Hands-On Case management
RCCE students will learn security incident case management including ticket creation, case assignment, evidence tracking, investigation workflow management, and case closure procedures. RCCE students will learn to configure and operate security case management platforms, define case severity and priority classifications, manage evidence chain of custody within case records, track investigation progress and analyst workload, escalate cases based on defined criteria, generate case metrics and reporting dashboards, integrate case management with SIEM and SOAR platforms, and maintain comprehensive case documentation that supports legal proceedings and regulatory inquiries. This practice-intensive course emphasizes applied skills through lab exercises, real-world scenarios, and production-realistic workflows. At an expert level, RCCE students will learn by doing, building muscle memory and practical confidence through repeated hands-on engagement. Students complete exercises that mirror actual workplace tasks, ensuring skills transfer directly to their professional roles.
- SOC Analysts and Incident Responders
- Detection Engineers and SIEM Content Authors
- Threat Hunters improving adversary coverage
- Security Operations Team Leads
- Professionals implementing Hands-On Case management
- Execute hands-on tasks for hands-on case management
- Execute hands-on tasks for advanced cyber defense mastery
- Explain Executive Overview fundamentals
- Execute hands-on tasks for why case management matters — covering Central nervous system of SOC operations.
- Execute hands-on tasks for strategic importance
- Execute hands-on tasks for legal readiness
- Execute hands-on tasks for operational efficiency
- Execute hands-on tasks for visibility & oversight
- Execute hands-on tasks for core definitions
- Execute hands-on tasks for security case
- Execute hands-on tasks for case lifecycle
- Execute hands-on tasks for intake → triage → investigation → action → closure → review
| Module 01 | Hands-On Case Management |
| Module 02 | Advanced Cyber Defense Mastery |
| Module 03 | Executive Overview |
| Module 04 | Why Case Management Matters |
| Module 05 | Strategic Importance |
| Module 06 | Legal Readiness |
| Module 07 | Operational Efficiency |
| Module 08 | Visibility & Oversight |
| Module 09 | Core Definitions |
| Module 10 | Security Case |
| Module 11 | Case Lifecycle |
| Module 12 | Intake → Triage → Investigation → Action → Closure → Review |
| Module 13 | Case Management Lifecycle |
| Module 14 | Key Principles |
All hands-on labs run on Rocheston Rose X OS. Students practice hands-on case management by implementing the controls discussed in class, with a focus on real-world deployment, monitoring, and validation.
- Lab 1: Execute hands-on tasks for hands-on case management
- Lab 2: Execute hands-on tasks for advanced cyber defense mastery
- Lab 3: Explain Executive Overview fundamentals
- Lab 4: Execute hands-on tasks for why case management matters
- Lab 5: Execute hands-on tasks for strategic importance
Upon successful completion of this course, students will receive an official RCCE Course Completion Certificate for Hands-On Case management, verifiable through the Rocheston certification portal.
- Full access to all course materials and slide decks
- Hands-on lab access on Rocheston Rose X OS environment
- Access to Rocheston CyberNotes
- Access to Rocheston Zelfire — EDR/XDR SIEM platform
- Access to Rocheston Raven — online cyber range exercise platform
- Access to Rocheston Vulnerability Vines AI