Learn how to collect, analyze, and apply cyber threat intelligence to understand your adversaries and apply that knowledge to SOC alert triage and incident response.

Attacks are getting faster and more complex, and exchanging intelligence with the other defenders has become essential for any security team to keep up. We'll cover core Cyber Threat Intelligence (CTI) concepts and see how CTI differs from simple reputation lookups. You'll then see how to apply CTI to alert triage and incident response, and work with open-source platforms like MISP and OpenCTI.

Intro to Cyber Threat Intel

Introducing cyber threat intelligence and related topics, such as relevant standards and frameworks.

CTI for Alert Triage

Explore how security analysts can use CTI in their daily operations.

MISP

Walkthrough on the use of MISP as a threat sharing platform.

OpenCTI

Get Hands-on Exploring the Opencti Platform.

Trooper

Use CTI skills to reconstruct the campaign and unmask the hidden threat actor.

Lock in what you learned with a recap. Earn points and keep your streak.

Need to know

Threat Analysis Tools

Understand how to leverage threat intelligence to detect, investigate and defend against adversaries. Gain practical skills in using threat data, enrichment techniques, and analysis workflows to strengthen SOC capabilities.

Core SOC Solutions

Understanding security solutions is key for SOC analysts. This module covers SIEM, EDR and SOAR, the core security solutions used in a SOC.

What are modules?

A learning pathway is made up of modules, and a module is made of bite-sized rooms (think of a room like a mini security lab).

Hierarchical diagram showing how learning pathways contain modules, which contain individual rooms.

Cyber Threat Intelligence

Intro to Cyber Threat Intel

CTI for Alert Triage

MISP

OpenCTI

Trooper

Topic Rewind Recap