Outline

Identify diverse threat actors (nation-states, cybercriminals) and their motivations. • Analyze common attack vectors, including AI-powered phishing and adversarial ML attacks. • Utilize Open-Source Intelligence (OSINT) tools like WHOIS, Shodan, and Maltego. • Investigate a simulated threat actor via OSINT to build an intelligence profile.

Outline

Identify various threat intelligence sources, including dark web forums and commercial networks. • Implement passive and active data collection methodologies, including AI-assisted pipelines. • Process and normalize threat data using formats like STIX/TAXII. • Address ethical and legal considerations in cross-border CTI operations.

Outline

Apply advanced analysis techniques like pattern recognition and AI/ML for TTP detection. • Map Tactics, Techniques, and Procedures (TTPs) to the MITRE ATT&CK framework. • Perform static and dynamic malware analysis using sandboxing tools like Hybrid Analysis. • Analyze a malware sample from a historical cyberwar scenario.

Outline

Attribute complex threats, linking evidence to adversaries under uncertainty. • Examine blended threats, including state-backed cybercrime operations. • Develop actionable intelligence reports for defense agencies and international partners. • Discuss real-time case studies like the Russia-Ukraine cyber campaigns.

Outline

Facilitate global threat intelligence sharing via STIX/TAXII and OpenIOC. • Integrate CTI into Security Information and Event Management (SIEM) & Security Orchestration, Automation, and Response (SOAR) systems. • Explore emerging AI-driven CTI analysis, autonomous threat hunting, and AI protection strategies. • Configure SIEM to auto-ingest live feeds and generate AI-assisted alert triage.

Outline

Participate in a multi-nation cyber assault simulation on critical infrastructure. • Collect diverse intelligence from OSINT, dark web, and closed feeds. • Map TTPs to MITRE ATT&CK and attribute attacks to specific actors. • Formulate strategic and operational response plans and produce a CTI response dossier.