This course focuses on building a data science capability into the hunt team for contextual threat intelligence. By the end of the course, learners will be able to analyze raw data, develop a picture for dissemination, and understand the operational environment for threat intelligence. The course covers skills such as utilizing the Intelligence Cycle, using the Elk Stack, and implementing data-driven security practices. The teaching method includes lectures and practical demonstrations. This course is intended for individuals interested in enhancing their threat intelligence capabilities, particularly those working in cybersecurity or data analysis roles.
Overview
Syllabus
Introduction
What is Intelligence
Network Perimeter Boundary
Capabilities Brief
Specified Tasks
Intelligence Cycle
Hip Pocket Training
The Intelligence Cycle
Analyze the raw data
Develop the picture dissemination
Operational Environment
Intelligence
Persistence
Internal Threat Intelligence
RapidDissemination
Threat Intelligence
Contextual Threat Intelligence
The Hunt
Elk Stack
What is a Data Scientist
DataDriven Security
Showdown
Data Science Program
Related Courses
-
Advanced Cyber Threat Intelligence
-
Intro to Cyber Threat Intelligence
-
Threat Intelligence Zero to Basics in Presentation
-
Creating REAL Threat Intelligence with Evernote
-
Data-Driven Threat Intelligence - Metrics on Indicator Dissemination and Sharing
-
Creating Data-Driven Threat Intelligence Signals in a Zero Trust Environment
