QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Harbor Financial's threat intelligence cell maps an intrusion by the campaign it tracks as IRONWOOD on the Diamond Model: the adversary as an activity cluster, a phishing lure and backdoor as capability, a command server as infrastructure with a pivot lead, and the finance team as victim. On the left, the judgement written with tradecraft — an estimative scale set at likely with moderate confidence, competing hypotheses weighed, and attribution taken only as far as the evidence goes. On the right, the products each tied to a decision: a tactical feed for the SOC, an operational brief for defenders and a strategic assessment for the board, with feedback closing the loop.
CY-MID-049Mid Level · Threat Intelligence

Threat Intelligence Cell — Tradecraft and Judgement

A seventeen-hour mid-level course where you work a financial firm's threat intelligence cell tracking an adversary campaign — turning feeds into decision-ready intelligence on the Diamond Model and intelligence cycle, mapping behaviour to ATT&CK, attributing carefully, and stating confidence rather than certainty.

17 hours8 chapters32 lessons164 activities8 labs

What you'll learn

  • Run the intelligence cycle from requirement through collection and analysis to a confidence-qualified product.
  • Structure and pivot intrusions on the Diamond Model and track adversaries as activity clusters.
  • Attribute only as far as the evidence allows, guarding against premature attribution and bias.
  • Map behaviour to ATT&CK to drive detection, and deliver decision-ready products that state confidence.
Price:৳8,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.