GIAC Certified Incident Handler
IntermediateSOC / Blue TeamPaid
Validates ability to detect, respond to, and recover from security incidents. Covers attack techniques, hacker methodology, and incident response procedures. Directly aligned with SANS SEC504 (Hacker Tools, Techniques, Exploits). Widely respected for IR and SOC T2/T3 roles.
What you'll prove
- Identify attacker tools, techniques, and procedures
- Detect and investigate network-based and host-based intrusions
- Contain and eradicate security incidents using structured procedures
- Perform packet analysis and log review during incident investigations
- Understand common attack types including web attacks, password attacks, and malware
- Apply incident response lifecycle from preparation through lessons learned
Frequently asked
How much does GCIH cost?
GCIH standalone exam costs $999 USD. SANS SEC504 course (highly recommended) costs approximately $8,500-9,000 separately.
Where this fits