• Online, Instructor-Led

This three-day course explains how to apply the discipline of intelligence analysis to the cyber domain. The course covers strategic subjects such as the organizational role of cyber threat intelligence (CTI) and stakeholder analysis, as well as analytic practitioner skills development topics, such as understanding the intelligence lifecycle, developing raw data into minimally viable intelligence, and an introduction to cyber intelligence attribution.

Learning Objectives

After completing this course, learners should be able to: • Clearly define cyber intelligence and the difference between intelligence and information, and articulate the role and importance of the cyber threat intelligence (CTI) capability • Describe how the Intelligence Cycle functions as the working model to operationalize intelligence • Explain the two modes of analytic thinking and the use of structured analytic techniques • Detail ways to counter analytic bias • Explain threat model concepts and why we use them • State the basics of malware composition • Describe how intelligence analysts convert raw threat data into actionable intelligence • Write well-structured intelligence reports and determine improvements to current communications

Framework Connections

The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):

Specialty Areas

  • All-Source Analysis

Specialty Areas have been removed from the NICE Framework. With the recent release of the new NICE Framework data, updates to courses are underway. Until this course can be updated, this historical information is provided to give better context as to how it can help you with your cybersecurity goals.