Offensive Ops - SEC504: Hacker Tools, Techniques, & Incident Handling

Detect and respond to attacks using the same tools and techniques adversaries employ. Master incident handling through hands-on exercises that expose real-world attack patterns and defense strategies.

Adversaries constantly evolve their methods. SEC504 teaches security practitioners to think like attackers, enabling faster detection and more effective response. Over 30 hands-on labs immerse you in both offensive techniques and defensive countermeasures.

Cover the complete attack lifecycle:

Reconnaissance and Initial Access

• Discover targets through OSINT and network scanning
• Exploit common vulnerabilities for initial foothold
• Analyze phishing campaigns and social engineering tactics
• Identify indicators of compromise during early attack stages

Persistence and Lateral Movement

• Detect post-exploitation activities and persistence mechanisms
• Track credential theft and privilege escalation
• Follow attackers across network segments
• Identify command and control communications

Incident Response and Remediation

• Apply the six-step incident response process
• Collect and preserve digital evidence
• Contain active intrusions while maintaining business operations
• Eradicate threats and implement lessons learned

Build practical skills with industry-standard tools: Metasploit, Nmap, Wireshark, and forensic utilities. Understand attacker methodology so deeply that you anticipate their next move.

The course culminates in a full-day hands-on incident handling exercise simulating real-world breach response.

Earn GIAC GCIH certification (exam sold separately). 37 CPE credits across 6 intensive days.