Essentials of Cyber Threat Intelligence

Syllabus

• Week 1

  Foundations of Cyber Threat Intelligence

  • Lesson 1: Course Introduction

    This lesson introduces learners to the foundational principles of cyber threat intelligence (CTI).

  • Lesson 2: What is Cyber Threat Intelligence?

    This lesson introduces the fundamentals of cyber threat intelligence, clarifying the differences between data, information, and intelligence. It explains why CTI matters, who uses it, and how it helps organisations defend against.

  • Lesson 3: Types of Threat Intelligence

    This lesson explores tactical, technical, operational, and strategic threat intelligence and how each supports security operations and informed leadership decisions.

  • Lesson 4: The Threat Intelligence Lifecycle

    Learn how the Threat Intelligence Lifecycle keeps intelligence focused and actionable, enabling faster detection, smarter responses, and strategic value for security teams and leaders.

• Week 2

  Information Security Principles

  • Lesson 5: CIA Triad, Confidentiality, Integrity, and Availability

    This lesson covers how the CIA Triad (Confidentiality, Integrity, and Availability) is the bedrock of information security and directly shapes how cyber threat intelligence is collected, analysed, and applied.

  • Lesson 6: Risk Management - Turning Intelligence into Action

    This lesson explores how risk management underpins information security and cyber threat intelligence, focusing on identifying assets, assessing threats and vulnerabilities, and developing effective control strategies.

  • Lesson 7: Applying Security Principles in Practice

    This lesson will describe how to apply the information security principles towards the threat intelligence lifecycle as a structured, repeatable process for turning raw data into actionable intelligence.

• Week 3

  Operationalising CTI - Threat Intelligence Platform (TIP)

  • Lesson 8: Introduction to Threat Intelligence Platforms (TIP)

    This lesson will provide an overview of what Threat Intelligence Platforms are, their key capabilities, and how they differ from other cyber threat intelligence tools.

  • Lesson 9: Integration and Functionality of TIPs

    This lesson will focus on how TIPs integrate with other security tools and systems, and the specific functionalities they offer.

  • Lesson 10: Practical Applications and Benefits of TIPs

    This lesson will cover the practical applications of TIPs in cybersecurity and the benefits they offer to organisations.

• Week 4

  Cyber Threat Intelligence Tools and Incident Response

  • Lesson 11: Using CTI Tools to Analyse Threat Indicators

    Learners explore modern CTI platforms, both enterprise and open source, and how they aggregate, enrich, and operationalise threat intelligence using practical workflows, visualisation, and AI-driven analytics.

  • Lesson 12: Mapping Attacker Tactics with MITRE ATT&CK

    This lesson introduces the MITRE ATT&CK framework as a common language for adversary behaviour, teaching learners to map indicators to tactics and techniques to understand attack paths and prioritise defences.

  • Lesson 13: Simulated Incident Response from IOC to Action

    Learners engage in simulated cyber incidents, using CTI tools and frameworks to identify indicators, profile threat actors, and recommend response actions under realistic, high-pressure conditions.

  • Lesson 14: Course Wrap-up

    Summary of key learnings from the course with a thank you message.

Who will you learn with?