As a not-newbie: the HTB module on Incident Handling is pretty okay.
Triage
Mapping to MITRE
Correlation (very, very, surface level and can be skipped if you're just breezing through)
Case management
Not bad, gotta say. I wish this shit existed when I started.
