Cyber Threat Intelligence
Intelligence-driven security from collection to production. OSINT, threat actor profiling, MITRE ATT&CK mapping, intelligence platforms, and strategic analysis for security teams.
This course includes:
- 15 modules, 131 lessons
- 30 hands-on labs
- 15 quizzes
- Lifetime course access
- Certificate of completion
- One certification attempt included
- Certification is lifetime - never expires
- 14-day refund guarantee*
About This Course
The Cyber Threat Intelligence (CTI) course is designed for cybersecurity professionals who wish to specialize in the collection, analysis, and application of threat intelligence. In today's rapidly evolving threat landscape, understanding how to anticipate and mitigate cyber threats through effective threat intelligence is crucial for protecting organizations. This course covers the fundamentals of threat intelligence, including the lifecycle of intelligence gathering, the different types of threat intelligence (strategic, operational, tactical, and technical), and how to use this information to enhance security operations. Participants will learn how to identify and analyze threats using various intelligence sources, how to produce actionable intelligence reports, and how to integrate threat intelligence into their organization's security strategy. The course is highly practical, featuring hands-on labs and real-world case studies that illustrate the importance of CTI in defending against advanced persistent threats (APTs) and other sophisticated cyber attacks. Upon completion, you will be well-prepared to work in a role that requires you to anticipate, identify, and mitigate cyber threats using intelligence-driven approaches.
What You'll Learn
Apply the intelligence cycle to cybersecurity operations
Conduct structured OSINT collection and analysis
Profile threat actors using Diamond Model and ATT&CK frameworks
Develop tactical, operational, and strategic intelligence products
Operate threat intelligence platforms and sharing protocols
Integrate CTI into SOC workflows, hunting, and executive decision-making
Course Curriculum
This is a preview of the course content. Register to access all lessons.
Module 1 - Intelligence Fundamentals
Intelligence Theory Lesson
Cyber Threat Intelligence Defined Lesson
CTI Team Structure and Role Lesson
Intelligence Requirements Lesson
Collection Management Framework Lesson
Practical Exercises Hands-On
Key Takeaways Lesson
Quiz Assessment
Lab Hands-On
Module 2 - The Threat Landscape
Threat Actor Taxonomy Lesson
Motivation and Targeting Analysis Lesson
The Cybercriminal Ecosystem Lesson
Geopolitical Context Lesson
Practical Exercises Hands-On
Key Takeaways Lesson
Quiz Assessment
Lab Hands-On
Module 3 - Collection
OSINT Methodology and Tools Lesson
Technical Collection Lesson
Dark Web and Underground Sources Lesson
Commercial and Community Sources Lesson
Source Evaluation Lesson
Foreign Language Awareness Lesson
Practical Exercises Hands-On
Key Takeaways Lesson
Quiz Assessment
Lab Hands-On
Module 4 - Processing And Enrichment
Indicator Types and Lifecycle Lesson
Manual Enrichment Techniques Lesson
Enrichment Automation Lesson
Malware Triage for Intelligence Lesson
Structured Data Formats Lesson
Data Normalization Lesson
Practical Exercises Hands-On
Key Takeaways Lesson
Quiz Assessment
Lab Hands-On
Module 5 - Analysis
Structured Analytical Techniques Lesson
Diamond Model for Intrusion Analysis Lesson
Campaign Analysis Lesson
Attribution Lesson
Cognitive Bias and Analytical Traps Lesson
Counter-Intelligence and Deception Detection Lesson
Practical Exercises Hands-On
Key Takeaways Lesson
Quiz Assessment
Lab Hands-On
Module 6 - AI Disinformation And Intelligence In 2026
AI-Generated Disinformation as an Intelligence Threat Lesson
Deepfake Attribution Challenges Lesson
AI-Generated Phishing at Scale Lesson
Adversarial ML Against Defensive AI Lesson
LLMs as Intelligence Analysis Tools Lesson
Detecting AI-Generated Content in Collection Sources Lesson
Practical Exercises Hands-On
Key Takeaways Lesson
Quiz Assessment
Lab Hands-On
Module 7 - MITRE ATT&CK for Intelligence
ATT&CK as an Intelligence Framework Lesson
Threat Group Profiling Lesson
ATT&CK Navigator Lesson
Software and Campaign Mapping Lesson
Defensive Recommendations from Intelligence Lesson
Practical Exercises Hands-On
Key Takeaways Lesson
Quiz Assessment
Lab Hands-On
Module 8 - Intelligence Production And Dissemination
Intelligence Product Types Lesson
Writing for Different Audiences Lesson
Report Structure and Standards Lesson
Technical Intelligence Sharing Lesson
Intelligence Sharing Communities Lesson
Feedback Loops Lesson
Practical Exercises Hands-On
Key Takeaways Lesson
Quiz Assessment
Lab Hands-On
Module 9 - Dark Web Intelligence
Dark Web Architecture Lesson
Criminal Marketplace Analysis Lesson
Ransomware Group Monitoring Lesson
Initial Access Broker Monitoring Lesson
Cryptocurrency and Blockchain Intelligence Lesson
Automated Dark Web Monitoring Lesson
OPSEC for Intelligence Analysts Lesson
Practical Exercises Hands-On
Key Takeaways Lesson
Quiz Assessment
Lab Hands-On
Module 10 - Intelligence Driven Threat Hunting
From Intelligence to Hunting Hypotheses Lesson
Detection Rule Development Lesson
Hunt Mission Execution Lesson
Collaborative Operations Hands-On
Practical Exercises Hands-On
Key Takeaways Lesson
Quiz Assessment
Lab Hands-On
Module 11 - Strategic Intelligence And Geopolitics
National Cyber Strategies Lesson
Major APT Group Deep Dive Lesson
Cyber Operations in Conflict Lesson
Sector-Specific Threat Intelligence Lesson
Supply Chain Intelligence Lesson
Practical Exercises Hands-On
Key Takeaways Lesson
Quiz Assessment
Lab Hands-On
Module 12 - Building A CTI Program
Program Design Lesson
Tooling and Platform Selection Lesson
Maturity Models Lesson
Metrics and ROI Lesson
Career Paths in CTI Lesson
Practical Exercises Hands-On
Key Takeaways Lesson
Quiz Assessment
Lab Hands-On
Module 13 - Emerging Threats And Intelligence Evolution
Emerging Technology Threats Lesson
Evolving Adversary Tradecraft Lesson
Threat Anticipation And Predictive Intelligence Lesson
Intelligence Profession Evolution Lesson
Practical Exercises Hands-On
Key Takeaways Lesson
Quiz Assessment
Lab Hands-On
Capstone Project
Operation VISTULA Project
Deliverables Project
Assessment Criteria Project
Certification Preparation
Exam Overview Lesson
Domains and Weightings Lesson
Exam Environment and Rules Lesson
Preparation Strategy Lesson
Registration and Logistics Lesson
After Certification Lesson
Career Leverage Lesson
Certification Roadmap
Every course leads to its own certification. All are independent - start anywhere, build your path.
TSEC
Security Fundamentals
Foundation
TPEN
Certified Pentester
Offensive
TRED
Red Team Operator
Offensive
TDEF
Certified Defender
Defensive
TFOR
Forensic Analyst
Defensive
TMAL
Malware Analyst
Analytical
TAMI
Advanced Malware Intelligence
Analytical
TCTI
Threat Intelligence Analyst
Analytical
TREV
Reverse Engineer
Analytical