Threat Intelligence Analysis Training in Mombasa, Kenya by EduCore Global Skills

Module 1: Foundations of Cyber Threat Intelligence

Core competencies for Foundations of Cyber Threat Intelligence.

• Defining threat intelligence: data vs. information vs. intelligence
• Strategic, operational, tactical, and technical intelligence levels
• The intelligence cycle: direction, collection, processing, analysis, dissemination, and feedback
• The threat landscape: nation-states, cybercriminals, hacktivists, and insiders
• Roles and career paths in threat intelligence teams and the SOC

Module 2: Intelligence Requirements and Planning

Core competencies for Intelligence Requirements and Planning.

• Defining priority intelligence requirements (PIRs) aligned to business risk
• Identifying stakeholders and their intelligence needs
• Building a threat intelligence program: people, process, and technology
• Collection planning and source selection
• Measuring program maturity and effectiveness

Module 3: Collection Sources and Methods

Core competencies for Collection Sources and Methods.

• Open-source intelligence (OSINT) techniques and tools
• Commercial feeds, ISACs, government sharing, and vendor reporting
• Internal telemetry: logs, EDR, network traffic, and incident data
• Dark web, forums, and underground marketplace monitoring
• Source evaluation, reliability grading (Admiralty/NATO system), and operational security for analysts

Module 4: Threat Actors, Campaigns, and Attack Frameworks

Core competencies for Threat Actors, Campaigns, and Attack Frameworks.

• Threat actor profiling: motivations, capabilities, and attribution challenges
• MITRE ATT&CK for mapping adversary behavior
• Cyber Kill Chain and Diamond Model of intrusion analysis
• Tracking campaigns, infrastructure, and clusters over time
• Ransomware ecosystems, initial access brokers, and the cybercrime supply chain

Module 5: Indicators, Malware, and Technical Analysis

Core competencies for Indicators, Malware, and Technical Analysis.

• Indicators of compromise (IOCs) vs. indicators of attack (IOAs) and the Pyramid of Pain
• Malware triage and basic static and dynamic analysis concepts
• Network and infrastructure analysis: domains, IPs, certificates, and passive DNS
• Phishing, credential theft, and social engineering campaign analysis
• Vulnerability intelligence and exploit prioritization (CVSS, EPSS, KEV)

Module 6: Analytical Tradecraft and Critical Thinking

Core competencies for Analytical Tradecraft and Critical Thinking.

• Structured analytic techniques: ACH, key assumptions check, and red teaming
• Cognitive biases and how to counter them
• Forming hypotheses, weighing evidence, and assessing confidence levels
• Attribution methodology and its limits
• Estimative language and communicating uncertainty

Module 7: Tools, Platforms, and Automation

Core competencies for Tools, Platforms, and Automation.

• Threat intelligence platforms (MISP, OpenCTI, commercial TIPs)
• Data standards and sharing formats: STIX, TAXII, and YARA/Sigma rules
• Enrichment, correlation, and integration with SIEM, SOAR, and EDR
• Using scripting and APIs to automate collection and analysis
• Leveraging AI and LLMs in threat intelligence workflows, with their risks

Module 8: Operationalizing Intelligence

Core competencies for Operationalizing Intelligence.

• Threat hunting driven by intelligence hypotheses
• Detection engineering and translating intelligence into rules
• Supporting incident response and digital forensics
• Vulnerability management and risk-based prioritization
• Adversary emulation and purple teaming

Module 9: Reporting, Communication, and Sharing

Core competencies for Reporting, Communication, and Sharing.

• Writing clear, actionable intelligence reports for different audiences
• Briefing executives and boards on cyber risk
• Traffic Light Protocol (TLP) and information-handling practices
• Participating in trusted sharing communities and partnerships
• Legal, ethical, and privacy considerations in intelligence collection and sharing

Module 10: Advanced Topics and Capstone

Core competencies for Advanced Topics and Capstone.

• Nation-state and advanced persistent threat (APT) analysis
• Industry-specific threats: finance, energy, healthcare, and critical infrastructure
• Supply chain, cloud, and identity-based threat analysis
• Geopolitical context and emerging threat trends
• Capstone: conducting an end-to-end threat intelligence investigation and delivering a finished intelligence product

How is Threat Intelligence Analysis Training delivered?

Threat Intelligence Analysis Training is delivered through instructor-led classroom, live online, private in-house corporate training depending on the selected cohort or organizational arrangement.

What are the fees for Threat Intelligence Analysis Training?

The published course investment is KES 120,000 and USD 1,700. Location-specific fees are shown where configured.

How long is Threat Intelligence Analysis Training?

Threat Intelligence Analysis Training runs for 5 Days unless a customized corporate schedule is agreed.

Do participants receive a certificate for Threat Intelligence Analysis Training?

Participants who complete the course receive a Certificate of Completion from EduCore Global Skills.

Where can I take Threat Intelligence Analysis Training?

Threat Intelligence Analysis Training is available in Mombasa, Kenya. Current dates are shown only where real sessions have been configured.

Who should attend Threat Intelligence Analysis Training?

Threat Intelligence Analysis Training is designed for ICT Officers, IT Managers, Systems Administrators, Cybersecurity Teams, Digital Transformation Leads, Professionals and organizations that need practical capability in Cybersecurity.

What are the prerequisites for Threat Intelligence Analysis Training?

No mandatory prerequisite is required unless stated in the course outline. Practical workplace experience in the subject area is helpful.