Module 1: Introduction to Threat Intelligence

Module 2: Technical Deep Dive on Latest Attacks

What is Security, Vulnerabilities & O-Days, Attack life Cycle, Different Attack Vectors
Threats Vs. Risks, Why Perimeter defenses are failing? Why Anti-Virus is not enough?
Introduction to Cyber Kill Chain
Indicators of Compromise (IOC) & IOC Sources (OTX, MISP)
Business Email Compromise (BEC) (Lab) with Indicators of Compromise
Ransomware (Lab) with Indicators of Compromise
Advanced Persistent Threat (Lab) with Indicators of Compromise
File-less Malwares (Lab) with Indicators of Compromise
Mobile Malwares (Lab) with Indicators of Compromise
Web Data Breach (Lab) with Indicators of Compromise
Malvertising (Lab) with Indicators of Compromise
Social Media based attacks (Lab) with Indicators of Compromise
Password based attacks (Password Stuffing, Account Takeover, Phishing, etc) (Lab)
What is MITRE ATT&CK Framework ?
Tactics, Techniques and Procedures (TTP)
Threat Actors
ATT&CK Navigator
The ThreatHunter-Playbook
Atomic Red Team Library
Threat-Based Adversary Emulation with ATT&CK
Behavioral-based analytic detection using ATT&CK
Mapping to ATT&CK from Raw Data – Lab
Storing and analyzing ATT&CK-mapped intel

Module 3: Setting up Threat Intel Framework

Module 4: Malware Information Sharing Platform (MISP)

MISP Project Overview
MISP Features & Use cases
Events, Objects and Attributes in MISP
MISP Data model & Core data structure
MISP - Creating and populating events
MISP - Distribution and Topology
MISP Galaxy
MISP Object Templates
MISP Deployment and Integrations
Normalizing OSINT and other community & Private Feeds
SIEM and MISP Integration
Incident Response and threat hunting using MISP
Viper and MISP
MISP Administration
MISP feeds - A simple and secure approach to generate, select and collect intelligence
MISP and Decaying of Indicators
Workflow of a security analyst using Viper as a management console for malware analysis

Module 5: Cybersecurity Incident Response

CCTIA: Certified Cyber Threat Intelligence Analyst