Threat Intelligence Advanced CH-TI-301

Advanced Threat Intelligence & IOC Analysis

Master cybersecurity with industry-leading curriculum, hands-on labs, and expert instruction. Complete this course to earn your certification and advance your security career.

SC

Dr. Sarah Chen

Director of Threat Intelligence

★★★★★ 4.9 (2,432 reviews)
2,432 students enrolled
$499

One-time payment · Lifetime access

ENROLL NOW START FREE TRIAL
40 hours of content
12 Modules · 68 Lessons
8 Hands-on Labs
Certificate Included
Lifetime Updates

Course Overview

This advanced course equips cybersecurity professionals with the skills needed to collect, analyze, and operationalize threat intelligence. You will learn to identify indicators of compromise, analyze adversary tactics, techniques, and procedures (TTPs), profile threat actors, and produce actionable intelligence reports that drive security decisions.

Through 8 hands-on labs featuring real-world scenarios and datasets, you will gain practical experience using industry-standard tools and frameworks including MITRE ATT&CK, the Diamond Model, MISP, and OpenCTI.

What You'll Learn

Collect and manage IOCs from multiple sources
Analyze adversary TTPs using the Diamond Model
Profile threat actors and track their campaigns
Write professional intelligence reports
Apply the MITRE ATT&CK framework in analysis
Operationalize threat intelligence with TIPs

Prerequisites

  • Basic understanding of networking and security concepts
  • Familiarity with operating systems (Linux/Windows)
  • 1+ years experience in a cybersecurity role recommended

Target Audience

SOC Analysts Threat Intelligence Analysts Security Researchers Incident Responders CISO & Security Leaders

Course Curriculum

12 Modules · 68 Lessons · 40 hours · 8 Hands-on Labs

  • What is Threat Intelligence?
  • Types of CTI: Strategic, Tactical, Operational
  • The Intelligence Lifecycle
  • CTI Stakeholders and Consumers
  • Intelligence Requirements & PIRs
  • Lab: Setting Up Your CTI Environment
  • Types of IOCs: Network, File, Host, Behavioral
  • IOC Collection Sources & Methods
  • STIX/TAXII Data Formats
  • IOC Enrichment & Validation
  • False Positive Management
  • Lab: IOC Collection & Enrichment Pipeline
  • Understanding TTPs vs IOCs
  • The Diamond Model of Intrusion Analysis
  • Centered Approaches and Pivoting
  • Activity-Attack Graph Construction
  • Lab: Diamond Model Analysis Exercise
  • Nation-State APT Groups
  • Cybercriminal Ecosystems
  • Attribution Methodology
  • Threat Actor Tracking & Monitoring
  • Building Threat Actor Profiles
  • Lab: Profiling an APT Group
  • Report Types: Tactical, Operational, Strategic
  • Structured Analytic Techniques
  • Confidence Levels & Estimative Language
  • Visualization & Dissemination
  • Lab: Writing a Threat Intelligence Report
  • Open Source Intelligence Fundamentals
  • Social Media & Dark Web Monitoring
  • Domain & Infrastructure Analysis
  • Geolocation & Digital Footprints
  • Ethical Considerations in OSINT
  • Lab: Real-World OSINT Investigation
  • Navigating the Dark Web Safely
  • Underground Marketplaces & Forums
  • Credential Leak Monitoring
  • Malware-as-a-Service Tracking
  • Lab: Dark Web Threat Landscape Analysis
  • Static vs Dynamic Malware Analysis
  • Behavioral Indicator Extraction
  • Sandboxing & Automated Analysis
  • Malware Family Classification
  • Reverse Engineering Basics for CTI
  • Lab: Analyzing a Malware Sample
  • MITRE ATT&CK Overview & Structure
  • Mapping Techniques to Tactics
  • Building Detection Rules from ATT&CK
  • Threat Intelligence Integration
  • Lab: Mapping a Threat Actor to ATT&CK
  • MISP, TheHive & OpenCTI Overview
  • Automated IOC Sharing
  • Feed Integration & Management
  • Custom Dashboards & Reporting
  • Lab: Configuring a TIP Environment
  • Strategic Intelligence Frameworks
  • Executive Briefing Techniques
  • Risk Assessment & Threat Modeling
  • Geopolitical Cyber Threat Landscape
  • Lab: Delivering a Strategic Threat Brief
12

Capstone Project

Full intelligence cycle · 4 hours

Capstone
SC

Dr. Sarah Chen

Director of Threat Intelligence

Industry expert with extensive experience in Threat Intelligence. Taught thousands of students and helped professionals advance their cybersecurity careers through practical, hands-on training approaches.

Threat Intelligence Specialist Hands-on Labs Certification Prep

Industry Expert · 2,432+ students taught

4.9
★★★★★

2,432 reviews

5
85%
4
10%
3
3%
2
1%
1
1%
★★★★★2 weeks ago

"Excellent course! The hands-on labs and real-world scenarios provided practical skills I could immediately apply. Highly recommend for advanced level professionals."

— Verified Learner

★★★★★1 month ago

"Outstanding content and structure. The Threat Intelligence modules are comprehensive and well-explained. Great investment for career advancement."

— Security Professional

★★★★★2 months ago

"Great course that covers 40 hours of material effectively. The practical labs reinforce the concepts well. Would recommend to anyone in cybersecurity."

— Industry Practitioner

Related Courses

Ethical Hacking

Penetration Testing: Network & Web Applications

Comprehensive pentesting methodology covering network exploitation, web app testing, and reporting.

55 hrs·★★★★★·$599
 DFIR

Digital Forensics & Incident Response

Complete DFIR training: evidence collection, memory forensics, timeline analysis.

45 hrs·★★★★★·$549
 GRC

Cybersecurity Compliance: ISO 27001 & NIST

Implement and manage compliance frameworks, risk assessment, and security audit processes.

35 hrs·★★★★★·$399