Course Outline
Foundations of Cyber Threat Intelligence (CTI)
- Defining CTI and its strategic significance
- Categorizing CTI: Tactical, Operational, Strategic, and Technical
- Essential terminology and core concepts
- Identifying various cyber threat vectors (e.g., malware, phishing, ransomware)
- Historical evolution of cyber threats and attacks
- Contemporary trends shaping the threat landscape
- Phases within the intelligence lifecycle
Methods for Data Collection
- Identifying intelligence sources (open source, dark web, internal data)
- Effective techniques for gathering data
- Tools and technologies employed in data acquisition
Data Processing and Enrichment
- Standard processing methodologies
- Techniques for data normalization and enrichment
- Leveraging tools to automate data processing
Techniques for Intelligence Analysis
- Analytical approaches: link, trend, and behavioral analysis
- Utilizing specialized tools for intelligence evaluation
- Practical drills focused on data interpretation
Introduction to Threat Intelligence Platforms (TIPs)
- Overview of leading TIPs (such as MISP, ThreatConnect, Anomali)
- Core features and capabilities of TIPs
- Integrating TIPs with existing security toolsets
Practical Application of Threat Intelligence Platforms
- Guided session on configuring and operating a TIP
- Processes for data ingestion and correlation
- Customization of alerts and reporting mechanisms
Automation in Threat Intelligence
- The role of automation in enhancing CTI operations
- Strategies and tools for automating intelligence workflows
- Hands-on exercises involving automation scripts
The Value of Information Sharing
- Advantages and obstacles associated with sharing threat intelligence
- Established models and frameworks (e.g., STIX/TAXII, OpenC2)
Establishing an Information Sharing Community
- Best practices for fostering a collaborative sharing environment
- Compliance with legal and ethical standards
- Case studies highlighting successful sharing initiatives
Collaborative Threat Intelligence Exercises
- Executing joint threat assessments
- Simulating scenarios for intelligence exchange
- Formulating strategies for effective team collaboration
Advanced Techniques in Threat Intelligence
- Applying machine learning and AI within CTI
- Refining advanced threat-hunting methodologies
- Exploring emerging trends in the CTI domain
Analysis of Cyber Attack Case Studies
- In-depth examination of significant cyber incidents
- Extracting lessons and actionable intelligence insights
- Practical tasks on creating comprehensive intelligence reports
Establishing a CTI Program
- Methodology for developing and maturing a CTI framework
- Defining metrics and KPIs to gauge CTI performance
Conclusions and Future Directions
Requirements
- A solid foundation in cybersecurity principles and best practices
- Knowledge of network and information security concepts
- Practical experience with IT systems and infrastructure
Target Audience
- Specialists in cybersecurity
- IT security analysts
- Personnel in Security Operations Centers (SOC)
Testimonials (2)
Clarity and pace of explanations
Federica Galeazzi - Aethra Telecomunications SRL
Course - AI-Powered Cybersecurity: Advanced Threat Detection & Response
It did give me the insight what I needed :) I am starting teaching on a BTEC Level 3 qualification and wanted to widen my knowledge in this area.