QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Sara, a threat intelligence analyst at Meridian, climbs one question up the eight-step intelligence staircase: priority intelligence requirement PIR-014 asks whether a ransomware group is targeting the sector's remote-access tooling; it is collected from OSINT, a feed, EDR telemetry and a dark-web source, 400 raw items are processed into rated STIX, analysed with competing hypotheses, the Diamond Model and ATT&CK, produced as an IOC pack for the SOC and a summary for the CISO, disseminated under TLP through TAXII, checked for use in feedback, and turned into an RDP lateral-movement detection. The outcome panel shows 11 detections and 3 productive hunts in the quarter, and a blocklist pyramid of pain moving from hashes toward TTP-level detection.
CY-MID-032Mid Level · Threat Intelligence

Threat Intelligence Operations — The Intelligence Staircase

A hands-on mid-level course that runs a threat-intelligence function that feeds the SOC. Climb the intelligence staircase - eight steps: Direction, Collection, Processing, Analysis, Production, Dissemination, Feedback, and Action - setting requirements, collecting from OSINT and feeds, analysing with the Diamond Model and ATT&CK, and turning intel into detections. Strictly defensive. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

  • Set intelligence requirements and collect from the right sources.
  • Process and enrich indicators with STIX/TAXII and context.
  • Analyse with the Diamond Model, ATT&CK, and structured techniques.
  • Produce, disseminate with TLP, and operationalise intel into defence.
Price:৳8,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.