Introduction

In this manual, we'll dive into the world of Cyber Threat Intelligence (CTI) and explore how it can help you stay one step ahead of cyber threats. Whether you're a seasoned infosec pro or just getting started, this guide will walk you through the essential concepts, techniques, and tools you need to know.

This manual started as a collection of my notes from conducting CTI professionally. More recently, I've been attempting to convert it into a more complete reference on the basics of CTI. Additionally, I plan to add more resources and case studies to help operationalize CTI. Most of these resources will likely stem from challenges I've faced while trying to implement CTI for organizations.

Certain chapters might feel a bit disorganized because they started from a variety of different formats such as: a personal note, blog post, company wiki reference, plain text saved to my desktop, etc. I plan to refine these to make this guide feel more cohesive.

Let's dive in!

Last updated