Track 08 · Corporate Training
Threat Hunting and Cyber Threat Intelligence
Move from reactive alerting to proactive, intelligence-led threat hunting and detection development.
11 Modules
48–52 Hours
Instructor-Led / Virtual / Hybrid
Overview
A track that develops hunters and CTI analysts. It covers hunting methodology, intelligence fundamentals, actor analysis, IOCs, ATT&CK mapping, endpoint and network hunting, intelligence collection and analysis, and detection development, ending in a hypothesis-driven hunt.
01
Threat Hunting Fundamentals
Hunting concepts, assumptions, hypotheses and methodologies
4 Hours
02
Threat Intelligence Fundamentals
Strategic, operational, tactical and technical intelligence
4 Hours
03
Threat Actor Analysis
Motivation, capability, infrastructure, targeting and behaviour
4 Hours
04
Indicators of Compromise
Collection, validation, enrichment and lifecycle management
4 Hours
05
MITRE ATT&CK Mapping
Tactics, techniques, sub-techniques and detection opportunities
5 Hours
06
Hunting with Endpoint Data
Processes, command lines, parent-child relationships and persistence
5 Hours
07
Hunting with Network Data
DNS, proxy, firewall, traffic and beaconing analysis
5 Hours
08
Intelligence Collection
Open-source intelligence, feeds, repositories and internal intelligence
4 Hours
09
Intelligence Analysis
Correlation, confidence, relevance and analytical reporting
4 Hours
10
Detection Development
Converting intelligence and hunting results into monitoring logic
4 Hours
11
Practical Threat Hunt
Hypothesis-driven investigation using simulated datasets
7 Hours
Delivery Formats
Instructor-Led ClassroomVirtual Instructor-LedHybrid TrainingWorkshop-BasedLaboratory-BasedExecutive BriefingTabletop ExerciseBootcampTrain-the-TrainerCustom Corporate Programme