Learn to collect, evaluate, analyze and communicate cyber threat intelligence and open-source evidence for defensible decisions.
Self-paced reading, explanatory diagrams and evidence-led learning. Build a foundation, then explore a specialist topic.
Read the lessons freely. Create an account to save completed lessons and resume learning. Reading estimates include an allowance for diagrams; reflection, exercises and optional resources take additional time.
You do not need to know the right security terminology. Pick a route and we will narrow the catalogue.
Build a practical foundation in security, intelligence, networks and safer digital decision-making with courses designed for new learners.
10 courses Investigate and explain Turn evidence into threat intelligenceLearn to collect, evaluate, analyze and communicate cyber threat intelligence and open-source evidence for defensible decisions.
8 courses Detect and respond Build sharper security operationsPractice alert triage, detection engineering, network and endpoint analysis, incident response and evidence-led handoffs.
21 courses Design for trust Secure the systems modern teams depend onConnect cloud architecture, identity controls and software supply-chain assurance to the operational decisions that keep services trustworthy.
3 courses Protect people Make safer decisions under pressureRecognize manipulation, interrupt social-engineering scripts and build security habits that work in realistic, high-pressure moments.
4 coursesLearning focus Explain how data, information, intelligence, and decisions differ in a defensive security workflow.
Best for Learners beginning intelligence-led security work.
Explore course : Cyber Intelligence FoundationsLearning focus Explain how cyber threat intelligence differs from raw data, information, security reporting, and unsupported opinion.
Best for Learners ready to develop a structured cyber threat intelligence method.
Explore course : Cyber Threat Intelligence Foundations: From Evidence to DecisionLearning focus Explain the CVE ecosystem, including identifiers, records, disclosure processes, and the roles of organizations involved in vulnerability tracking.
Best for Security analysts and vulnerability-management learners evaluating vulnerability information.
Explore course : CVE Intelligence: Vulnerability Lifecycle, Analysis, and Defensive DecisionsLearning focus Distinguish a threat feed from finished intelligence and explain the value and limits of common feed data.
Best for Learners and analysts deciding how threat feeds can support security work.
Explore course : Cyber Threat Intelligence FeedsLearning focus Explain the purpose, scope, and limitations of OSINT and distinguish publicly available information from intelligence produced through analysis.
Best for Learners and analysts investigating publicly available information responsibly.
Explore course : Open Source Intelligence (OSINT) Foundations: From Public Data to Defensible IntelligenceLearning focus Translate an operational security decision into scoped intelligence requirements, priority information needs, collection tasks, and explicit review triggers.
Best for Practitioners familiar with CTI foundations who support investigations and security operations.
Explore course : Operational Cyber Threat Intelligence: Investigations, Campaigns, and Defensive ActionLearning focus Explain the complete traffic path from acquisition through TDS classification to decoy, scam, phishing, malware, or monetization outcomes.
Best for Threat analysts studying traffic-routing infrastructure and dated campaign evidence.
Explore course : Traffic Distribution Systems in the Cybercrime EcosystemLearning focus Translate executive and board decisions into prioritized strategic intelligence requirements with explicit scope, horizon, assumptions, and success criteria.
Best for CTI practitioners and security leaders supporting longer-term organizational decisions.
Explore course : Strategic Cyber Threat Intelligence: Risk, Scenarios, and Executive Decisions