EC-Council
EC-Council Certified Threat Intelligence Analyst (CTIA) v2
Turn threat data into intelligence decision-makers can use.
3 daysIntermediate8 modules
About this course
Turn threat data into intelligence decision-makers can use. You will learn threat intelligence types and lifecycle, attack frameworks such as the Kill Chain and MITRE ATT&CK, collect and analyse data, report and share intelligence, and support threat hunting.
What you'll learn
- Fundamentals of threat intelligence (Threat intelligence types, lifecycle, strategy, capabilities, maturity model, frameworks, platforms, etc.)
- Various cybersecurity threats and attack frameworks (Advanced Persistent Threats,
- Cyber Kill Chain Methodology, MITRE ATT&CK Framework, Diamond Model of Intrusion Analysis, etc.)
- Various steps involved in planning a threat intelligence program (Requirements, planning, direction, and review)
- Different types of threat intelligence feeds, sources, data collection methods
- Threat intelligence data collection and acquisition through Open-Source Intelligence (OSINT), Human Intelligence (HUMINT), Cyber Counterintelligence (CCI), Indicators of Compromise (IoCs), malware analysis, and Python Scripting
- Threat intelligence data processing and exploitation
- Threat data analysis techniques (Statistical Data Analysis, Analysis of Competing Hypotheses (ACH), Structured Analysis of Competing Hypotheses (SACH), etc.)
- Complete threat analysis process, which includes threat modeling, fine-tuning, evaluation, and runbook and knowledge base creation
- Threat intelligence sharing and collaboration using Python Scripting
- Different platforms, acts, and regulations for sharing intelligence
- How to perform threat intelligence in a cloud environment
- Fundamentals of threat hunting (Threat hunting types, process, loop, methodology, etc.)
- Threat-hunting automation using Python Scripting
- Threat intelligence in SOC operations, incident response, and risk management
Curriculum
8 modules
- Understand Intelligence
- Summarize Cyber Threat Intelligence Concepts
- Explain Threat Intelligence Lifecycle and Frameworks
- Understand Threat Intelligence Platforms (TIPs)
- Understand Threat Intelligence in the Cloud Environment
- Understand Future Trends and Continuous Learning
- Understand Cyber Threats
- Explain Advanced Persistent Threats
- Explain Cyber Kill Chain
- Explain MITRE ATT&CK and Diamond Model
- Understand Indicators of Compromise
- Understand the Organization’s Current Threat Landscape
- Understand Requirements Analysis
- Plan a Threat Intelligence Program
- Establish Management Support
- Build a Threat Intelligence Team
- Understand Threat Intelligence Sharing
- Review Threat Intelligence Program
- Understand Threat Intelligence Data Collection
- Summarize Threat Intelligence Collection Management
- Explain Threat Intelligence Feeds and Sources
- Explain Threat Intelligence Data Collection and Acquisition
- Understand Bulk Data Collection
- Explain Data Processing and Exploitation
- Understand Threat Data Collection and Enrichment in Cloud Environments
- Summarize Data Analysis
- Explain Data Analysis Techniques
- Understand Threat Analysis
- Demonstrate Threat Analysis Process
- Explain Fine-tuning Threat Analysis
- Understand Threat Intelligence Evaluation
- Create Runbooks and Knowledge Base
- Use Threat Intelligence Tools
- Understand Threat Intelligence Reports
- Understand Dissemination
- Participate in Sharing Relationships
- Understand Sharing Threat Intelligence
- Explain Delivery Mechanisms
- Use Threat Intelligence Sharing Platforms
- Understand Intelligence Sharing Acts and Regulations
- Explain Threat Intelligence Integration
- Understand Intelligence Sharing and Collaboration using Python Scripting
- Summarize Threat Hunting Concepts
- Understand Threat Hunting Automation
- Understand Threat Intelligence in SOC Operations
- Understand Threat Intelligence in Risk Management
- Understand Threat Intelligence in Incident Response
Who it's for
Threat analysts, SOC staff and security researchers.
Before you start
- Mid-level to high-level cybersecurity professionals with a minimum of three years of experience.
- Individuals with EC-Council's C|EH and C|ND certifications can enroll in this course.
Related courses
More in EC-Council →Foundation
Artificial Intelligence Essentials (AIE)
EC-Council
View course →Intermediate
Certified AI Program Manager (CAIPM)
EC-Council
View course →Intermediate
Certified Offensive AI Security Professional (COASP)
EC-Council
View course →Intermediate
Certified Responsible AI Governance & Ethics (CRAGE)
EC-Council
View course →Intermediate
EC-Council Certified Application Security Engineer (CASE).NET
EC-Council
View course →Intermediate
EC-Council Certified Chief Information Security Officer (C|CISO)
EC-Council
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.