Cyber Intelligence Tradecraft Certification Training - Amsterdam 1/14/2019 - 1/18/2019

Amsterdam, NL
January 14 - 18, 2019
7:45 AM

Courtyard by Marriott
Bosweg 15 2131 LX
Hoofddor, Netherlands

Open Map in new window

Already Registered?

Enter your Last Name and Confirmation ID to review your record.

Last Name or Email

Registration Information - Treadstone 71 Cyber Intelligence Tradecraft Certification
Amsterdam, NL 

Course syllabus and content proprietary to Treadstone 71
HOTEL REGISTRATION - 109Euro / night

Cyber Intelligence Tradecraft Certification
Cyber CounterIntelligence Tradecraft Certification
Cyber Intelligence Analyst Certificationl.  


Latest student testimonial: 
"With my extensive experience working in the Department of Defense on active duty and federal contractor, this training provided industry professionals with a greater perspective for intelligence analysis. The training taught state of the art concepts and applied them to real world scenarios establishing a solid understanding on utilizing these intelligence tradecrafts to effectively predict and prevent cyber actors from exploiting their organizations. Individuals new to the cyber intelligence field or professionals who want to fine tune their skills in the intelligence field should strongly consider this training for any intelligence analyst or security professional."

3800.00 EURO required by 12/31/2018, before course start. Use Coupon Code 'EarlyDiscount' to get the 3500.00 EURO price (by 12/15/2018). 
LOCATION TBD (Outside Amsterdam towards Schipol)

Program Outline 
CYBINT1 – Anonymity and Passive Persona setup, Collection Methods and Techniques, Collection Planning, PIRs, Collection Tools and Targeting, Alignment with Hunt and Detect Needs, Ties to CSIRT, TTPs, IoCs, Threat Intelligence, Open Source Intelligence, All-Source Intelligence, Standard Glossary and Taxonomy – 1 Days (Case Study 1)
CYBINT2 – Organization, Production, and Structured Analytic Techniques, Adversary Denial and Deception, Use of Techniques, Types of evidence, Production Management, Critical Thinking, Metrics, Intake forms, and templates – 1 Day (Case Study 2)
CYBINT3 – Types and Methods of Analysis, Decomposition, Recomposition, Methods for Fusion, Case Studies in Analysis, Cognitive Bias, Credibility and Reliability of Sources, Confidence Levels, Analysis of Competing Hypothesis, Evidence Diagnosticity, Scenario Analysis, Flow into Hunt, Detect, CSIRT, TTPs, IoCs, Inductive/Abductive/Deductive Reasoning, Historic trending and campaign analysis, Intelligence for organizational resilience  – 1 Day (Case Study 3)
CYBINT4 – Case Study 4, Identifying Your Consumers, Stakeholder Identification, and Analysis, Standing Orders from Leadership, Overview of Argument Mapping, Analytic Writing, BLUF, AIMS, Types of Reports, Product Line Mapping / Report Serialization, and Dissemination, Case Study Presentations 2 Days
Lecture, Hands-on, Apprenticeship, in class exercises, student presentations, analytic products, templates, course material—40 CPEs

All Case Studies use all methods, techniques, and tools referenced in the course material. The Case Studies used are straight from the headlines giving students real world experience during the class.

The course runs over five consecutive days covering Monday through Thursday 7:45-5PM. Friday 7:45-3PM.  Students are expected to attend each hour of each day since the course is comprehensive with each day building upon the next. Days start at 7:45AM AM and run to 5PM. Breakfast, lunch, and afternoon snacks/tea are provided. Lunches are usually working lunches. Class minimum is 15 with a maximum of 25. 
Students who complete the course will be certified as Cyber Intelligence Tradecraft Professional. 40 CPEs awarded for the course. This course is highly specialized following intelligence community tradecraft. You won’t get this at SANS. You won't get this anywhere but from Treadstone 71. If you want purely technical, then this is not the course for you. If you want tradecraft that lays the foundation for a solid program, education that creates a lasting impact, then this is the course for you.

Course books and manuals will be provided to students upon accepted enrollment. This course follows traditional intelligence community tradecraft. 

