Where to Learn CTI
Sorted roughly from free/beginner-friendly to paid/advanced. The free ones at the top are genuinely excellent — don't skip them just because they're free.
Fantastic CTI and cybersecurity resources across TikTok, YouTube, and a blog. Jennifer Funk just keeps growing this resource and it shows.
I found Jennifer through TikTok and she is genuinely creating some of the best accessible CTI education out there.
A one-stop shop for threat intelligence fundamentals. Their Research Guide teaches you how to collect and curate intelligence, and their Actor Profile Guide provides a blueprint for creating your own threat actor profiles.
Repository of OSINT for several macOS-focused malware families, maintained by Stuart Ashenbrenner at Huntress Labs.
Not a structured course, but an invaluable resource. The ATT&CK framework is your best friend. Spend time here and make some flashcards.
Career-building cybersecurity training for individuals from under-resourced communities. Highly competitive aptitude-based scholarship program. Includes GIAC certifications.
Career and skill paths including an Intro to CTI course. Their free tier includes SOC analyst training and some skill paths. CTI content requires subscription.
Security+ quiz and modules covering general cybersecurity, packet sniffing, and other topics. Great for studying fundamentals.
Broad course library including CTI and cert prep. Recommend only courses with 1000+ reviews. Sign up and express interest — they will send you discount codes.
I haven't personally taken CTI courses on Udemy so proceed with some caution, but the cert prep courses are solid.
Their Volt Typhoon and Sandworm course is a good deep dive into actor profiling and methodologies for more advanced audiences.
The premiere cybersecurity learning standard. Free resources including their blog, all the way up to ~$10,000 for an on-demand CTI course with cert attempt included.
The Mandiant name carries serious weight. Their Threat Intelligence Production course is phenomenal. If you can get access, do it.
Google bought Mandiant for a reason and that reason was not because they suck. Their training is elite.
Ready to get certified? Check out the Certifications page for what's worth your time and money.
View Certifications →