Cyber Threat Intelligence Analyst (Aligned with the CTIA Curriculum)
Teaches how to turn threat data into actionable intelligence that can be used to prevent, detect and monitor attacks. The program follows the eight modules of the EC-Council Certified Threat Intelligence Analyst (CTIA) curriculum and covers, in a hands-on manner, the entire threat intelligence lifecycle: planning and direction, collection, analysis and production, and dissemination and integration.
InstructorDr. Soner Çelik
Target audienceInformation security, network security, incident response and SOC teams; analysts with experience in cyber security or IT
Duration3 days (24 hours) · approximately 40% of training time is hands-on
Training content
- Introduction to threat intelligence: types, lifecycle, strategy, maturity model, frameworks and platforms (TIP)
- Cyber threats and attack frameworks: APT, Cyber Kill Chain, MITRE ATT&CK, the Diamond Model, IoC and the Pyramid of Pain
- Requirements, planning, direction and review: building an intelligence program and team
- Data collection and processing: OSINT, HUMINT, cyber counterintelligence, IoC collection, malware analysis and collection with Python
- Data analysis: statistical analysis, Analysis of Competing Hypotheses (ACH/SACH), threat modeling and attribution
- Intelligence reporting and sharing: report types, YARA rules, sharing standards and platforms
- Threat hunting and detection: the hunting loop, maturity model (HMM), TaHiTI and automation with Python
- Threat intelligence in SOC operations, incident response and risk management; threat intelligence in cloud environments
At the end of this training, participants
- Distinguish between strategic, operational, tactical and technical threat intelligence and prioritize them according to organizational needs.
- Plan an intelligence program by applying each phase of the threat intelligence lifecycle.
- Collect and structure IoCs from open and internal sources, and enrich the data.
- Perform threat assessment and attribution using structured analytic techniques.
- Write threat intelligence reports tailored to the target audience and disseminate them through trusted sharing channels.
- Integrate threat intelligence into SOC, incident response and risk management processes.
Training method
Live instructionHands-on lab exercisesCase studiesHands-on practice with PythonExam preparation questions