Section Introduction, Threat Intelligence

Threat Intelligence Explained

Types of Intelligence

Types of Threat Intelligence

Why Threat Intelligence Can be Useful

The Future of Threat Intelligence

Threat Intelligence

This section of the Threat Intelligence domain will introduce you to malicious actors, what they are, how they operate, and why they conduct cyberattacks. We will cover aspects such as naming conventions, motivations, and common targets for different groups.

 

Threat Actors

Common Threat Agents

Motives

Actor Naming Conventions

What Are APTs?

Tools, Techniques, Procedures

Challenge

Activity) Section Review, Threat Actors

APTS

This section of the Threat Intelligence domain will focus on operational intelligence roles and responsibilities. A typical day in the life as a Cyber Threat Intelligence Analyst focusing on operational intelligence typically involves collecting indicators, indicators of compromise, and precursors in order to share actionable intelligence with other entities, and work to make malicious actor’s lives harder by hitting them at different levels of the Pyramid of Pain, a concept that covers how difficult it is for threat actors to change certain aspects of their operations.

 

Learning Objectives

Precursors Explained

Indicators of Compromise Explained

MITRE ATT&CK Framework

Pyramid of Pain

Operational Intelligence

This section of the Threat Intelligence domain will focus on tactical intelligence roles and responsibilities. A typical day in the life as a Cyber Threat Intelligence Analyst focusing on tactical intelligence typically involves performing threat exposure checks to see if malicious indicators have been identified within the environment, conducting public exposure assessments to see how what information about the company and its employees is freely available online and if that could be exploited in any way, and collecting and using actionable intelligence to improve defenses by implementing threat feeds to power automated defenses and provide context to security investigations

 

Threat Exposure Checks Explained

Watchlists/IOC Monitoring

Tactical Intelligence

This lesson is going to cover what Threat Intelligence Platforms (TIPs) are, why they’re used, and provide some examples of TIPs that are used in industry including; MISP, ThreatConnect, ThreatQ, Lookingglass, Insights, and Anomali. We will also talk about how threat feeds can be aggregated into Threat Intelligence Platforms, allowing organizations to create threat intelligence repositories, full of malicious indicators, and indicators of compromise.

What are TIPs?

Malware Information Sharing Platform (MISP) 1

Introducing MISP

MISP Video Training - Intro

Demonstration: Overview and Installing MISP

Demonstration: Configuring MISP

 Incorporating MISP in to a TI Program

OSINT vs Paid-for Sources

Threat Intelligence Platforms

12. Threat Intelligence

Essential

Inter

Name on Card

Dashboard

Profile

Memberships

Courses

Coaching Programs

Bundle Courses

Communities

Groups

Digital Products

Physical Products

Live Products

Video Library

Audio Library

Events

Appointments

Community & Event Registrations

Premium Pages

Certificates

Badges

Order History

Coin History

Organization Orders

Subscription

Affiliate Dashboard

Settings

Billing

cybersoft

Primary Menu

System Defaults

Primary color

Primary color hover

Heading text color

Body text color

Banner text color

Primary button text color

Primary button text hover color

Secondary button background color

Secondary button background hover color

Secondary button text color

Secondary button text hover color

Navbar item background color

Navbar item text color

Navbar item text hover color

12. Threat Intelligence

CyberSoft Admin

Course content