WELCOME TO INTELTRAINING.ORG

INTELLIGENCE ANALYST COURSE

COURSE OVERVIEW
The course is intended to prepare an intelligence analyst for their tasks by imparting structured analytic techniques facilitate the creation, development, and execution of cyber intelligence products for consumers.

Much of what is labeled as intelligence in the cyber domain is actually data that is referred to as Indicators of Compromise that typically include information such as IP addresses, command-and-control architecture, malware, e-mail address, hash identifiers (SHA, MD5), etc.  While this information provides insight into how attacks transpire, they do little to provide contextual understanding to actor attribution, motivation, target selection, and potential future operations.

Intelligence analysis can be defined as “the application of individual and collective cognitive methods to weigh data and test hypotheses within a secret socio-cultural context.”  The root of intelligence analysis is cognitive; objective analytic thinking is necessary to addressing the uncertainties that often surround incidents and events that require better understanding.

The course is intended to demonstrate better analytic approaches for analysts to apply to the cyber domain. Conceptualizing an analytic product before it is drafted is usually the single determinant of whether the final product will meet the needs of its customers.  Therefore, the course primarily focuses on the investment of time prior to the analyst actually writing an intelligence product for customers, thought it does address how analysts can best present the information in final products.

LEARNING OBJECTIVES

• Create pertinent cyber intelligence questions to be answered for customers

• Identify and prioritize manageable cyber intelligence requirements for customers

• Structure a finished cyber intelligence product for maximum impact

• Evaluate open source information

• Properly caveat analytic confidence and judgments based on set criteria

EXECUTIVE AWARENESS COURSES

Problem Definition: The cyber environment is a complex and multi-faceted environment that is being used by allies and adversaries to enable their own objectives and to hinder the efforts of others. Today’s senior leaders are faced with the challenge of leading teams and operations amidst technologies, lexicon, and concepts that few people have in-depth experience in. As a result, even the most experienced senior leader can find it difficult to apply their own knowledge and experience within this environment.

Solution: Decision makers have achieved their position because they have been effective at applying knowledge that they have gained to problems that their organizations face. This course will provide a way to look at the cyber environment through a lens that allows Senior Leaders to apply their own knowledge and skills to make informed decisions. The course will provide a practical understanding of the cyber environment, its structure, components, tactics, and realities. It will detail where the cyber environment may be unique, where it is not, and how to account for these differences when leading or building capabilities.

INTELLIGENCE COURSE FOR CYBER ANALYSTS

The Intelligence Course for Cyber Analysts provides the knowledge and skill sets required by personnel in technical cyber roles to understand how to build and leverage tactical and technical intelligence. Students will be presented with intelligence tradecraft theories, real examples and practical exercises to apply the teachings to realistic scenarios. Guided by highly experienced instructors, students learn perspectives and best practices for dealing with realistic intelligence challenges that they will face when undertaking intelligence analytic tasks.

LEARNING OBJECTIVES

• Understand and apply Cyber Intelligence concepts

• Develop proficiencies in analyzing adversary cyber tradecraft and strategies

• Learn effective methods to deliver intelligence needed to support a Security Operations Centre and incident response activities

• Understand how to develop and leverage cyber threat monitoring plans