Cyber Threat Intelligence

In this book, you’ll learn about:

1. Frameworks and Fundamentals

   See what cyber threat intelligence is and how it works in the real world. Understand the full intelligence lifecycle, from planning to feedback, and the different sources of intelligence, from OSINT to SIGINT.

2. Threat Modeling, Analysis, and Response

   Learn about CTI tools and techniques. Apply the MITRE ATT&CK framework to model threats, turn network and host data into actionable intelligence, interpret threat detection outputs, assess your automation options including tools like MISP, and more.

3. Best Practices and Case Studies

   Explore real-world workflows and practical examples. See how intelligence supports incident response, threat hunting, and automation, and learn proven methods for handling feed quality, enrichment, and operational integration.