GIAC Certified Incident Handler (GCIH)

Incident handlers manage security incidents by understanding common attack techniques, vectors and tools as well as defending against and/or responding to such attacks when they occur. The GCIH certification focuses on detecting, responding, and resolving computer security incidents and covers the following security techniques: the steps of the incident handling process; detecting malicious applications and network activity; common attack techniques that compromise hosts; detecting and analyzing system and network vulnerabilities; and continuous process improvement by discovering the root causes of incidents.