Threat Intelligence Analyst (CTIA)
Overview
Certified Threat Intelligence Analyst (CTIA) is designed and developed in collaboration with cybersecurity and threat intelligence experts across the globe to help organizations identify and mitigate business risks by converting unknown internal and external threats into known threats It is a comprehensive, specialist-level program that teaches a structured approach for building effective threat intelligence.
Objectives
- Key issues in the InfoSec domain.
- Importance of threat intelligence in risk management, SIEM, and incident response
- Various cyber threats, threat actors, and their objectives for cyberattacks
- Fundamentals of threat intelligence (including threat intelligence types, life cycle, strategy, capabilities, maturity model, frameworks, etc)
- Cyber kill chain methodology, Advanced Persistent Threat (APT), Indicators of Compromise (IoCs), and the pyramid of pain
- Threat intelligence program steps (Requirements, Planning, Direction, Review)
- Types of data feeds, sources, and data collection methods
- Threat intelligence data collection and acquisition through Open-Source Intelligence (OSINT), Human Intelligence (HUMINT), Cyber Counterintelligence (CCI), Indicators of Compromise (IoCs), and malware analysis
- Bulk data collection and management (data processing, structuring, normalization, sampling, storing, and visualization)
- Data analysis types and techniques including Statistical Data Analysis, Structured Analysis of Competing Hypotheses (SACH), etc
- Complete threat analysis process including threat modeling, fine-tuning, evaluation, runbook, and knowledge base creation
- Different data analysis, threat modeling, and threat intelligence tools
- Creating effective threat intelligence reports
- Different threat intelligence sharing platforms, acts, and regulations for sharing strategic, tactical, operational, and technical intelligence
Audience
- Ethical Hackers
- Security Practitioners, Engineers, Analysts, Specialist, Architects, and Managers
- Threat Intelligence Analysts, Associates, Researchers, Consultants
- Threat Hunters
- SOC Professionals
- Digital Forensic and Malware Analysts
- Incident Response Team Members
- Any mid-level to high-level cybersecurity professionals with a minimum of 2 years of experience
- Individuals from the information security profession and who want to enrich their skills and knowledge in the field of cyber threat intelligence
- Individuals interested in preventing cyber threats
Prerequisites
To be eligible to challenge the C|TIA Exam, the candidate must either:
- Attend official EC-Council C|TIA training through an accredited EC-Council Partner (Accredited Training Center, iWeek, or iLearn) (All candidates are required to pay the USD100 application fee unless your training fee already includes this) or
- Submit an application showing a minimum of 2 years working experience in information security (All candidates are required to pay USD 100 as a non-refundable application fee)
Outline
- Understanding Intelligence
- Summarize Cyber Threat Intelligence Concepts
- Explain Threat Intelligence Lifecycle and Frameworks
- Understand Threat Intelligence Platforms (TIPs)
- Understand Threat Intelligence in the Cloud Environment
- Understand Future Trends and Continuous Learning
- Understanding Cyber Threats
- Explain Advanced Persistent Threats
- Explain MITRE ATT&CK and Diamond Model
- Understanding Indicators of Compromise
- Understanding Organization’s Current Threat Landscape
- Understanding Requirements Analysis
- Plan a Threat Intelligence Program
- Establishing Management Support
- Building a Threat Intelligence Team
- Understand Threat Intelligence Sharing
- Review Threat Intelligence Program
- Overview of Threat Intelligence Data Collection
- Overview of Threat Intelligence Collection Management
- Overview of Threat Intelligence Feeds and Sources
- Understanding Threat Intelligence Data Collection and Acquisition
- Understanding Bulk Data Collection
- Understand Threat Data Collection and Enrichment in Cloud Environments
- Understanding Data Processing and Exploitation
- Overview of Data Analysis
- Understanding Data Analysis Techniques
- Overview of Threat Analysis
- Understanding Threat Analysis Process
- Overview of Fine-Tuning Threat Analysis
- Understanding Threat Intelligence Evaluation
- Overview of Threat Intelligence Tools
- Overview of Threat Intelligence Reports
- Introduction to Dissemination
- Participating in Sharing Relationships
- Overview of Sharing Threat Intelligence
- Overview of Delivery Mechanisms
- Understanding Threat Intelligence Sharing Platforms
- Overview of Intelligence Sharing Acts and Regulations
- Overview of Threat Intelligence Integration
- Understand Threat Intelligence Sharing and Collaboration using Python Scripting
- Summarize Threat Hunting Concepts
- Understand Threat Hunting Automation
- Understand Threat Intelligence in SOC Operations
- Understand Threat Intelligence in Risk Management
- Understand Threat Intelligence in Incident Response
Exam Facts
| Delivery | Online (Web based) |
| Format | Multiple choice |
| Proctoring | Live |
| Duration | 2 hours |
| # of questions | 50 |
| Pass grade | 70% |
Related Certification
- Certified: Threat Intelligence Analyst (CTIA)
