Hands-on incident response from another provider
OffSec Incident Responder is a vendor-neutral practical credential for triage, timeline analysis, and scoping, and sits directly alongside GEIR for people building an incident response profile.
Who it suits
Suits SOC analysts and aspiring responders who want to prove practical triage and investigation skills in a lab exam, and who are comfortable preparing through OffSec's course rather than SANS training.
Key differences
- The proctored exam has candidates follow an attacker through a simulated network in a SIEM and examine a disk image for a malicious executable.
- OffSec rates it at an associate level with no formal prerequisites, so it serves as an earlier step into incident response than a GIAC specialty credential.
- Its curriculum walks through the response lifecycle, evidence handling, eradication, and communications planning, anchored to OffSec's own course and labs.
- Level
- Associate
- Assessment
- Practical
- Study time
- 150-280h
- Listed from
- $1,749
