Kurssi koostuu kolmesta eri modulista, joissa harjoitellaan tietoturvapoikkeamien käsittelyyn vaadittavia edistyneempiä taitoja. Kurssin materiaali on englanniksi ja koulutuskielenä suomi.

Tarkempi kuvaus sisällöstä TRANSITS II -kurssin alkuperäiseltä sivulta:

TRANSITS II courses are aimed at more experienced personnel working for established CSIRTs. They provide an in-depth study of network monitoring techniques, forensic analysis, the use of 'fire drills' for improving response and coordination, as well as providing training in how to improve communications with constituents.

TRANSITS II courses are open to individuals familiar with incident handling and response techniques who are currently working for a CSIRT or network security related organisation.  Please note - those (fairly) new to incident handling and response work are advised to follow TRANSITS I first.

The following modules are covered:

• NetFlow Analysis - Covers how to analyse traffic flow log data captured in routers and switches. The nfsen and nfdump software can provide detailed anomaly detection and enable further forensic investigations to be undertaken.
• Forensics - Covers how to collect evidence when network and systems are compromised. Data recovery from both disk and memory is also covered..
• CSIRT Exercises - The worst time to try and develop a procedure is during an incident. This module selects 'fire drills' from the ENISA CSIRT Handbook and works through them as a group to highlight areas that may require attention in your operations.