Iranian Cognitive and Information Warfare — Section 1 Grey Zone Activities · IRGC Doctrine · Cyber Psyops · Primary APTs
Iranian cognitive and information warfare doctrine is the most regionally embedded of the three major adversary cog-war doctrines. Where Russian doctrine emphasizes reflexive control at strategic scale and Chinese doctrine builds long-cycle integrated influence ecosystems, Iranian doctrine concentrates on the regional theater — IRGC-driven hybrid warfare integrating cyber operations with kinetic influence activity, proxy network coordination, and grey-zone cognitive warfare across the Middle East and adjacent diasporas. The arsenal of dispute that Western analysts encounter from Iran is shaped by this regional doctrinal frame.
This Section 1 course covers grey zone activities, cognitive warfare actions, information warfare, cyber psyops, and primary APTs from the Iranian perspective. Builds the doctrinal foundation analysts need to read Iranian state cyber and influence activity accurately — and pairs with Section 2 (STEMPLES Plus measured cyber capability) for full Iranian-adversary capability assessment.
What You'll Learn
Iranian doctrinal foundation for cognitive and information warfare
- IRGC Influence Doctrine — the Islamic Revolutionary Guard Corps as the organizational center of gravity for Iranian cyber and influence operations; how IRGC-Quds Force coordinates regional hybrid warfare integrating cyber, proxy, and kinetic instruments.
- Grey Zone Activities — the deliberately ambiguous space below the threshold of armed conflict where Iranian state activity concentrates — particularly across the Middle East regional theater and through diaspora communities.
- Iranian Cyber Psyops Methodology — TTPs that Iranian operations leverage: narrative shaping calibrated to regional sectarian and political fault lines, persona networks, targeted disinformation, and integrated cyber-information operations.
- Primary Iranian APTs — historical catalog of major Iranian APT groups, their service affiliations (IRGC, MOIS), operational signatures, and how technical activity ties to broader doctrinal intent.
- Regional vs Global Operating Theater — how Iranian doctrine prioritizes the Middle East theater and how that prioritization differs from Russian and Chinese global posture; what that means for analytic priorities and target sets.
- Doctrinal Differentiation — how Iranian doctrine differs from Russian reflexive control, Chinese MSS / Three Warfares integration, and NATO cyber psyops doctrine. The differences matter operationally for attribution and characterization.
Course Content
Iranian Cognitive Warfare from the Iranian Perspective
Iranian cognitive and information warfare operates within a regionally-embedded doctrinal frame rooted in IRGC strategic culture, Iranian theological and political narrative, and the realities of operating as a comparatively resource-constrained but regionally dominant cyber actor. The doctrine integrates cyber operations with proxy networks across Lebanon, Iraq, Syria, Yemen, and Gaza; with diaspora-focused influence operations; with sectarian narrative management; and with calibrated cyber psyops targeting both regional adversaries (Israel, Saudi Arabia, UAE) and Western policy elites.
The course examines Iranian doctrine on its own terms — what Iranian theorists believe about cognitive warfare, how IRGC strategic culture shapes operational priorities, and how technical cyber activity from groups affiliated with IRGC and MOIS reflects deliberate state direction rather than opportunistic actor behavior. Particular attention to grey zone activity: the deliberately ambiguous space below the threshold of armed conflict where Iranian operations cluster. This is Section 1 of a two-section sequence — Section 2 extends into measured strategic assessment via STEMPLES Plus.
One of Two Iran Modules in the AI-Infused Cognitive Stack
This course is one of two Iran-focused modules in the AI-Infused Cognitive Stack ($6,999), alongside Section 2 — STEMPLES Plus. Together with the Russian (three modules) and Chinese (one module) doctrine coverage, the Iran modules complete the multi-adversary cognitive warfare curriculum spanning all three major nation-state cog-war doctrines under one enrollment.
Common Questions
Iranian Cog War Section 1 — FAQ
Cyber threat intelligence analysts tracking Iranian APT activity, IC analysts working Iran portfolios, foreign service personnel posted to the Middle East, regional security and policy analysts, strategic communications teams countering Iranian narrative operations, and academic researchers in Iranian foreign policy, IRGC doctrine, or regional hybrid warfare.
Recommended prerequisite is Cognitive Warfare Definitions Part 1 ($99) for vocabulary grounding. Familiarity with Middle East regional politics, IRGC structure, or Iranian foreign policy is helpful but not required. Farsi language is not required — the course is taught in English.
Russian doctrine emphasizes reflexive control at strategic scale and Information Alibi tradecraft. Chinese doctrine builds long-cycle integrated influence ecosystems via the Three Warfares. Iranian doctrine concentrates on the regional theater — IRGC-driven hybrid warfare integrating cyber operations with proxy networks, sectarian narrative management, and kinetic-influence integration across the Middle East. Each adversary has its own pattern signature.
Section 1 covers the doctrinal foundation, IRGC influence doctrine, grey zone activity, and primary Iranian APTs. Section 2 ($299) applies STEMPLES Plus to measure Iran's cyber capability systematically across all dimensions of national power. The two sections are complementary; together they form the full Iranian-adversary curriculum.
Yes. This course is one of 13 components of the AI-Infused Cognitive Stack ($6,999) — specifically one of two Iran-focused modules. It does not itself award a certification, but contributes to the doctrinal foundation referenced by the CCIA and CCIAI certifications.
Treadstone 71 has produced Iranian-adversary intelligence since the early 2000s, with foundational regional capability including USAF Arabic cryptologic linguistics, Middle East academic studies at Trinity College, and direct in-country immersion in Jeddah, Kingdom of Saudi Arabia during the formative years of the modern jihadist movement (1988-89). The firm is veteran-owned, woman-led, NICCS-listed, IAFIE-aligned, and has briefed senior leaders at NATO CCDCOE, USNA, AFIT, and Johns Hopkins on Iranian cyber operations and IRGC doctrine.
Read Iranian State Activity Through the IRGC Doctrinal Lens
Self-paced. Intermediate-level. IRGC doctrine + Grey Zone activity + Iranian cyber psyops + primary APTs. Scroll up to enroll, or consider the AI-Infused Cognitive Stack to cover all three nation-state doctrines in a single enrollment.
$299 USD Self-paced · Intermediate · Lifetime access · CPE credits