Threat Intelligence Analyst — career path

Learn

• PathFollow the CompTIA Security+ (SY0-701) path — the entry certification for every intelligence role

Learn

• CourseOSINT: Open-Source Intelligence 🔒 StationX Unlimited
  21 sections · 140 lectures

  1. Training Overview 2
  2. Introduction 10
  3. Reporting 2
  4. Getting started 5
  5. About sock puppets 6
  6. Data collection 5
  7. Advance searching 8
  8. Reverse searches 7
  9. Employee and employer searches 1
  10. People searches 11
  11. Website OSINT 7
  12. The Darkweb 6
  13. Various browser plugins 5
  14. Social media 14
  15. OSINT Frameworks 1
  16. Miscellaneous 9
  17. Bringing it all together 14
  18. Additional content 8
  19. Bonus 6
  20. Additional Content 12
  21. Audio Version of Training 1
• CourseOSINT: Open-Source Intelligence Level 2 🔒 StationX Unlimited
  32 sections · 106 lectures

  1. Training Overview 1
  2. Introduction 3
  3. Setting up our virtual machine with Virtualbox 1
  4. Checklist 2
  5. Website crawling tools 7
  6. Social Engineering 4
  7. Home ownership 2
  8. Encryption 4
  9. Canary Tokens 2
  10. Nmap/Zenmap 1
  11. Checking usernames 2
  12. Search code 2
  13. VPN 2
  14. Criminal checks 5
  15. Additional Twitter tools 5
  16. Additional Facebook tools 2
  17. Reddit 1
  18. Instagram 3
  19. Plagiarism Check 1
  20. Sock puppets 3
  21. Dating 5
  22. Other people search 8
  23. Politics 4
  24. Business 7
  25. Bitcoin 2
  26. Vehicle 5
  27. Darkweb 7
  28. Images 5
  29. Investigation 3
  30. Identifying and dealing with misinformation 2
  31. In closing and bonuses 4
  32. Audio Version of Training 1
• CourseThe Secrets of OSINT (Open-source Intelligence) 🔒 StationX Unlimited
  8 sections · 36 lectures

  1. Training Overview 2
  2. Introduction 2
  3. Section 1 : Going undercover 4
  4. Section 2 : Recruiting Intelligence Sources 8
  5. Section 3 : How to Make Search Engines Talk 5
  6. Section 4 : How to Interrogate Social Networks 8
  7. Section 5 : Loading Heavy Guns 6
  8. Audio Version of Training 1

Learn

• CourseCyber Threat Intelligence - Basics & Fundamentals 🔒 StationX Unlimited
  11 sections · 68 lectures

  1. Training Overview 2
  2. Introduction 4
  3. Definitions & Fundamentals 15
  4. Cyber Threat Intelligence Objectives 6
  5. CTI Specific Models 15
  6. CTI Reports - Examples 3
  7. Use case 1 - Ransomware group Primo-Analysis 8
  8. Use Case 2 - Darkweb Monitoring 8
  9. Use Case 3 - Adversary Controlled Infrastructure Hunting 5
  10. Conclusion 1
  11. Audio Version of the Training 1
• CourseHands-On Cyber Threat Intelligence (CTI) Team Building Series 🔒 StationX Unlimited
  1 section · 2 lectures

  1. Hands-On Cyber Threat Intelligence (CTI) Team Building Series 2
• CourseMITRE ATT&CK Framework Essentials 🔒 StationX Unlimited
  6 sections · 35 lectures

  1. Training Overview 2
  2. Section 1: Introduction 9
  3. Section 2: Tactics, Techniques, and Procedures (TTP's) 12
  4. Section 3: Other Learning Resources 4
  5. Section 4: Update - Adversarial Threat Landscape for AI Systems 7
  6. Audio Version of Training 1

Practise

• Labs+Security Threat Intelligence — 11 labs 🔒 StationX Labs+
  • Assess Cybersecurity Templates and Benchmarks [Guided]
  • Can You Discover Vulnerabilities Over a Network? [Advanced]
  • Can You Establish Secure Communications by Using SSH and Wireshark? [Advanced]
  • Can You Manage Threats by Using Source Code, Logs, and Security Templates? [Advanced]
  • Can You Reduce Threats by Using Nmap, SSH, Source Code Analysis, and Security Templates? [Expert]
  • Find Vulnerabilities [Guided]
  • Perform Application Source Code Verification [Guided]
  • Perform Log Analysis [Guided]
  • Perform Network Scanning [Guided]
  • Use SSH for Remote Access [Guided]
  • Use Wireshark Filters to Explore Captured Network Traffic [Guided]
• LabsThreat Intelligence & Defense — 18 labs 🔒 StationX Unlimited
  • Analyze Various Data Sources to Confirm Suspected Infection
  • Assessing Vulnerabilities Post Addressal
  • BitCoin Mining Web Application on Corporate Network
  • Check for Indicators of Other Attack Activity (Debug PE File)
  • Cyber Security Evaluation Tool (CSET)
  • Entering Information into a CMDB
  • Event Logs with Autopsy
  • Internet History
  • MITRE - Defend
  • Nexpose: Red Team Exploitation
  • Overview of Kibana
  • Performing an Initial Attack Analysis
  • Preparing Target Media
  • Recover from Illegal Bitcoin Mining Incident
  • Recover from Web-Based Flashpack Incident
  • Report Writing for Presentation to Management
  • Respond to and Validate Alerts from Antivirus Software
  • WMI Event Persistence