Cyber Threat Intelligence for Security Analysts

位教师： Monica McIntire 另外 1 个

包含在 Coursera Plus • 了解更多 中

推荐体验

您将学到什么

Differentiate between data, intelligence, threats, and threat impacts, and identify reliable sources for cyber threat intelligence data collection

Apply cyber threat intelligence collection methods to analyze threat infrastructure and correlate malware data for validation

Evaluate threat intelligence across multiple sources and conduct risk assessments to identify and prioritize threats to enterprise infrastructure

Develop strategic cyber threat intelligence reports for different audiences, clearly communicating findings using data storytelling

您将获得的技能

Analysis

Incident Response

Technical Communication

Communication

Oral Expression

Cyber Security Strategy

Cyber Threat Intelligence

Verbal Communication Skills

Research Reports

Data Storytelling

Stakeholder Communications

Threat Modeling

Intelligence Collection and Analysis

Infrastructure Security

Report Writing

Threat Management

Threat Detection

Cybersecurity

Risk Analysis

显示全部

您将学习的工具

MITRE ATT&CK Framework

要了解的详细信息

添加到您的领英档案

4 任务¹

了解顶级公司的员工如何掌握热门技能

该课程共有6个模块

In this strategic cyber threat intelligence course, you will dive into the core aspects of threat intelligence, learning to identify and analyze a wide range of cyber threats such as ransomware, identity theft, and business email compromise.

The course is designed for intermediate learners and covers intelligence collection methodologies like OSINT, HUMINT, and SIGINT, helping you gain expertise in understanding the tactics, techniques, and procedures (TTPs) of adversaries.

You will explore threat actor landscapes and gain insights into advanced persistent threat (APT) campaigns, using frameworks like MITRE ATT&CK and applying NIST 800-53 security controls to protect both business assets and personal data.

Along with technical analysis, you will develop key communication skills to present your findings effectively to both technical teams and non-technical stakeholders, including executives and decision-makers.

This cyber threat intelligence research and reporting course emphasizes report-writing and oral presentations, teaching you to communicate complex intelligence clearly and persuasively.

You will leave with the skills to transform threat data into actionable cyber threat intelligence, enabling you to make informed decisions and drive security initiatives that protect organizations from evolving cyber risks.

This course is ideal for IT and cybersecurity professionals looking to elevate their skills in threat detection, incident response, and security architecture.

It also caters to Chief Information Security Officers (CISOs) and security leaders aiming to update their threat intelligence strategy for managing evolving threats.

Business executives, including CEOs and other senior leaders, will benefit from understanding cyber security intelligence risks and compliance, while cybersecurity analysts seeking advanced investigative and analytical techniques will find this cyber threat intelligence certification course essential for career growth.

To get the most out of this cyber threat intelligence course, participants should have a beginner-level understanding of IT or cybersecurity, along with familiarity in basic networking and security concepts.

While certifications like A+, Network+, or Security+ are helpful, they are not mandatory for enrollment.The course is designed to build on foundational knowledge, making it accessible to those with some prior experience in the field.

By the end of this course, learners will be able to differentiate between data, intelligence, and threats, and identify reliable sources for threat data collection.

They will also learn to apply intelligence collection methodologies to analyze and correlate threat data, evaluate threats across multiple sources, and conduct risk assessments.

Additionally, learners will be able to craft strategic cyber threat intelligence reports tailored to different audiences, effectively communicating complex findings through data storytelling techniques.

With this, they will further grasp how threat intelligence reports help prioritize cyber risk at the organizational level.

Course Introduction

In this course, you’ll learn how to identify, analyze, and respond to evolving cyber threats.You’ll focus on advanced threat intelligence techniques, including data collection, analysis of threat actors, and malware correlation, using frameworks like MITRE ATT&CK and NIST 800-53.

Through expert instruction, real-world case studies, and hands-on exercises, you’ll gain the skills to interpret intelligence from multiple sources, assess risks, and develop strategic reports.

By the end of this course, you’ll be equipped to protect your organization from cyber threats, effectively communicate findings, and lead proactive defense initiatives across your business.

涵盖的内容

1个视频 1篇阅读材料

Intro Video to Course • 4分钟

Welcome to the Course: Course Overview • 5分钟

Introduction to Threat Intelligence

In this module, you’ll learn how to embed security directly into your applications and development processes.You’ll explore Secure by Design principles, secure coding techniques, and secure configuration practices to prevent critical vulnerabilities.

Through practical demonstrations, static and dynamic application security testing, and runtime protection strategies, you’ll develop the skills to identify, mitigate, and manage vulnerabilities throughout the software development lifecycle.

This module emphasizes proactive security practices aligned with industry standards such as OWASP Top 10 and SANS Top 25 to ensure robust, production-ready applications.

