Course Instructor

TBA

Course Schedule

16 - 18 Nov 2026
8AM - 3PM

Course Fee

USD Please contact us for more details

Course Duration

3 Days

Location

Abu Dhabi & Dubai, UAE

Course Description

This comprehensive course provides a deep dive into the discipline of cyber threat intelligence within modern security operations. It addresses the critical challenge of navigating overwhelming data volumes by transforming raw information into actionable insights that inform strategic decision-making. Participants will master the intelligence lifecycle, threat actor profiling, and technical analysis techniques necessary to proactively defend digital assets. Through a mix of theoretical exploration and guided practical exercises, learners will improve their capability to detect, track, and mitigate advanced persistent threats. The program prepares cybersecurity professionals to build resilient defense postures, resulting in a significantly reduced organizational risk profile.

Course Objectives

  • Analyze the components of the intelligence lifecycle and its integration into security operations.
  • Evaluate various threat intelligence sources and their applicability to specific organizational environments.
  • Develop comprehensive threat actor profiles based on observed tactics, techniques, and procedures.
  • Apply the Diamond Model of Intrusion Analysis to investigate sophisticated cyber incidents.
  • Formulate actionable intelligence reports for technical and executive stakeholders.
  • Implement threat hunting strategies to uncover hidden adversaries within the network.
  • Assess the impact of emerging threat trends on long-term risk management strategies.

Who Should Attend?

This course is designed for security operations center (SOC) analysts, incident responders, security architects, and IT security managers who are responsible for identifying, analyzing, and mitigating cyber threats within an organization.

Course Agenda

Day 1 – Foundations of Threat Intelligence

  • Understanding the Cyber Threat Intelligence (CTI) lifecycle.
  • Categorizing strategic, tactical, and operational intelligence.
  • Exploring open-source and proprietary intelligence collection methods.
  • Analyzing threat actor motives and sophisticated attack patterns.
  • Establishing trust levels and validation for intelligence data.
  • Hands-on: Evaluating various OSINT tools for intelligence gathering.

Day 2 – Analytical Models and Threat Profiling

  • Deep dive into the Diamond Model of Intrusion Analysis.
  • Mapping adversary activities to the MITRE ATT&CK framework.
  • Utilizing structured analytical techniques to avoid cognitive biases.
  • Conducting technical analysis of indicators of compromise (IoCs).
  • Identifying infrastructure and patterns of common persistent threats.
  • Hands-on: Building an adversary profile for a specific campaign using the Diamond Model.

Day 3 – Application, Reporting, and Strategy

  • Transitioning from intelligence gathering to threat hunting.
  • Crafting intelligence reports for different organizational audiences.
  • Developing automated alerting workflows based on intelligence.
  • Reviewing Q&A and addressing common implementation challenges.
  • Creating an action plan for intelligence program maturation.
  • Hands-on: Drafting an intelligence briefing memo and peer feedback session.

Assessment Methodology

All courses conducted by EdTech will begin with a Pre-evaluation and end with a Post-evaluation. The instructor will evaluate the knowledge and skills of the participants according to the feedback given by participants. This will help to recognize the benefits and the level of knowledge gained by participants through the course.

Training Methodology

Facilitated by a highly qualified specialist, who has extensive knowledge and experience; this program will be conducted using extensively interactive methods, encouraging participants to share their own experiences and apply the program material to real-life work situations in order to stimulate group discussions and improve the efficiency of the subject coverage.

Percentages of the total course hour classification are:

  • ​40% Theoretical lectures, Concepts and approach
  • 20% Motivation to develop individual skill and Techniques
  • 20% Case Studies and Practical Exercises
  • 20% Topic General Discussions and interaction

Course Manual

Participants will be provided with comprehensive presentation material as reference manual. This presentation material is a compilation of core valuable information, references, presentation methods and inspiring reading which will be used as a part of the material guide.

Course Certificate

At the completion of the course, all participants who successfully accomplished the required contact hours will receive an EdTech Training Participation Certificate as a testimony to their commitment to professional development and further education.

Why EdTech?

  • Industry Experienced; Internationally Qualified Trainers
  • Hands-on Practical Sessions & Assignments
  • Intensive Study materials
  • Flexible Schedules
  • Realistic training methodology
  • High-Quality Training in Affordable Course Fees
  • Achievement Certificate, as approved by the Ministry of Education (Abu Dhabi Center for Technical and Vocational Education Training - ACTVET), HABC, AWS, IAOSHE, SHRM, etc.