Cyber Intelligence Tradecraft Training | Hosted by FS-ISAC | April 3-7, 2017
The Cyber Intelligence Tradecraft Training course is open to FS-ISAC members and members of the ISAC/ISAOs supported by FS-ISAC. The cost of this program is $3,000 per attendee. This is a slight increase from our previous offerings as we are adding a 5th day with additional content which is listed below. We are also opening the training up to non-members at a cost at $4,000 per person. Please note that this training program is hosted by FS-ISAC and conducted by Jeff Bardin, Treadstone 71 and each registration is subject to approval.
The training will start at 8:00am on Day One and finish approximately at 4:00pm on Day Five.
Course Introduction - Basics of Intelligence, Collection Methods and Techniques, Collection Planning, PIRs, Prioritization, Requirements Management, Mission Management, Collection Process Flow, Collection Tools and Targeting, Alignment with Hunt and Detect Needs, Ties to CSIRT, TTPs, IoCs, Threat Intelligence, Open Source Intelligence, All-Source Intelligence, OSINT Research Methods and Tools - Case Study 1
Organization, Production, and Structured Analytic Techniques, Use of Techniques, Production Management, Critical Thinking (checklist for thinking, elements, standards and traits), Process Flow, Metrics, Intake forms and templates. (Techniques include Outside-In Thinking, Key Assumptions and Key Assumptions Check, Red Hat Analysis, Team A/Team B Analysis, Devils’ Advocacy, Denial and Deception, Structured Brainstorming, ACH, Multiple Scenarios Generation, Social Networking Analysis, Quadrant Crunching, What If/ High Impact/Low Probability, Alternative Futures Analysis, Chronologies and Timelines, Indicators, Quality of Information, non-inclusively) Case Study 2
Types and Methods of Analysis (14), Decomposition, Recomposition, Methods for Fusion, Case Studies in Analysis, Cognitive Bias, Credibility and Reliability of Sources, Source Information Ratings, Confidence Levels, Analysis of Competing Hypothesis, SOPs, Flow into Hunt, Detect, CSIRT, TTPs, IoCs, Inductive/Abductive/Deductive Reasoning - Case Study 3
Inductive, Deductive, Abductive Reasoning, Argument Mapping, Identifying Your Consumers, Stakeholder Identification, and Analysis, Know your customer, Getting Started, Stakeholder Breakdown, Standing Orders from Leadership, Analytic Writing, Principles of Analytic Writing, BLUF, AIMS, Writing Rubric, Types of Reports, Flash Reporting, Briefing Rules, Product Line Mapping / Report Serialization, and Dissemination - Case Study Continuation
Cyber and Threat Intelligence Program Strategic Plan (Vision, Mission, Guiding Principles, Goals, Objectives, Timeline, Case Study Presentations
NOTE: This class includes a minimum of 3 Cast Studies). – Case Study 4
FS-ISAC will be hosting a week long Intelligence Training Program at the FS-ISAC's NEW state of the art classroom at the corporate headquarters in Reston, VA. The event will be held Monday-Friday and will include breakfast, lunch and snack as well as the training program. Attendees must bring a laptop (no iPads) and will be given a Amazon fire tablet for course materials. Laptop can be Apple or Windows, but it must have the ability to run MS Word, Excel, and Power Point. Linux environments are also acceptable as long as they can run/open files from the applications listed above.NOTE: Registration is limited to the first 25 participants.
The training program will be held at the FS-ISAC Suite 230 12020 Sunrise Valley Drive in Reston, VA. Nearby hotels include:
Westin, Reston Heights
11750 Sunrise Valley Drive
Reston, VA 20191
Class room requirements
Attendees must bring laptops where they can install anything they wish (Admin rights) and laptops without normal corporate security controls
Mac and Microsoft okay (tablets not ok)
- No corporate controls (no content control or filters - AV and Firewalls are ok)
- CD/DVD not required
- Admin / Local Root access (must be able to install software)
- Windows / Apple ok
- No tablets
- 4GB RAM/DRAM (laptop with 1.5 GB should be fine)
Breakfast, Lunch and Snacks are included and will be provided daily
Technical Level Expected of Attendees:
* Ability to install software on laptops
* Knowledge of social media
* Knowledge of web browsers and search engines
Monday, April 3, 2017 - Friday, April 7, 2017 8:00 AM - 5:00 PMEastern Time
FS-ISAC12020 Sunrise Valley DriveSuite 230Reston, Virginia 20191571-252-8517
Cvent Online Event Registration Software | Copyright © 2000-2017 Cvent, Inc. All rights reserved.