← threat hunter
Take Quiz →
CTI-Driven Hunting & Hypothesis Engineering
advanced 5h
Transform CTI reports into testable hunt hypotheses, extract TTPs from threat intelligence, map confidence levels to ATT&CK, and produce calibrated hunt assessments.
Lessons
1 The Hypothesis as Unit of Work — What Makes a Hunt Hypothesis Testable
25 min 2 Reading CTI Reports for Hunts — TTP Extraction and ATT&CK Mapping
30 min 3 Hypothesis Failure Modes — Why Hunts Miss and How to Fix Them
25 min 4 The PEAK Act Phase — Turning Every Finding into Lasting Value
25 min 5 Calibrated Assessment — Confidence Language, Hunt Journals, and Closing Hunts
25 min Module Quiz
Test your knowledge before moving on.