This course provides tradecraft training along the intelligence lifecycle including collection methods, techniques, planning, PIRs, and collection tools and targeting; Intelligence production methods and process flows are covered as well as evidence credibility, reliability, denial and deception, and confidence levels; Students are required to demonstrate understanding and use structured analytic techniques as well as various types of analysis including synthesis and fusion of data and information into actionable intelligence; The course includes case studies covering adversary campaign research and analysis, historical trending, and passive adversary collection; Students will be instructed in applying analytic techniques, when and how to use analytic techniques and analytic types; Students are presented several case studies for analysis, required to use tradecraft methods, and provide written reports in standard analytic format will dissemination the reports to stakeholders. This course follows the International Association for Intelligence Education Standards for Intelligence Analyst Initial Training. We cover:
Collection Methods and Techniques, Anonymity and Passive Persona setup, Collection Methods and Techniques // Stakeholder Analysis, Collection Planning, IRs/PIRs/EEIs/Indicators/SIRs, Collection Process Flow, Collection (OSINT) Tools and Targeting, Threat Intelligence, Most likely Threat Actors - Adversary Targeting - Threat Matrices - D3A /// F3EAD, Hunch.ly - Hemingway Editor, Use of Maltego overview, OPSEC VPNs, Buscador, OPSEC Methods, Semantic Search - The DarkNet, Open Source Intelligence OSINT, Structured Analytic Techniques – Their use, Adversary Denial and Deception, Source Credibility and Relevance, Source Validation, Denial and Deception, Confidence Levels, Types of evidence, Production Management, Critical and Creative Thinking, Cognitive Bias, Glossary and Taxonomy, What Intelligence Can and Cannot Do, Use of Mitre ATT&CK in analysis, examining patterns and trends in Adversary tendencies, Estimation and Forecasting, Campaign analysis, Types of Analysis, Synthesis and Fusion, Analysis of Competing Hypothesis, Inductive/Abductive/Deductive Reasoning, Analytic Writing, BLUF, AIMS, Forecasting in your writing, STEMPLES Plus, Indicators of Change, Argument Mapping, Types of Reports, Product Line Mapping, Report Serialization, and Dissemination, Live Case Studies Class briefs
Learning Objectives
All
Framework Connections
The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):
Feedback
If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@mail.cisa.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.