Cyber Threat Intelligence: A Hands-On Guide to Threat Modeling, Intelligence Gathering, Forensics, and Operational Security Workflows (Rheinwerk Computing)

A strong cybersecurity program needs to stay informed. With this all-in-one guide, master both the theory and practice of cyber threat intelligence (CTI). Walk through the intelligence lifecycle, and then get up to speed on the latest tools and technologies for intelligence gathering, adversary profiling, network and host-based forensics, threat hunting, and more. Follow practical examples that showcase key CTI strategies in modern security operations. Understand the cyber intelligence lifecycle and get to know your sources, from OSINT to SIGINT Develop threat models and conduct forensic analysis of network data and host systems to detect malicious behavior Integrate CTI into incident response, explore threat hunting, and see how automation can improve your CTI workflows Frameworks and Fundamentals See what cyber threat intelligence is and how it works in the real world. Understand the full intelligence lifecycle, from planning to feedback, and the different sources of intelligence, from OSINT to SIGINT. Threat Modeling, Analysis, and Response Learn about CTI tools and techniques. Apply the MITRE ATT&CK framework to model threats, turn network and host data into actionable intelligence, interpret threat detection outputs, assess your automation options including tools like MISP, and more. Best Practices and Case Studies Explore real-world workflows and practical examples. See how intelligence supports incident response, threat hunting, and automation, and learn proven methods for handling feed quality, enrichment, and operational integration.