Associate
EC-Council · Associate
EC-Council Certified Incident Handler (ECIH) Training Course
ECIH training — a structured, hands-on approach to handling and responding to security incidents.
Course overview
About this course
ECIH teaches a complete incident-handling process — from preparation and detection through containment, eradication and recovery.
What you’ll learn
- Incident-handling and response process
- Handling malware and network incidents
- Containment, eradication and recovery
- Post-incident activities and reporting
Who it’s for
Incident responders, SOC analysts and administrators.
Course outline
01
Incident-handling process
A structured process for handling security incidents.
02
Handling key incident types
Respond to malware, network and application incidents.
03
Containment & recovery
Contain, eradicate and recover from incidents.
04
Post-incident activity
Lessons learned, reporting and improvement.
Frequently asked questions
How long is the ECIH course?
Typically three days, instructor-led, online or on-site.
How does ECIH differ from CSA?
CSA focuses on SOC monitoring and detection; ECIH focuses on the full incident-response process. They complement each other well.
Related courses
Continue your pathway
AssociateAssociate
Certified SOC Analyst (CSA)
View courseProfessional
Computer Hacking Forensic Investigator (CHFI)
View courseReady to start EC-Council Certified Incident Handler (ECIH)?
Ask about cohort dates, online or on-site delivery and group rates — or book your place today.