CTI methodology
-
Analysis of Competing Hypotheses: How CTI Analysts Make Better Intelligence Judgments
A practical guide for CTI analysts on Analysis of Competing Hypotheses (ACH). Learn to structure evidence, evaluate multiple explanations, avoid confirmation bias, and produce defensible intelligence assessments. Written by Reza Rafati.
-
The Cyber Kill Chain: How CTI Analysts Map Attacks and Break the Adversary’s Sequence
A practical guide for CTI analysts on using the Cyber Kill Chain to map intrusions. Learn the seven stages, where to detect adversaries at each stage, and how to combine Kill Chain analysis with the Diamond Model. Written by Reza Rafati.
-
The Diamond Model of Intrusion Analysis: A CTI Analyst’s Guide to Structured Threat Analysis
A practical guide for CTI analysts on using the Diamond Model to analyse intrusions. Learn to map every event across Adversary, Capability, Infrastructure, and Victim dimensions, identify intelligence gaps, and pivot between events. Written by Reza Rafati.