Course Outline
Foundations of Cyber Threat Intelligence (CTI)
- Defining CTI and its strategic value.
- Categorizing intelligence types: Tactical, Operational, Strategic, and Technical.
- Key terminology and core concepts.
- Identifying diverse threat vectors such as malware, phishing, and ransomware.
- Reviewing the historical evolution of cyber attacks.
- Examining current trends in the threat landscape.
- Navigating the stages of the intelligence lifecycle.
Methods for Data Collection
- Exploring data sources including open web, dark web, and internal feeds.
- Techniques for effective data acquisition.
- Tools and technologies employed in collection processes.
Processing and Enriching Data
- Approaches to data processing.
- Techniques for normalization and enrichment.
- Utilizing tools to automate data workflows.
Techniques for Intelligence Analysis
- Applying analytical methods such as link, trend, and behavioral analysis.
- Selecting appropriate tools for intelligence analysis.
- Practical exercises focused on data interpretation.
Overview of Threat Intelligence Platforms (TIPs)
- Surveying leading platforms like MISP, ThreatConnect, and Anomali.
- Understanding core features and functionalities.
- Integrating TIPs with broader security ecosystems.
Practical Application of Threat Intelligence Platforms
- Hands-on session for configuring and operating a TIP.
- Managing data ingestion and correlation workflows.
- Tailoring alerts and generating reports.
Automation in Threat Intelligence
- The role of automation in enhancing CTI efficiency.
- Strategies and tools for automating intelligence processes.
- Exercises in developing automation scripts.
The Value of Information Sharing
- Weighing the benefits and obstacles of threat intelligence sharing.
- Applying frameworks such as STIX/TAXII and OpenC2.
Establishing Information Sharing Communities
- Best practices for creating collaborative sharing groups.
- Addressing legal and ethical implications.
- Reviewing successful case studies of information sharing.
Collaborative Threat Intelligence Exercises
- Performing joint threat analysis activities.
- Simulating intelligence sharing through role-play scenarios.
- Formulating strategies for effective collaboration.
Advanced Intelligence Techniques
- Incorporating machine learning and AI into CTI.
- Advanced threat-hunting methodologies.
- Tracking emerging trends in the field.
Analysis of Cyber Attack Case Studies
- In-depth examination of significant cyber incidents.
- Extracting lessons and intelligence insights.
- Practical exercises in creating intelligence reports.
Developing a CTI Program
- Guidelines for building and maturing a CTI initiative.
- Defining metrics and KPIs to gauge effectiveness.
Conclusion and Future Directions
Requirements
- Foundational knowledge of cybersecurity standards and methodologies.
- Working familiarity with network architecture and information security principles.
- Practical experience managing IT systems and infrastructure.
Target Audience
- Cybersecurity practitioners.
- IT security analysts.
- Members of Security Operations Center (SOC) teams.
Testimonials (2)
Clarity and pace of explanations
Federica Galeazzi - Aethra Telecomunications SRL
Course - AI-Powered Cybersecurity: Advanced Threat Detection & Response
It did give me the insight what I needed :) I am starting teaching on a BTEC Level 3 qualification and wanted to widen my knowledge in this area.
