Name & Direct Link: MASA – Certified All Source Analyst

Platform: Mossé Cyber Security Institute

Community: They have a Discord Server

Training & Certification Pricing: $995

Exam Type: Practical Hands-On

Topics:

• Lab Setup
• Fundamentals of Open Source Intelligence (OSINT)
• Search Engines
• Social Media
• Personal Identifiable Information (PII)
• Documents
• Data Breaches
• Multimedia
• Deep Web
• Geolocation
• Documentation for OSINT
• Fundamentals of Cyber Threat Intelligence (CTI)
• Situational Awareness
• Open-Source Intelligence for CTI
• Monitoring for New Threats
• Harnessing Threat Feeds
• Cyber Threat Intelligence Operations
• Internal Logs Sources
• Hypothesis Creation
• Supporting Red Teams and Threat Hunting Teams
• Reporting for CTI
• Policies, Procedures and Methodologies

Name & Direct Link: BushidoToken’s Website and GitHub

Includes:

• Open Source Tools for CTI
• Exploring APT Campaigns
• CTI Quiz
• YARA Rules
• Breach Report Collection
• Insider Threat Themed CTFs
• OSINT Search Operators
• CTI Talks and Slides
• Podcasts
• Blog Posts
• News

Name & Direct Link: CTI Fundamentals

Platform: GitHub – Curated Intel

Topics:

• CTI Theory
• CTI Frameworks
• Threat Intelligence Seminal Research
• Running Enterprise Threat Intelligence Programs

Name & Direct Link: Introduction to EASY Framework for Threat Intelligence

Platform: AttackIQ Academy

Cost: Free

Proof of Completion: Badge

Topics: EASY Framework

Name & Direct Link: Advanced Cyber Threat Intelligence

Platform: Cybrary

Cost: $59/month – $590/year

Topics:

• Introduction to the Intelligence Lifecycle
• Leveraging OSINT
• Public Data Sources
• Community Data Sources
• Private Data Sources
• External Data Sources
• Internal Data Acquisition
• Introduction to Data Collection
• Threat Intelligence Platforms
• Storage and Integration
• Common CTI Standards
• Introduction to Data Processing
• Cyber Kill Chain
• Diamond Model
• Campaign Analysis
• Threat Intelligence Naming Conventions
• MITRE ATT&CK and the MITRE Threat Groups Track
• Visual & Heatmap Analysis
• Attribution
• Dissemination and Sharing
• Strategic, Operational, and Tactical Intelligence

Name & Direct Link: Intro to Cyber Threat Intelligence

Platform: Cybrary

Cost: $59/month – $590/year (The first 3 modules are free)

Proof of Completion: Certificate of Completion

• CTI Concepts and Definitions
• CTI History
• CTI Lifecycle
• Data Collection Sources
• CTI Role in Incident Response
• CTI Role in SOC
• CTI for Fraud Prevention
• Cyber Threat Intelligence Frameworks
• MITRE ATT&CK
• Diamond Model
• Cyber Kill Chain
• Developing the Core of Cyber Threat Intelligence

Name & Direct Link: Cyber Threat Intelligence Training

Platform: arcX

Cost: Free – $504

Proof of Completion: Certificate of Completion

Courses:

Cyber Threat Intelligence 101 – Free

• Objective of Cyber Threat Intelligence
• Introduction to Threat Actors
• Threat Vectors
• The Intelligence Cycle
• Introduction to Law and Ethics

Cyber Threat Intelligence Practitioner (CREST Accredited) – $504

• Introduction to Threat Intelligence
• Direction
• Collection
• Analysis
• Dissemination
• Laws and Ethics

Name & Direct Link: MTIA – Certified Threat Intelligence Analyst

Platform: Mossé Cyber Security Institute

Community: They have a Discord Server

Training & Exam Pricing: $450 includes practical exercises and the certification.

Topics:

• Lab Setup
• Fundamentals
• Open-Source Intelligence
• Internal Logs Sources
• Binary Classification
• File and Executable Forensics
• Memory Forensics
• Network Forensics
• Windows Forensics
• Threat Hunting with YARA
• Threat Hunting with Pandas
• Threat Hunting with Velociraptor
• Threat Hunting with GRR Rapid Response
• Situational Awareness
• Pivot Analysis
• Harnessing Threat Feeds
• Monitor New Threats and Vulnerabilities
• Security Automation
• Cyber Threat Mapping
• Hypothesis Creation
• Supporting Red Teams and Threat Hunting Teams
• Reporting
• Policies, Procedures, and Methodologies
• Cyber Counterintelligence

Additional Information: This isn’t a typical approach to a certification. You complete 100% practical exercises that you research how to do on your own as you go, so part of it is research methods and critical-thinking skills. As you go through the exercises, you go from Novice DFIR Practitioner up to Certified Expert DFIR Practitioner. There is no time limit to complete it.

Exam Type: Practical Hands-On

Name & Direct Link: ATT&CK Cyber Threat Intelligence Certification

Platform: MAD20

Cost: $47.99/month – $499/year

Proof of Completion: Badge for each topic and certification after completing all of the topics.

Community/Forum: There is a MAD20 Learners Group for subscribers

Topics:

• ATT&CK Fundamentals
• ATT&CK Cyber Threat Intelligence from Raw Data
• ATT&CK Cyber Threat Intelligence from Narrative Reporting
• ATT&CK Cyber Threat Intelligence Storage and Analysis
• ATT&CK Cyber Threat Intelligence Defense Recommendations

Name and Direct Link: Report Template for Threat Intelligence and Incident Response

Platform: Lenny Zeltser’s website

Includes: Adversary Actions and Tactics, Courses of Action During Incident Response, Intrusion Campaign Analysis, Intrusion Kill Chain Framework, Courses of Action Matrix, Diamond Model