Catalogue · MOD-DEF-07

Cyber Threat Intelligence

Producing structured cyber intelligence means moving from raw information to decision. This expert module teaches you to frame a CTI programme, analyse an intrusion with proven models, share via standards and operationalise intelligence.

Defence (Blue) Expert 5 bricks 8 labs ≈ 16.5 h 4 real cases

Objectives

• Frame a CTI programme by needs (PIR) • Structure analysis (Diamond, Kill Chain) • Standardise and share (STIX/TAXII, ATT&CK) • Turn intelligence into detections

Module bricks

BRQ-DEF-034 — Intelligence cycle & priority requirements (PIR) (1 lab(s))
BRQ-DEF-035 — Analysis models (Diamond/Kill Chain) (2 lab(s))
BRQ-DEF-036 — Intelligence sharing via STIX/TAXII (MISP) (2 lab(s))
BRQ-DEF-037 — Attribution & CTI operationalisation (OpenCTI) (2 lab(s))
BRQ-DEF-038 — CTI reporting (1 lab(s))

Order this module View full catalogue