• Online, Instructor-Led
Course Description

This course provides tradecraft training along the intelligence lifecycle including collection methods, techniques, planning, PIRs, and collection tools and targeting; Intelligence production methods and process flows are covered as well as evidence credibility, reliability, denial and deception, and confidence levels; Students are required to demonstrate understanding and use structured analytic techniques as well as various types of analysis including synthesis and fusion of data and information into actionable intelligence; The course includes case studies covering adversary campaign research and analysis, historical trending, and passive adversary collection; Students will be instructed in applying analytic techniques, when and how to use analytic techniques and analytic types; Students are presented several case studies for analysis, required to use tradecraft methods, and provide written reports in standard analytic format will dissemination the reports to stakeholders. This course follows the International Association for Intelligence Education Standards for Intelligence Analyst Initial Training. We cover:

Collection Methods and Techniques, Anonymity and Passive Persona setup, Collection Methods and Techniques // Stakeholder Analysis, Collection Planning, IRs/PIRs/EEIs/Indicators/SIRs, Collection Process Flow, Collection (OSINT) Tools and Targeting, Threat Intelligence, Most likely Threat Actors - Adversary Targeting - Threat Matrices - D3A /// F3EAD, Hunch.ly - Hemingway Editor, Use of Maltego overview, OPSEC VPNs, Buscador, OPSEC Methods, Semantic Search - The DarkNet, Open Source Intelligence OSINT, Structured Analytic Techniques – Their use, Adversary Denial and Deception, Source Credibility and Relevance, Source Validation, Denial and Deception, Confidence Levels, Types of evidence, Production Management, Critical and Creative Thinking, Cognitive Bias, Glossary and Taxonomy, What Intelligence Can and Cannot Do, Use of Mitre ATT&CK in analysis, examining patterns and trends in Adversary tendencies, Estimation and Forecasting, Campaign analysis, Types of Analysis, Synthesis and Fusion, Analysis of Competing Hypothesis, Inductive/Abductive/Deductive Reasoning, Analytic Writing, BLUF, AIMS, Forecasting in your writing, STEMPLES Plus, Indicators of Change, Argument Mapping, Types of Reports, Product Line Mapping, Report Serialization, and Dissemination, Live Case Studies Class briefs

Learning Objectives


Framework Connections

The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):

Specialty Areas

  • All-Source Analysis
  • Collection Operations
  • Cyber Investigation
  • Cyber Operations
  • Threat Analysis