Threat Intelligence

Lessons

1. 1

   What is Threat Intelligence?

   Understand the threat landscape and what threat intelligence provides to defenders.

   Beginner·30 min
2. 2

   Threat Actors and Motivations

   Categorize threat actors by motivation (financial, political, espionage) and learn how attribution works.

   Beginner·35 min
3. 3

   Indicators of Compromise

   Understand IoCs (IPs, hashes, domains) and how they are shared via STIX/TAXII feeds.

   Intermediate·40 min
4. 4

   Open Source Intelligence (OSINT)

   Learn OSINT collection techniques used by both attackers for recon and defenders for anticipating threats.

   Intermediate·45 min
5. 5

   Threat Hunting

   Use hypothesis-driven hunting with SIEM log data to proactively find hidden threats.

   Advanced·50 min
6. 6

   Building a Threat Intelligence Program

   Design intelligence collection plans and integrate threat intel into security operations.

   Advanced·35 min
7. 7

   Hands-on: MITRE ATT&CK Navigator

   Map a real APT (APT29) to its ATT&CK techniques and identify defensive gaps in a Navigator layer.

   Intermediate·60 min
8. 8

   OSINT Toolkit: Shodan, Censys, VirusTotal, URLscan

   Investigate suspicious infrastructure, files, and domains using the canonical free OSINT tools.

   Intermediate·50 min
9. 9

   Writing a Threat Intelligence Report

   Author a 4-6 page threat profile on a documented threat group, using confidence-rated assessment language.

   Intermediate·60 min
10. 10

    Threat Feeds and ISACs

    Distinguish IoCs from IoAs, identify the major ISACs and feeds, and ingest a free feed into a SIEM.

    Intermediate·40 min
11. 11

    Threat Intelligence Resources and Next Steps

    Explore curated feeds, blogs, podcasts, certifications (GCTI), and practice platforms.

    Beginner·25 min
12. 12

    Threat Intelligence Job Readiness

    Translate CTI skills into a resume, portfolio plan, and interview prep for analyst and threat-hunter roles.

    Beginner·30 min