Skip main navigation

Get 30% off one whole year of Unlimited learning. Subscribe for just £249.99 £174.99. T&Cs apply

Delivering Actionable Intelligence

This video focuses on sharing intelligence with the right people in the right format. You’ll learn how dissemination and feedback improve the intelligence lifecycle. The key takeaway is making intelligence …

Processing and Analysis

This video explains how raw threat data is cleaned, organised, and analysed to produce meaningful intelligence. You’ll learn how context and validation improve intelligence quality. The takeaway is understanding how …

Direction, Discovery, and Collection

This video introduces the first stages of the Threat Intelligence Lifecycle. You’ll learn how to define intelligence requirements and collect relevant data aligned with business goals. The key takeaway is …

Course Wrap-up Video

This video wraps up the Basics of Cyber Threat Intelligence course by reinforcing the key concepts you’ve learnt across all modules. You’ll revisit how CTI transforms raw data into actionable …

Simulating a Cyber Incident: Scenario Setup

This video introduces a realistic cyber incident simulation and outlines the scenario context. You’ll learn what data, tools, and intelligence sources are available for the exercise. The takeaway is preparing …

Identifying IOCs and Profiling Threat Actors

This video walks through identifying indicators of compromise and building threat actor profiles. You’ll learn how to correlate indicators with known campaigns and behaviours. The key takeaway is connecting technical …

MISP Threat Sharing

The instructor has spoken about various external resources and links during the course. In the following section, you will find the links and site information related to Lesson topics. Article: …

Recommending and Communicating Response Actions

This video focuses on turning intelligence findings into clear response recommendations. You’ll learn how to communicate actions to both technical and non-technical stakeholders. The takeaway is effective communication under pressure. …

Using ATT&CK for Detection and Response

This video explains how ATT&CK supports detection engineering and incident response. You’ll learn how to identify gaps, improve alerts, and guide response actions. The takeaway is using intelligence to strengthen …

Mapping Threat Indicators to ATT&CK TTPs

This video shows how to map observed indicators and behaviours to ATT&CK techniques. You’ll learn how this mapping reveals attack paths and attacker intent. The key takeaway is improved threat …

MITRE ATT&CK Framework Fundamentals

This video introduces the MITRE ATT&CK framework and explains its structure and purpose. You’ll learn how tactics, techniques, and procedures describe adversary behaviour. The takeaway is gaining a shared language …

Automating Threat Intelligence Workflows

This video focuses on automating CTI processes using integrations with SIEM, SOAR, and EDR/XDR tools. You’ll learn how automation speeds up detection, triage, and response. The key takeaway is working …

Aggregating and Enriching Threat Indicators

This video walks through how threat indicators are collected from multiple sources and enriched with context. You’ll learn how correlation, risk scoring, and visualisation help prioritise alerts. The takeaway is …

Introduction to Key CTI Tools

This video provides an overview of common cyber threat intelligence tools used by security teams today. You’ll learn how these tools centralise, enrich, and organise threat data. The key takeaway …

Module Introduction

This video introduces Module 4 and explains how cyber threat intelligence is applied in real incident response scenarios. You’ll learn how CTI tools, frameworks, and workflows come together during active …