涵盖的内容

10个视频 1篇阅读材料 1个作业 1次同伴评审 1个讨论话题

Module Introduction • 2分钟

Threat Actor Landscape • 4分钟

Threat Modeling Frameworks • 6分钟

Legal, Ethical, and Policy Considerations • 7分钟

Intelligence Collection Methodologies • 6分钟

Threat Infrastructure Analysis • 6分钟

Malware and Campaign Correlation • 6分钟

Data Enrichment and Validation • 7分钟

Analytical Methodologies • 6分钟

Attribution and Profiling • 6分钟

Threat Intelligence Tools: Types, Benefits, and Best Practices • 5分钟

Introduction to Threat Intelligence • 20分钟

Hands-On-Learning: Data Analysis and Validation • 10分钟

Automation vs. Analyst Judgment • 10分钟

Strategic Analysis, Attribution & Threat Modelling

In this module, you’ll learn how to analyze, attribute, and model cyber threats using structured, evidence-based intelligence techniques.

You’ll work with methods like ACH, red teaming, and scenario modeling to evaluate adversary behavior, identify analytical biases, and communicate confidence levels clearly.

You’ll also build strategic threat models using frameworks such as STRIDE, ATT&CK, and NIST 800-30, ensuring your assessments align with real organizational risk.

By focusing on rigorous analysis and defensible reasoning, this module prepares you to produce reliable intelligence that supports strong, strategic cybersecurity decisions.

涵盖的内容

10个视频 1篇阅读材料 1个作业 1次同伴评审 1个讨论话题

Module Introduction • 3分钟

Analysis of Competing Hypotheses (ACH) • 5分钟

Red Teaming • 5分钟

Scenario Modelling • 5分钟

Attribution Frameworks • 5分钟

Attribution Challenges • 5分钟

Attribution Case Study Examples • 6分钟

Intelligence Confidence Language • 5分钟

Threat Modelling for Enterprise Risk • 5分钟

Threat Model Design Using NIST 800-30 or STRIDE • 6分钟

Five Key Steps to Delivering Intelligence Reports that Your Board Actually Reads • 5分钟

Strategic Analysis, Attribution & Threat Modelling • 20分钟

Hands-On-Learning: Intelligence Confidence and Enterprise Risk Modelling • 10分钟

Intelligence Confidence Language • 10分钟

Threat Research, Correlation & Infrastructure Mapping

In this module, you’ll learn how to perform advanced threat research, correlate complex attack indicators, and map adversary infrastructure across multiple data sources.

You’ll explore collection planning, OSINT tradecraft, malware analysis workflows, and behavioral fingerprinting techniques to uncover patterns in threat activity.

Through hands-on tools, graph analytics, and real-world case studies, you’ll develop the skills to connect campaigns, identify threat actors, and build accurate intelligence assessments that strengthen attribution and support proactive defense.

涵盖的内容

9个视频 1篇阅读材料 1个作业 1次同伴评审 1个讨论话题

Module Introduction • 3分钟

Collection Planning & Source Prioritization • 6分钟

Malware, Tooling, and TTP Analysis • 5分钟

Campaign Correlation & Actor Attribution • 5分钟

Structured Analytic Techniques (SATs) • 5分钟

Threat Modelling for Strategic Context • 6分钟

Attribution with Intelligence Confidence • 8分钟

Threat Intelligence Tools & Enrichment • 5分钟

Graph Analytics DeepDive • 7分钟

DFIR Report Case Studies • 5分钟

Threat Research, Correlation & Infrastructure Mapping • 20分钟

Hands-On-Learning: Use VirusTotal, Any. Run, and Shodan for Malware and Infrastructure Research • 10分钟

Impact of Threat Intelligence Platforms in Real-World Threat Analysis • 10分钟

Reporting and Communication of Intelligence

In this module, you’ll learn how to turn complex technical threat intelligence into clear, actionable insights tailored for different audiences across an organization.

You’ll practice structuring reports, communicating uncertainty with confidence, and presenting intelligence in formats suited for executives, SOC teams, legal stakeholders, and board members.

Through hands-on exercises and real-world examples, you’ll develop the skills to write professional intelligence reports, use visual storytelling, and leverage modern reporting tools to support strategic decision-making and drive meaningful security actions.

涵盖的内容

10个视频 1篇阅读材料 1个作业 1次同伴评审 1个讨论话题

Module Introduction • 3分钟

Threat Intelligence for Decision-Makers • 5分钟

Tools for Strategic Intelligence Analysis • 5分钟

Intelligence Reporting Structures • 6分钟

Effective Communication Techniques • 5分钟

Stakeholder-Oriented Reporting • 5分钟

Report Examples • 6分钟

Intelligence Writing Principles & Best Practices • 5分钟

Communicating Uncertainty and Confidence • 6分钟

Automation and Collaboration Tools in Reporting • 6分钟

Framing Effects in Risk Communication Messages: Hazard Identification vs. Risk Assessment • 5分钟

Reporting and Communication of Intelligence • 30分钟

Hands-On-Learning: Threat Update Presentation • 10分钟

Adapting Intelligence for Diverse Stakeholders • 10分钟

Course Conclusion

In this final module, you’ll apply everything you’ve learned by analyzing a simulated threat actor campaign and turning raw intelligence into a clear, stakeholder-ready brief.

