Back to all walkthroughs
CTI for Alert Triage
Explore how security analysts can use CTI in their daily operations.
easy
To access material, start machines and answer questions login.
This room explores the differences between simple reputation lookups and Cyber Threat Intelligence (). You will follow an investigation scenario and see how CTI can simplify alert triage and serve a larger goal for mature security teams. You will also identify pitfalls when using CTI and learn how to weigh conflicting intel sources.
Learning Objectives
- Learn when to use CTI and how it can help different security roles
- Discover the workflow when working with conflicting intelligence
- Write a concise intel handoff note to support future investigations
Prerequisites
- Threat Analysis Tools module ( L1 path)
- Fundamental defensive security knowledge
Answer the questions below
Let's get started!
Ready to learn Cyber Security?
The CTI for Alert Triage room is only available for Premium or Max subscribers. Signup now to access more than 500 free rooms and learn cyber security through a fun, interactive learning environment.
Already have an account? Log in