EC-Council Threat Intelligence Essentials (TIE)

تعرّف إلى كيفية جمع استخبارات التهديدات وتحليلها والاستفادة منها. خلال يومين تتناول مصطلحاتها وأنواعها

يومانتأسيسي10 وحدات

نظرة عامة

تعرّف إلى كيفية جمع استخبارات التهديدات وتحليلها والاستفادة منها. خلال يومين تتناول مصطلحاتها وأنواعها، ومشهد التهديدات، ومصادر البيانات ومنصّاتها، والتحليل، وتعقّب التهديدات، وتبادل المعلومات، ودورها في الاستجابة للحوادث.

ما ستتعلّمه

المحتوى التقني أدناه معروضٌ باللغة الإنجليزية كما ورد في منهاج الدورة، حفاظاً على دقّة المصطلحات.

Essential threat intelligence terminology, the role of intelligence in cybersecurity, and threat intelligence maturity models.
Evaluating different types of threat intelligence, such as strategic, operational, and more focused forms, which guide vulnerability management or regulatory landscapes.
The cyber threat landscape, trends and ongoing challenges
Data collection and sources of threat intelligence
Threat Intelligence Platforms (TIPs)
Threat intelligence analysis
Threat hunting and detection
Threat intelligence sharing and collaboration
Threat intelligence in incident response
Future trends and continuous learning

المنهاج

10 وحدات

Threat Intelligence and Essential Terminology
Key Differences Between Intelligence, Information, and Data
The Importance of Threat Intelligence
Integrating Threat Intelligence in Cyber Operations
Threat Intelligence Lifecycles and Maturity Models
Threat Intelligence Roles, Responsibilities, and Use Cases
Using Threat Intelligence Standards or Frameworks to Measure Effectiveness
Establishing SPLUNK Attack Range for Hands-on Experience

Understanding the Different Types of Threat Intelligence
Preview Use Cases for Different Types of Threat Intelligence
Overview of the Threat Intelligence Generation Process
Learn How Threat Intelligence Informs Regulatory Compliance
Augmenting Vulnerability Management with Threat Intelligence
Explore Geopolitical or Industry Related Threat Intelligence
Integrating Threat Intelligence with Risk Management

Overview of Cyber Threats Including Trends and Challenges
Emerging Threats, Threat Actors, and Attack Vectors
Deep Dive on Advanced Persistent Threats
The Cyber Kill Chain Methodology
Vulnerabilities, Threat Actors, and Indicators of Compromise (IoC)
Geopolitical and Economic Impacts Related to Cyber Threats
How Emerging Technology is Impacting the Threat Landscape
MITRE ATT&CK & SPLUNK Attack Range IOC Labs

Making Use of Threat Intelligence Feeds, Sources, & Evaluation Criteria
Overview of Threat Intelligence Data Collection Methods & Techniques
Compare & Contrast Popular Data Collection Methods
Bulk Data Collection Methods & Considerations
Normalizing, Enriching, & Extracting Useful Intelligence from Threat Data
Legal & Ethical Considerations for Threat Data Collection Processes
Threat Data Feed Subscription and OSINT Labs

Introduction Threat Intelligence Platforms (TIPs), Roles, & Features
Aggregation, Analysis, & Dissemination within TIPs
Automation & Orchestration of Threat Intelligence in TIPs
Evaluating & Integrating TIPs into Existing Cybersecurity Infrastructure
Collaboration, Sharing, and Threat Hunting Features of TIPs
Customizing TIPs for Organizational Needs
Using TIPs for Visualization, Reporting, & Decision Making
AlienVault OTX and MISP TIP Platform Labs

Introduction to Data Analysis and Techniques
Applying Statistical Data Analysis, Including Analysis of Competing Hypothesis
Identifying and Analyzing Threat Actor Artifacts
Threat Prioritization, Threat Actor Profiling & Attribution Concepts
Leveraging Predictive and Proactive Threat Intelligence
Reporting, Communicating, and Visualizing Intelligence Findings
Threat Actor Profile Labs & MISP Report Generation Labs

Operational Overview of Threat Hunting & Its Importance
Dissecting the Threat Hunting Process
Threat Hunting Methodologies & Frameworks
Explore Proactive Threat Hunting
Using Threat Hunting for Detection & Response
Threat Hunting Tool Selection & Useful Techniques
Forming Threat Hunting Hypotheses & Conducting Hunts
Threat Hunting Lab in SPLUNK ATT&CK Range

Importance of Information Sharing Initiatives in Threat Intelligence
Overview of Additional Threat Intelligence Sharing Platforms
Building Trust Within Intelligence Communities
Sharing Information Across Industries and Sectors
Building Private and Public Threat Intelligence Sharing Channels
Challenges and Best Practices for Threat Intelligence Sharing
Legal and Privacy Implications of Sharing Threat Intelligence
Sharing Threat Intelligence Using MISP and Installing Anomali STAXX

Integrating Threat Intelligence into Incident Response Processes
Role of Threat Intelligence in Incident Prevention Using Workflows & Playbooks
Using Threat Intelligence for Incident Triage and Forensic Analysis
Adapting Incident Response Plans Using New Intelligence
Coordinating Response With External Partners
Threat Intelligent Incident Handling and Recovery Approaches
Post Incident Analysis and Lessons Learned Considerations
Measurement and Continuous Improvement for Intelligence Driven Incident Response

Emerging Threat Intelligence Approaches & Optimizing Their Use
Convergence of Threat Intelligence & Risk Management
Continuous Learning Approaches for Threat Intelligence
Adapting Professional Skillsets for Future in Threat Intelligence
Anticipating Future Challenges & Opportunities in Threat Intelligence
Engaging in the Threat Intelligence Community & Keeping a Pulse on the Threat Landscape
The Role of Threat Intelligence in National Security & Defense
Potential Influence of Threat Intelligence on Future Cybersecurity Regulations

لمن هذه الدورة

الطلاب والمبتدئون وموظفو الأمن في بداية المسيرة.