Siber Tehdit İstihbaratı ve Siber Güvenlik · CTIA Modül 5

Structured Analytic Techniques: ACH, Threat Modeling and Attribution

Teaches how to turn collected threat data into unbiased, defensible assessments: statistical analysis, Analysis of Competing Hypotheses (ACH and SACH), threat modeling, indicator validation and attribution.

InstructorDr. Soner Çelik

Target audienceThreat intelligence analysts, intelligence and security researchers

Duration1 days

Training content

Types of data analysis and statistical analysis
Analysis of Competing Hypotheses (ACH) and Structured ACH (SACH)
Threat modeling methodologies; threat analysis with the Diamond Model
Validation and prioritization of threat indicators
Fine-tuning and automation of analysis
Threat intelligence evaluation and attribution
Building runbooks and a threat knowledge base

At the end of this training, participants

Test a threat question against competing hypotheses and reach a reasoned conclusion.
Build a threat model suited to the organization.
State the confidence level explicitly in attribution assessments.
Prepare runbooks and a knowledge base for recurring analyses.

Training method

Live instructionCase studyGroup analysis workshop

Other courses in the same category

Cyber Threat Intelligence Analyst (Aligned with the CTIA Curriculum)

3 days (24 hours) · approximately 40% of training time is hands-on

Establishing a Corporate Threat Intelligence Program

1 days

Attack Frameworks: APT, Cyber Kill Chain, MITRE ATT&CK and the Diamond Model

1 days

Threat Data Collection: OSINT, IoC and Automation with Python

1 days