You’ll correlate indicators across multiple sources, assess risk and confidence levels, and use structured analysis and reporting techniques to deliver actionable insights that support real-world security decision-making.

涵盖的内容

1个视频 1次同伴评审

Course Wrap-Up • 3分钟

Project: Threat Actor Campaign Analysis & Intelligence Brief • 60分钟

位教师

提供方

人们为什么选择 Coursera 来帮助自己实现职业发展

Felipe M.

Jennifer J.

Larry W.

Chaitanya A.

是什么让您今天来到 Coursera？

开始我的职业生涯

改变我的职业生涯

在我目前的岗位上成长

拓展工作外领域

通过订阅解锁 10,000 多门课程的访问权限 开始试用

通过在线学位推动您的职业生涯 获取世界一流大学的学位 - 100% 在线 探索学位

加入全球超过 4,700 家选择 Coursera for Business 的公司 了解更多

常见问题

How does threat intelligence help reduce cyber risk?

Cyber threat intelligence reduces cyber risk by shifting security teams from reactive defense to proactive threat anticipation.

Specifically, it improves detection accuracy by enriching tools like SIEM and EDR with contextual threat data, strengthens incident response by providing pre-built adversary profiles and TTPs, and helps security leaders prioritize controls based on real, relevant threats.

Modules 3 and 4 of this course address how threat intelligence reports help prioritize cyber risk directly, covering risk assessment, attribution, and threat modeling using NIST 800-30 and STRIDE frameworks.

What is the difference between tactical and strategic threat intelligence?

Tactical cyber threat intelligence focuses on the specific TTPs adversaries use, mapped to frameworks like MITRE ATT&CK, and is most useful for SOC analysts and incident responders who need to detect and block attacks in real time.

Strategic cyber threat intelligence provides high-level insights about threat actor motivations, geopolitical risks, and long-term trends, designed for CISOs, executives, and board members making investment and policy decisions.

This course covers both in depth, with Module 3 focusing on strategic analysis and attribution, and Module 5 teaching you to translate the same intelligence into reports tailored for each audience, making this one of the most practical strategic cyber threat intelligence courses available.

What are the 4 types of cyber threat intelligence?

The four types are strategic, operational, tactical, and technical cyber threat intelligence.Strategic CTI delivers high-level risk insights for executives and board members.Operational CTI covers specific upcoming adversary campaigns.

Tactical CTI maps adversary TTPs to frameworks like MITRE ATT&CK.Technical CTI focuses on specific indicators of compromise (IOCs) like malicious IPs and file hashes.

This course covers the difference between tactical and strategic threat intelligence across Modules 2 and 3, and Module 5 teaches you to write reports calibrated for each audience, from SOC teams to board members.

How do you become a threat intelligence researcher?

The path to becoming a cyber threat intelligence analyst or researcher combines foundational cybersecurity knowledge with specialized skills in intelligence collection, adversary attribution, and strategic cyber threat intelligence reporting.

This course builds that skill set across six modules, covering OSINT, HUMINT, and SIGINT collection methodologies in Module 2, structured analytic techniques and attribution frameworks in Module 3, and advanced threat research using tools like VirusTotal, Any.run, and Shodan in Module 4.

Pairing this course with a cyber threat intelligence certification like GCTI or CTIA strengthens the career case further.

How do you write a cyber threat intelligence report?

A strong cyber threat intelligence report starts with your audience.A report for a SOC analyst looks very different from one for a CISO or board member.

Module 5 of this course, Reporting and Communication of Intelligence, is dedicated entirely to how to write a cyber threat intelligence report for different stakeholders, covering intelligence reporting structures, stakeholder-oriented reporting, visual storytelling, and communicating uncertainty with confidence.

The Module 6 capstone then puts this into practice with a full threat actor campaign analysis and intelligence brief.

When will I have access to the lectures and assignments?

To access course materials, assignments, and earn a Certificate, you'll need to purchase the Certificate experience when you enroll in a course.Eligible learners may also have the option to start with a Free Trial.Some courses may also offer a Full Course, No Certificate option.

This lets you access course materials, submit required assessments, and receive a final grade, but you won't be able to earn or purchase a Certificate.

What will I get if I purchase the Certificate?

When you purchase a Certificate you get access to all course materials, including graded assignments.Upon completing the course, your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile.

Is financial aid available?

Yes. In select learning programs, you can apply for financial aid or a scholarship if you can’t afford the enrollment fee. If fin aid or scholarship is available for your learning program selection, you’ll find a link to apply on the description page.

更多问题

提供助学金， 了解详情

¹ 本课程的部分作业采用 AI 评分。

对于这些作业，将根据 Coursera 隐私声明 使用您的数据。