Advanced Intel enrichment Mastery
RCCE students will learn threat intelligence lifecycle, indicator analysis, adversary profiling, intelligence sharing frameworks, and strategic threat reporting. RCCE students will learn to transform raw threat data into actionable intelligence, profile adversary campaigns and infrastructure, prioritize threats based on organizational risk, produce intelligence products for diverse audiences, and accelerate organizational detection and response capabilities. This advanced mastery course challenges experienced practitioners with complex scenarios, expert-level techniques, and nuanced decision-making. At an expert level, RCCE students will learn to handle the most demanding situations in this domain, developing the expertise expected of senior security professionals. Students tackle multi-layered problems that require synthesizing knowledge across multiple disciplines.
- Security Engineers building defensive controls
- Security Analysts and Blue Team members
- Systems Administrators with security responsibilities
- GRC and Risk Professionals supporting controls
- Professionals implementing Advanced Intel enrichment Mastery
- Execute hands-on tasks for advanced intel
- Execute hands-on tasks for enrichment mastery
- Explain Threat Intelligence Landscape Overview fundamentals
- Execute hands-on tasks for raw data
- Execute hands-on tasks for strategic intelligence — covering Informs executive risk decisions.
- Execute hands-on tasks for operational intelligence — covering Campaign-level adversary tracking.
- Execute hands-on tasks for tactical intelligence — covering IOC feeds for detection engineering.
- Execute hands-on tasks for technical intelligence — covering Exploit analysis and CVE enrichment.
- Execute hands-on tasks for intelligence lifecycle: six-phase framework
- Execute hands-on tasks for phase 1: direction
- Execute hands-on tasks for phase 2: collection — covering intelligence requirements (PIRs), OSINT, HUMINT, SIGINT, technical feeds.
- Execute hands-on tasks for phase 4: analysis — covering Normalization and deduplication.
| Module 01 | Advanced Intel |
| Module 02 | Enrichment Mastery |
| Module 03 | Threat Intelligence Landscape Overview |
| Module 04 | Raw Data |
| Module 05 | Strategic Intelligence |
| Module 06 | Operational Intelligence |
| Module 07 | Tactical Intelligence |
| Module 08 | Technical Intelligence |
| Module 09 | Intelligence Lifecycle: Six-Phase Framework |
| Module 10 | Phase 1: Direction |
| Module 11 | Phase 2: Collection |
| Module 12 | Phase 4: Analysis |
| Module 13 | Phase 6: Feedback |
| Module 14 | Good vs Bad PIRs |
All hands-on labs run on Rocheston Rose X OS. Students practice advanced intel enrichment mastery by implementing the controls discussed in class, with a focus on real-world deployment, monitoring, and validation.
- Lab 1: Execute hands-on tasks for advanced intel
- Lab 2: Execute hands-on tasks for enrichment mastery
- Lab 3: Explain Threat Intelligence Landscape Overview fundamentals
- Lab 4: Execute hands-on tasks for raw data
- Lab 5: Execute hands-on tasks for strategic intelligence
Upon successful completion of this course, students will receive an official RCCE Course Completion Certificate for Advanced Intel enrichment Mastery, verifiable through the Rocheston certification portal.
- Full access to all course materials and slide decks
- Hands-on lab access on Rocheston Rose X OS environment
- Access to Rocheston CyberNotes
- Access to Rocheston Zelfire — EDR/XDR SIEM platform
- Access to Rocheston Raven — online cyber range exercise platform
- Access to Rocheston Vulnerability Vines AI