing Grounds Practice Labs.
Exam
249$
Re-attempt of the OSIR exam.
Access
359$
Extension of access to the laboratory by another 30 days.
Order course or subscription
Are you interested in purchasing a course or subscription?
Do you have any questions?
Write to us through the contact form.
Do you want to maintain confidentiality?
Download our PGP/GPG key under the icon below and send an encrypted message to [email protected].
Cybersecurity and data protection. Penetration, social engineering and performance tests. Security audits and trainings. Authorized OffSec partner in Poland.
EN 
PL