IR-200 - Foundational Incident Response
IR-200 & OSIR certification
Foundational Incident Response: detect, analyse, contain and eradicate security incidents in a structured way.
- OffSec Incident Responder (OSIR)Foundational defense
Who it is for
- Incident responders and SOC teams
- IT security leads
- Basic Windows, Linux and networking knowledge
What you learn
- Incident response lifecycle based on ITIL
- Detection and identification
- Digital forensics and evidence handling
- Communications plan before, during and after a crisis
- Analysing attack techniques
- Containment and eradication
Certification
OffSec Incident Responder (OSIR)
Proctored hands-on exam with realistic incidents, followed by a report. Passing earns OSIR.
Why buy through XPLT
Local B2B invoicing in EUR or AED.
One counterpart for licence, term and rollout.
Optional guidance from XPLT instructors.
FAQ
Who benefits most from IR-200?
Teams that handle incidents ad hoc today and want a robust process.
Can I combine IR-200 with TH-200?
Yes. Hunting finds threats, incident response handles them; they complement each other.
How do I order?
Through the request form on our OffSec page.
Ready for OSIR?
Send us your requirement and we will reply with a tailored quote.