Incident Responder
Follow this curated learning path to respond to and resolve security incidents with confidence as an Incident Responder.
These five courses guide you through managing incidents end-to-end, detecting compromises on hosts and containers, automating remediation, and using infrastructure data to inform your response. Engage in hands-on practice within live demo environments to gain experience analyzing real-time data using a free Datadog trial account.
This path is designed specifically for Incident Responders and other roles responsible for leading the response to active security incidents and coordinating remediation.
You’ll learn how to do the following:
Getting Started with Incident Management
Learn how to manage incidents using Datadog Incident Management. By the end of this course, you'll know how to set up Incident Management, detect and declare incidents, and guide your team through resolution.
Detect Host and Container Compromises with Workload Protection
Monitor file, network, process, and kernel activity with Workload Protection. Detect and investigate intrusions and running malware in real-time. Secure containerized and host-based workloads.
Automate Threat Investigation and Remediation with Security Workflows
Automate security investigation and remediation tasks with Datadog Workflow Automation and Cloud SIEM. Create security workflows using Cloud SIEM Content Packs and SOAR blueprints. Automate threat remediation in AWS using security workflows.
Log Analytics with Notebooks
Learn how to use reference tables, transformation cells, and SQL queries in Datadog Notebooks to investigate log data. Join data from multiple sources to analyze suspicious IP activity and calculate the business impact of failed transactions.
Getting Started with Infrastructure and Cloud Network Monitoring
Learn how to analyze metrics, visualize network and infrastructure performance, and troubleshoot issues effectively in this introduction to using Datadog’s Infrastructure and Cloud Network Monitoring (CNM).
