For608.pdf: Sans

SANS FOR608: Enterprise-Class Incident Response & Threat Hunting focuses on managing large-scale, complex networks by prioritizing automation and advanced data analysis over traditional, single-host forensics. The curriculum emphasizes hands-on proficiency with tools like Velociraptor and the ELK stack to detect advanced persistent threats across enterprise environments and prepares professionals for the GIAC Enterprise Incident Response (GEIR) certification. You can learn more about the course at the SANS Institute website.