Get in Touch
 Duration 35 hours

Course Outline

Foundations of Cyber Threat Intelligence (CTI)

  • Defining CTI and its strategic value
  • Categorizing CTI: Tactical, Operational, Strategic, and Technical
  • Essential concepts and industry terminology
  • Identifying various threat vectors (malware, phishing, ransomware, etc.)
  • Historical context of cyber attacks
  • Current developments in the threat landscape
  • Phases of the intelligence lifecycle

Methodologies for Data Acquisition

  • Origins of intelligence data (open source, dark web, internal feeds)
  • Strategies for efficient data collection
  • Tools and technologies employed in gathering intelligence

Processing and Enriching Data

  • Techniques for data refinement
  • Normalizing and enhancing raw data
  • Utilizing tools to automate processing workflows

Techniques for Intelligence Analysis

  • Analytical frameworks: link, trend, and behavioral analysis
  • Software solutions for analyzing intelligence
  • Practical exercises focused on data evaluation

Overview of Threat Intelligence Platforms (TIPs)

  • Survey of leading TIPs (e.g., MISP, ThreatConnect, Anomali)
  • Core capabilities and features of TIPs
  • Integrating TIPs with existing security infrastructure

Practical Application of Threat Intelligence Platforms

  • Hands-on workshop for configuring and operating a TIP
  • Handling data ingestion and correlation
  • Tailoring alerts and generating reports

Automation in Threat Intelligence

  • The role of automation in CTI workflows
  • Tools and methods for automating intelligence tasks
  • Exercises in writing automation scripts

The Value of Information Exchange

  • Advantages and obstacles in sharing threat data
  • Frameworks and standards for information sharing (e.g., STIX/TAXII, OpenC2)

Establishing an Information Sharing Community

  • Best practices for creating collaborative networks
  • Navigating legal and ethical responsibilities
  • Case studies highlighting successful sharing initiatives

Collaborative Threat Intelligence Exercises

  • Executing joint threat assessments
  • Simulating intelligence sharing scenarios
  • Formulating strategies for effective teamwork

Advanced Techniques in Threat Intelligence

  • Integrating machine learning and AI into CTI
  • Sophisticated threat-hunting methodologies
  • Emerging innovations in the CTI field

Analysis of Cyber Attack Case Studies

  • In-depth review of significant cyber incidents
  • Extracting lessons and intelligence insights
  • Practical exercises in crafting intelligence reports

Establishing a CTI Program

  • Phases for developing and maturing a CTI initiative
  • KPIs and metrics for evaluating CTI performance

Recap and Future Directions

Requirements

  • A solid foundation in cybersecurity principles and standard practices
  • Familiarity with network and information security concepts
  • Professional experience with IT systems and infrastructure

Target Audience

  • Cybersecurity experts
  • IT security analysts
  • Security Operations Center (SOC) team members

Number of participants


Price per participant (excl. VAT)

Testimonials (2)

Upcoming Courses

Related Categories