Resecurity® Certified Cyber Threat Intelligence Analyst (RCCTIA)

About this course

Learn to turn scattered threat data into intelligence that people can act on. Across four days you will define requirements, plan collection, evaluate sources, enrich indicators, profile actors and campaigns, and reach assessments you can defend.

Exercises use enterprise and financial-sector scenarios, and an integrated capstone brings the whole lifecycle together, preparing you for the RCCTIA credential. You finish able to write and brief intelligence for both analysts and executives.

What you'll learn

• Run the full threat intelligence lifecycle from requirements to feedback.
• Set and prioritise intelligence requirements, including priority intelligence requirements (PIRs).
• Build a collection plan and judge the reliability of each source, including OSINT.
• Enrich and link indicators, infrastructure and identity data to reveal wider activity.
• Profile threat actors and campaigns and state attribution with a clear level of confidence.
• Use structured analytic techniques to reduce bias in assessments.
• Turn intelligence into concrete actions for SOC, incident response and risk teams.
• Write and brief tactical, operational and strategic products for technical and executive readers.

Curriculum

Who it's for

Threat intelligence, SOC, DFIR, threat-hunting and fraud-intelligence professionals moving into or growing within intelligence roles.

Before you start

• Working knowledge of networking, common threats and basic security operations.
• Prior study or experience in security, investigation or a related field.

Prepares for