OpenSec Atlas

Threat-Intelligence-Tradecraft: An Open Source Educational Resource for Threat Intelligence | OpenSec Atlas

Threat Intelligence

Educational Resource

Threat-Intelligence-Tradecraft

An open-source, free curriculum designed to teach comprehensive threat intelligence tradecraft through structured exercises and practical guides.

View on GitHub

Primary Use Case

This educational resource is intended for cybersecurity professionals, threat analysts, and students seeking to learn and apply threat intelligence methodologies. It provides step-by-step exercises and curated content to build skills in threat hunting, intrusion analysis, and OSINT collection using free or open-source tools.

Key Features

Modular curriculum covering cyber threat intelligence, intrusion analysis, collection sources, and advanced analysis
Step-by-step exercises and practical guides modeled after commercial courses
Focus on free and open-source tools for hands-on learning
Planned development of Vagrant/VM environments for exercises
Integration of structured analytical techniques and strategic threat modeling
Resources and references to complementary threat intelligence projects
Long-term goals include MOOC delivery and printable digital guides

Insights & Recommendations

This project is a work in progress with no fixed completion date; users should expect evolving content. It emphasizes using free or open-source tools but does not currently provide executable software or CLI commands. Contributions and collaboration are encouraged via the provided contact email.

Installation

Clone the repository via git: git clone https://github.com/WeaveryHeavy/Threat-Intelligence-Tradecraft.git
Navigate into the cloned directory to access curriculum materials
Use provided markdown exercises and guides directly; no software installation required
For future planned modules, setup of Vagrant or VM environments may be required (not yet available)

Smart Usage Notes

Leverage the modular curriculum to tailor training for specific team skill levels, enhancing threat intelligence maturity.Integrate the curriculum with existing SIEM and SOAR platforms to improve analyst response capabilities through hands-on exercises.Use the planned Vagrant/VM environments to simulate real-world attack scenarios for purple team exercises.Combine OSINT tools taught in the curriculum with automated threat feeds to enrich incident response workflows.Develop internal threat intelligence playbooks based on structured analytical techniques provided in the resource.