EC-Council · Intermediate
EC-Council Certified Incident Handler v3
Incident handling and response across the full lifecycle, mapped to NICE 2.0 and CREST CCIM: from preparation and triage to eradication, recovery and post-incident reporting.
212-89
- Duration
- 3 days · 24 hours
- Exam code
- 212-89
- Exam format
- 100 questions · 3 hours
- Delivery
- Onsite or live online
What you'll learn
- Incident handling and response process
- Forensic readiness and first response
- Handling malware, email, web app and network incidents
- Cloud and insider threat incidents
- Endpoint security incidents
Who it's for
- SOC analysts and incident responders
- Security administrators
- IT managers who own incident plans
What's included
- Official EC-Council eCourseware
- Hands-on iLabs / cyber range access
- EC-Council exam voucher
- Certificate of attendance from ERG
Upcoming classes
Pick a batch and reserve your seat. Can't make these dates? We open new batches and run private classes on request.
Questions about ECIH?
Talk to us about prerequisites, exam vouchers or training for your team.