Study guide

ECIH study guide

Read a lesson, then practice the ideas you want to remember.

Lessons

  1. Cloud Shared Responsibility, Threat Landscap
  2. Cloud Telemetry and Audit Logging — Free Study Guide 2026
  3. Cloud Incident Containment, Snapshot Forensi
  4. Email Attack Vectors: Phishing, Spear Phishi
  5. Email Header Forensics, Link Triage, and Mal
  6. Email Authentication Protocols and Incident
  7. Windows Endpoint Forensics and Volatile Arti
  8. Linux and macOS Endpoint Incident Investigat
  9. Mobile Device Isolation, Acquisition, and In
  10. IoT Incident Handling and Firmware Investiga
  11. OT and ICS Incident Handling: Safety, Visibi
  12. Forensic Readiness Planning, Legal Mandates,
  13. First Response Principles, Scene Securing, a
  14. Digital Evidence Collection, Packaging, and
  15. Anti-Forensics Detection, Evidence Gaps, and
  16. Incident Containment Strategies, Isolation,
  17. Eradication Procedures, Remediation, and Sec
  18. Post-Incident Review, Lessons Learned, and T
  19. Incident Response Preparation, Policies, and
  20. Incident Recording, Categorization, and Tria
  21. Incident Notification, Escalation Paths, and
  22. Insider Threat Typologies, Behavioral Indica
  23. Insider Threat Detection: UEBA, Data Loss Pr
  24. Insider Incident Investigation, Evidence Han
  25. Information Security Fundamentals, Threat La
  26. Incident Management Principles, CSIRT Team S
  27. Cyber Defense Frameworks: NIST SP 800-61, IS
  28. Risk Management, Security Policies, and Secu
  29. Malware Classification, Attack Vectors, and
  30. Static Analysis, Dynamic Analysis, and Sandb
  31. Malware Detection, Memory Forensics, and Era
  32. Network Reconnaissance, Unauthorized Access,
  33. Denial of Service Attack Mechanisms and Traf
  34. Wireless Network Incidents, Session Hijackin
  35. Inappropriate Usage Incidents: Validation, E
  36. Web Application Threat Vectors: Injection, X
  37. Web Server and Application Log Analysis
  38. Web Application Incident Containment, Patchi