Two-day training · Labs and CTF
Cloud Incident Response
Advanced incident response in AWS
Detect, analyse, contain and recover from cloud-based compromises in AWS — through lectures, hands-on labs and Capture The Flag challenges, on cloud tenants and investigation data we provide.
Dates
November 21–22
Venue
AC Hotel Bellevue
Bellevue, Washington
Instructor
Korstiaan Stam
Invictus Incident Response
Price
$3,400
per seat
Abstract
This course gives you the knowledge, skills and hands-on experience needed to respond to security incidents in AWS environments.
Across a mix of lectures, labs and Capture The Flag challenges, you'll learn how to detect, analyse, contain and recover from cloud-based compromises within AWS. We provide access to the cloud tenants and the investigation data, so you work the incidents on real ground rather than on slides.
What you'll
be able to do
AWS attacks
A deep understanding of the attacks that land in AWS, and how to respond to them.
Forensic analysis
Hands-on experience performing forensic analysis of the relevant AWS logging.
Incident triage
The ability to perform incident triage in AWS environments.
Outline
Course outline
The full module breakdown for this session is coming soon and will be published here before registration closes.
Before you
arrive
Prerequisites
A working knowledge of AWS.
What to bring
A laptop with an up-to-date operating system and browser.
Certificate
Every student who completes the training receives a continuing education certificate in both forms — a printed copy and a digital version you can file for CPE records or add to your LinkedIn profile.
Your trainer
Korstiaan Stam
Founder · Invictus Incident Response
Korstiaan is an enthusiastic and driven cyber security specialist. He founded his own incident response firm, Invictus Incident Response, to help organisations respond to cyber security incidents in the cloud.
He is passionate about sharing what he knows and mentoring people new to the field, and about building lasting relationships and leading teams.
- RoleFounder, Invictus Incident Response
- FocusIncident response for cloud environments
- Teaching
- Black Hat
- DEF CON
- SANS Institute
Register
November 21–22 · AC Hotel Bellevue, WA
Two days in Bellevue, Washington with Korstiaan Stam.
Lunch is on us: $25/day credit
The first 10 students to register for Korstiaan’s training receive a $25 lunch reimbursement for each day of class — up to $50 total. Grab lunch wherever you like, keep your receipts (physical or electronic), and bring them to me for a cash reimbursement.
Cancellations can be made without a fee before August 31. After August 31, $200 is subtracted from the refund to cover non-refundable fees.
Part of the November 21–22, 2026 event — see the full event, venue and other trainings on that weekend.