ECIH

ECIH is EC-Council's certification covering the incident-handling process from preparation through containment and recovery. It is a vendor-neutral, mid-level credential for responders and SOC analysts who want a structured methodology across malware, insider, and network incidents. Compared with GIAC's more hands-on GCIH, it leans toward process and framework knowledge over deep technical exercises.