Course Outline
Foundations of Cyber Threat Intelligence (CTI)
- Defining CTI and its strategic value
- Categorizing CTI: Tactical, Operational, Strategic, and Technical
- Essential concepts and industry terminology
- Identifying various threat vectors (malware, phishing, ransomware, etc.)
- Historical context of cyber attacks
- Current developments in the threat landscape
- Phases of the intelligence lifecycle
Methodologies for Data Acquisition
- Origins of intelligence data (open source, dark web, internal feeds)
- Strategies for efficient data collection
- Tools and technologies employed in gathering intelligence
Processing and Enriching Data
- Techniques for data refinement
- Normalizing and enhancing raw data
- Utilizing tools to automate processing workflows
Techniques for Intelligence Analysis
- Analytical frameworks: link, trend, and behavioral analysis
- Software solutions for analyzing intelligence
- Practical exercises focused on data evaluation
Overview of Threat Intelligence Platforms (TIPs)
- Survey of leading TIPs (e.g., MISP, ThreatConnect, Anomali)
- Core capabilities and features of TIPs
- Integrating TIPs with existing security infrastructure
Practical Application of Threat Intelligence Platforms
- Hands-on workshop for configuring and operating a TIP
- Handling data ingestion and correlation
- Tailoring alerts and generating reports
Automation in Threat Intelligence
- The role of automation in CTI workflows
- Tools and methods for automating intelligence tasks
- Exercises in writing automation scripts
The Value of Information Exchange
- Advantages and obstacles in sharing threat data
- Frameworks and standards for information sharing (e.g., STIX/TAXII, OpenC2)
Establishing an Information Sharing Community
- Best practices for creating collaborative networks
- Navigating legal and ethical responsibilities
- Case studies highlighting successful sharing initiatives
Collaborative Threat Intelligence Exercises
- Executing joint threat assessments
- Simulating intelligence sharing scenarios
- Formulating strategies for effective teamwork
Advanced Techniques in Threat Intelligence
- Integrating machine learning and AI into CTI
- Sophisticated threat-hunting methodologies
- Emerging innovations in the CTI field
Analysis of Cyber Attack Case Studies
- In-depth review of significant cyber incidents
- Extracting lessons and intelligence insights
- Practical exercises in crafting intelligence reports
Establishing a CTI Program
- Phases for developing and maturing a CTI initiative
- KPIs and metrics for evaluating CTI performance
Recap and Future Directions
Requirements
- A solid foundation in cybersecurity principles and standard practices
- Familiarity with network and information security concepts
- Professional experience with IT systems and infrastructure
Target Audience
- Cybersecurity experts
- IT security analysts
- Security Operations Center (SOC) team members
Testimonials (2)
Clarity and pace of explanations
Federica Galeazzi - Aethra Telecomunications SRL
Course - AI-Powered Cybersecurity: Advanced Threat Detection & Response
It did give me the insight what I needed :) I am starting teaching on a BTEC Level 3 qualification and wanted to widen my knowledge in this area.