Cyber Threat Intelligence (CTI) Essentials Training in Thimphu, Bhutan

This course introduces the fundamentals of Cyber Threat Intelligence (CTI) and its role in modern cybersecurity. It covers CTI concepts, lifecycle, data collection methods, analysis frameworks, and practical applications in defending against cyber threats. Participants will gain insights into how organizations leverage CTI to anticipate, detect, and respond to attacks.

Introduction to Cyber Threat Intelligence

• What is Cyber Threat Intelligence?

• Role of CTI in cybersecurity and SOC operations

• Types of threat intelligence (strategic, tactical, operational, technical)

• CTI lifecycle: planning, collection, processing, analysis, dissemination, feedback

• Sources of threat intelligence: internal vs external

CTI Collection & Analysis

• Data Collection Techniques

  • Open-source intelligence (OSINT)

  • Threat feeds and commercial intelligence

  • Dark web monitoring

  • Indicators of Compromise (IoCs)

• CTI Analysis Frameworks

  • MITRE ATT&CK framework

  • Diamond Model of Intrusion Analysis

  • Kill Chain methodology

• Identifying threat actors, TTPs (Tactics, Techniques, Procedures)

• Correlating and validating intelligence

Applying CTI in Security Operations

• Threat Hunting with CTI

• Reporting and Dissemination

  • Writing actionable intelligence reports

  • Communicating CTI to technical and non-technical stakeholders

• Future of CTI: AI/ML in threat intelligence, automation, and sharing communities

Hands-on Exercises

Summary and Conclusion