Send an email to from a corporate account to validate course eligibility before registration. (Corporate accounts are not Gmail, Hotmail, Yahoo and the like).

All Case Studies use all methods, techniques, and tools referenced in the course material. The Case Studies used are straight from the headlines giving students real-world experience during the class.

This course follows the International Association for Intelligence Education Standards for Intelligence Analyst Initial Training.
I. Introduction to Intelligence
II. Critical Thinking
III. Analytic Writing
IV. Creative Thinking
V. Analytic Briefing
VI. Structured Analytic Techniques.
VII. Analytic Issues
VIII. Argument Mapping
IX. Case Studies
This course combines lecture, research, and hands-on team assignments. Students need to bring a laptop (PC or MAC) that does not have corporate controls (tablets will not suffice). PC works best.

How is this course different from the current Treadstone 71 Cyber Intelligence course?

This course provides definitive sections along the intelligence lifecycle that are in-depth. Students are required to demonstrate understanding and use of collection methods using defined targets and target case studies, understanding and applying analytic techniques, when and how to use analytic techniques and analytic types. Students are presented case studies for analysis, required to use tradecraft methods, and provide written reports in standard analytic format. Students are also required to orally present their deliverables to the class. You will leave this course with the tools, methods, and understanding necessary to enhance your intelligence program. Treadstone 71 helps you focus on analytical tradecraft. The course provides the principles and tools used by analysts to instill rigor in thinking and prevent cognitive biases from skewing analytic judgments. Through the use of structured analytic techniques, analysts make their argumentation and logic more transparent and subject to further investigation.

"Fantastic class that gets to the foundational aspects of traditional tradecraft. We studied hard examining recent attack campaigns. The analysis training prepared me for real-world efforts. Have to say this is one of the best classes I have ever taken many from SANS.  SANS does not compare. They are more of a class mill today.  The Treadstone 71 course material is unique, focused, and timely."
I attended this week-long class (along with several other #### folks and a mix of cyber-professionals from industry) that focuses on everything from open source Intel gathering to Intel reporting to hacking.  While it is really targeted towards Intel specialists, those of us who aren't steeped in the business was able to keep up.   We now have a much better understanding of the intel cycle (both for government and industry), the ways that one can remain unattributed on the net, the myriad of tools for gathering open source information, and how to grade the validity and relevance of information.

A few points for those that may consider this class: 

1. It assumes a good knowledge of how all the internet search engines work and shows you how to use more capable versions of Firefox, Chrome, etc. 
2.  You will get a ton of information (at both the entry-level and above) on how to plan, collect, analyze, organize, and deliver Intel. 
3.  Treadstone 71 provides you with a ton of resources (some of them loaded up on a nifty Amazon Fire tablet that you get to keep) that you can take with you if this is going to be your business.  This includes tools to recognize and combat cognitive bias.
4.  Intel is hard and open source is even harder--there are not many black/white answers.  The three case studies were good in that they showed all the layers of information a good analyst can peel back.
5.  We also got experience with the time crunch associated with flash reporting.
As a non-intel type, I thought the class was very useful since it helps me understand the customer better.  I would certainly recommend it to people working in this arena and for anyone who wants to stretch their mind a bit.

Course material is not for resale or commercial use outside the end user license agreement. Course material may not be used for competitive purposes. 
This event closed for registrations on 1/18/2019
Event Details

Laptops without corporate controls required.  Personal laptops allowed.  Administrative access required.  Pre-requisites - Strong understanding of the Internet and web browsers. MAC or PC is fine but PCs preferred. Tablets will not work.

All students need to take the below Myers-Briggs personality test prior to the class.  This may be performed here:

Target audience:  CISOs, SOC Managers, Cyber / Information Security VPs, Directors, Analysts, Intelligence analysts, law enforcement, Intelligence Community, and those wishing to learn proper methods of analysis.

No refunds allowed after 12/15/2018. Refunds are minus processing fees. Please read the course end user license agreement:

Course EULA


online registration system provided by: PlanetReg
2019 Hemko Systems Corp. All rights reserved. Unauthorized use prohibited.
Terms of Service | Privacy Policy | Security