Cloud Incident Response and Forensics Training

With our strong network of national and international cyber and space partnerships, we are the only cyber centre in Australia that provides an opportunity for our education, industry and business sectors to come together to deliver industry leading training and events.

The Australian Cyber Collaboration Centre

Come along to a full day of Cloud Incident Response and Forensics Training (DFIR), introductory and advanced 
 sessions available.

Australian Cyber Collaboration Centre

The Australian Cyber Collaboration Centre has collaborated with Fircy, AustCyber SA Node and ISACA, Adelaide Chapter to deliver a full day of Cloud Incident Response and Forensics Training (DFIR). The Cloud Incident Response and Forensics Training will assist you in developing critical skills, technical capabilities and equip you with the foundational knowledge to respond to incidents in the cloud with a focus on Amazon Web Services (AWS). There will be 2 sessions available, both introductory and advanced. You can attend both sessions, or the session that will benefit your capabilities. The morning session will run from 8:30am to 12:30pm and is an introductory session that will deliver fundamental and introductory level content on threat actors that compromise cloud environments. 
The following topics will be covered:
<ul><li>Introduction to cloud IR, terminology and challenges</li><li>Past incidents and threat actors
</li><li>Sources of logs and evidence in AWS
</li><li>Data exfiltration in AWS
</li><li>Native and open-source tools for collection &amp; analysis
</li></ul>The afternoon session will begin immediately after with a catered lunch from 12:30pm to 1:30pm, then training from 1:30pm to 5:30pm in The Cyber Range. It will be hands-on training based on real incidents in the AWS cloud where you will work through practical exercises and scenarios covering the following topics: 
<ul><li>Threat hunting
</li><li>Log diving and analysis
</li><li>Evidence acquisition including management layer, network, host, storage
</li><li>Evidence handling and preservation
</li></ul>No knowledge of AWS is required. 
The event is fully catered with morning/afternoon tea and lunch for the afternoon participants. Please ensure you notify us of any dietary requirements in the registration form. This event is one not to be missed! You will walk away armed with the readiness and capability to effectively respond to cloud incidents for your business.

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}