Skip to main content

Preview build: sign-in and grading run on the server. MFA is not enabled, and storage is in server memory so it does not survive a restart.

LearnDefend
Create account

This course is coming soon. It is not yet open for enrollment, and no payment is taken.

The outline and outcomes below reflect what this course will cover. Check back soon.

Coming soonIntermediate

Threat Intelligence & the Diamond Model

Turn raw indicators into intelligence that guides defence.

By LearnDefend Security Team · Threat Intelligence

About this course

Learn to produce intelligence, not just collect feeds: structure findings with the Diamond Model and ATT&CK, assess source reliability, and write intelligence that actually changes what the SOC does next.

What you'll learn

  • Structure an intrusion with the Diamond Model.
  • Assess source reliability and confidence.
  • Write intelligence that drives a defensive action.

Course outline

  1. 1Data, information, intelligence
  2. 2The Diamond Model and ATT&CK
  3. 3Reliability and confidence
  4. 4Writing for the SOC

Prerequisites

  • SOC or hunting experience helps but is not required.
Threat Intelligence & the Diamond Model | LearnDefend