CTI for Security Operations: From Malware Analysis to Intelligence-Driven Defense | Live Workshop

CTI for Security Operations: From Malware Analysis to Intelligence-Driven Defense

Live Registration

BATCH #24

03Seats Left

92% Booked

Registration Closed

Course Overview

Home >Courses >CTI for Security Operations: From Malware Analysis to Intelligence-Driven Defense

Table of Contents

Workshop Registration End Date :08/17/2025

Mentor Based

Program Syllabus

Module 1

About

Cyber Threat Intelligence (CTI) is the discipline of gathering information about adversaries’ capabilities, intentions, and tactics to inform defensive decision-making. This workshop combines theory with hands-on labs to teach you how to source open-source and closed-source data, leverage automated intelligence platforms, map findings to frameworks like MITRE ATT&CK, and integrate threat feeds into your SOC workflows

Edit

Module 2

Aim

To equip security professionals with the methodologies, tools, and best practices needed to collect, analyze, and operationalize threat intelligence—enabling organizations to anticipate, detect, and mitigate cyber threats before they materialize.

Edit

Enroll
Explore

Module 3

Workshop Objectives

Understand the full CTI lifecycle and its role in proactive defense
Demonstrate proficiency with key OSINT and CTI automation tools
Apply data enrichment and correlation techniques to raw threat data
Map intelligence findings to frameworks such as MITRE ATT&CK
Deliver clear, concise intelligence products for varied stakeholders
Execute a tabletop exercise to practice threat-informed decision-making

Edit

Module 4

Workshop Structure

Module 5

Day 1: Fundamentals of CTI and Threat Actors

Objective: Understand the fundamentals of CTI, its lifecycle, and its role in cybersecurity.

Module 6

Topics Covered:

Introduction to Cyber Threat Intelligence (CTI)
- Definition and importance
- Types of intelligence: Strategic, Operational, Tactical, Technical
Threat Intelligence Lifecycle
- Stages from direction to dissemination
Threat Actors and Motivations
- Nation-states, cybercriminals, hacktivists, insider threats
- Common attack vectors: phishing, malware, ransomware, APTs
Open-Source Intelligence (OSINT) Basics
- Tools: WHOIS, Shodan, Maltego, Google Dorks
- Hands-on: Gathering threat data from public sources

Lab Activity:

Use OSINT tools to investigate a simulated threat actor.

Module 7

Day 2: Collection and Processing of Threat Data

Objective: Learn how to collect and process threat data for analysis.

Module 8

Topics Covered:

Threat Intelligence Sources
- Open-source: Feeds, forums, paste sites
- Closed-source: Commercial feeds, dark web monitoring
- Internal sources: SIEM, logs, EDR
Data Collection Techniques
- Passive vs. active collection
- Legal and ethical considerations
Processing & Normalization
- Structuring data: STIX/TAXII, JSON, CSV
- Tools: MISP, ThreatConnect, Recorded Future
Indicators of Compromise (IOCs)
- IPs, domains, hashes, behavioral patterns

Lab Activity:

Use MISP to ingest and analyze IOCs from a threat feed.

Module 9

Day 3: Threat Analysis and Attribution

Objective: Develop skills in analyzing threats and attributing attacks.

Module 10

Topics Covered:

Threat Analysis Techniques
- Pattern recognition, anomaly detection, correlation
- Tactics, Techniques, Procedures (TTPs)
Malware Analysis for CTI
- Static vs. dynamic analysis
- Tools: Sandboxing with Hybrid Analysis, ANY.RUN
Threat Attribution
- Challenges in attribution
- Case studies: APT29, Lazarus Group, others
Threat Intelligence Reports
- Writing actionable intelligence
- Report structure: Executive Summary, Technical Details, Recommendations

Lab Activity:

Analyze a malware sample and draft a threat report.

Module 11

Day 4: Operational Integration and Capstone Project

Objective: Learn how to share intelligence and integrate CTI into security operations.

Module 12

Topics Covered:

Threat Intelligence Sharing
- ISACs (Information Sharing and Analysis Centers)
- Standards: STIX/TAXII, OpenIOC
Integrating CTI into Security Operations
- SIEM integration (Splunk, IBM QRadar)
- Automating threat detection with SOAR platforms
Threat Hunting with CTI
- Proactive methodologies
- Using YARA rules for detection
Emerging Trends in CTI
- AI/ML applications in CTI
- Threat intelligence for cloud environments
Final Exercise (Capstone Project)
- Simulated cyber incident scenario:
  - Collect relevant threat intelligence
  - Analyze the attack using TTPs
  - Produce a threat intelligence report
  - Recommend defensive actions

Lab Activity:

Configure a SIEM to ingest threat feeds and generate alerts.

Edit

Module 13

Intended For

- Security analysts, SOC engineers, incident responders
- Network/security administrators transitioning to CTI roles
- Risk and compliance officers seeking deeper threat visibility

Edit

Module 14

Important Dates

Module 15

Registration Ends

08/17/2025
Indian Standard Timing 8 PM

Module 16

Workshop Dates

08/17/2025 to 08/22/2025
Indian Standard Timing 9 PM ( Indian Standerd Time )

Module 17

Workshop Outcomes

By the end of this workshop, participants will be able to:

Design and implement a CTI program aligned with organizational goals
Collect intelligence from multiple sources and validate data quality
Analyze threat data to identify adversary patterns and TTPs
Produce actionable intelligence reports tailored for technical and executive audiences
Integrate CTI outputs into SIEM/SOAR platforms for automated alerting

Edit

Module 18

Mentor Profile

J. T. Sibychen

Cyber and Cloud Security Trainer

NIIT Foundation

Module 19

Fee Structure

Module 20

Student Fee

INR. 1999
USD. 50

Module 21

Ph.D. Scholar / Researcher Fee

INR. 2999
USD. 60

Module 22

Academician / Faculty Fee

INR. 3999
USD. 70

Module 23

Industry Professional Fee

INR. 5999
USD. 90

We are excited to announce that we now accept payments in over 20 global currencies, in addition to USD. Check out our list to see if your preferred currency is supported. Enjoy the convenience and flexibility of paying in your local currency!
List of Currencies

Module 24

FOR QUERIES, FEEDBACK OR ASSISTANCE

Module 25

Key Takeaways

Access to Live Lectures
Access to Recorded Sessions
e-Certificate
Query Solving Post Workshop

Module 26

Future Career Prospects

With the growing sophistication of cyber attacks, organizations across finance, healthcare, government, and critical infrastructure are investing heavily in CTI teams. Mastery of threat intelligence opens doors to roles driving strategic defense initiatives, leading cross-functional investigations, and shaping enterprise risk posture—paving the way toward senior analyst, manager, and director positions in cybersecurity.

Edit

Module 27