Get in Touch
 Duration 35 hours

Course Outline

Foundations of Cyber Threat Intelligence (CTI)

  • Defining CTI and its strategic significance
  • Categorizing CTI: Tactical, Operational, Strategic, and Technical
  • Essential terminology and core concepts
  • Identifying various cyber threat vectors (e.g., malware, phishing, ransomware)
  • Historical evolution of cyber threats and attacks
  • Contemporary trends shaping the threat landscape
  • Phases within the intelligence lifecycle

Methods for Data Collection

  • Identifying intelligence sources (open source, dark web, internal data)
  • Effective techniques for gathering data
  • Tools and technologies employed in data acquisition

Data Processing and Enrichment

  • Standard processing methodologies
  • Techniques for data normalization and enrichment
  • Leveraging tools to automate data processing

Techniques for Intelligence Analysis

  • Analytical approaches: link, trend, and behavioral analysis
  • Utilizing specialized tools for intelligence evaluation
  • Practical drills focused on data interpretation

Introduction to Threat Intelligence Platforms (TIPs)

  • Overview of leading TIPs (such as MISP, ThreatConnect, Anomali)
  • Core features and capabilities of TIPs
  • Integrating TIPs with existing security toolsets

Practical Application of Threat Intelligence Platforms

  • Guided session on configuring and operating a TIP
  • Processes for data ingestion and correlation
  • Customization of alerts and reporting mechanisms

Automation in Threat Intelligence

  • The role of automation in enhancing CTI operations
  • Strategies and tools for automating intelligence workflows
  • Hands-on exercises involving automation scripts

The Value of Information Sharing

  • Advantages and obstacles associated with sharing threat intelligence
  • Established models and frameworks (e.g., STIX/TAXII, OpenC2)

Establishing an Information Sharing Community

  • Best practices for fostering a collaborative sharing environment
  • Compliance with legal and ethical standards
  • Case studies highlighting successful sharing initiatives

Collaborative Threat Intelligence Exercises

  • Executing joint threat assessments
  • Simulating scenarios for intelligence exchange
  • Formulating strategies for effective team collaboration

Advanced Techniques in Threat Intelligence

  • Applying machine learning and AI within CTI
  • Refining advanced threat-hunting methodologies
  • Exploring emerging trends in the CTI domain

Analysis of Cyber Attack Case Studies

  • In-depth examination of significant cyber incidents
  • Extracting lessons and actionable intelligence insights
  • Practical tasks on creating comprehensive intelligence reports

Establishing a CTI Program

  • Methodology for developing and maturing a CTI framework
  • Defining metrics and KPIs to gauge CTI performance

Conclusions and Future Directions

Requirements

  • A solid foundation in cybersecurity principles and best practices
  • Knowledge of network and information security concepts
  • Practical experience with IT systems and infrastructure

Target Audience

  • Specialists in cybersecurity
  • IT security analysts
  • Personnel in Security Operations Centers (SOC)

Number of participants


Price per participant

Testimonials (2)

Upcoming Courses

Related Categories