The Certified Cyber Intelligence Analyst In-Person Course is Treadstone 71's flagship CCIA program delivered as an instructor-led cohort with hands-on tool labs (Maltego, Hunchly, Open Semantic Search, Tracelabs, Oracle VirtualBox), two physical books, over 50 course documents with AI-generated summaries and visualizations, written and oral case-study presentations, and the AI-enhanced curriculum that defines the Treadstone 71 intelligence-community tradecraft methodology. Across 52 CPE hours of premium in-person instruction graduates execute the full intelligence lifecycle — anonymity and persona setup, OPSEC, OSINT collection, STEMPLES Plus and Hofstede adversary analysis, D3A F3EAD adversary targeting, 30+ Structured Analytic Techniques, BLUF / AIMS analytic writing, and TaHiTI / MaGMa threat hunting — earn the Cyber Intelligence Tradecraft Professional credential, and benefit from cohort peer dynamics, live instructor presence, and venue infrastructure that on-demand training cannot replicate.
What You Will Learn
Cyber intelligence tradecraft delivered with hands-on tool labs and live instructor presence
- Anonymity, persona setup, and operational security — instructor-led configuration of passive personas, OPSEC discipline, glossary and taxonomy alignment, and burn phone tradecraft (US students)
- OSINT collection with hands-on tooling — Maltego graph-based link analysis, Hunchly case management, Open Semantic Search, Oracle VirtualBox configuration, Tracelabs, and darknet sites of interest
- Stakeholder analysis and intelligence requirements management — Priority Intelligence Requirements (PIRs), Essential Elements of Information (EEIs), Specific Information Requirements (SIRs), and indicator development workflows
- STEMPLES Plus, Hofstede Principles, and Indicators of Change — Treadstone 71 signature methodology for adversary capability and intent analysis with AI-augmented pattern recognition
- D3A F3EAD Adversary Targeting — Decide, Detect, Deliver, Assess plus Find, Fix, Finish, Exploit, Analyze, Disseminate targeting cycle with AI-assisted data aggregation
- 30+ Structured Analytic Techniques — Analysis of Competing Hypotheses (ACH), Key Assumptions Check, Red Team analysis, Devil's Advocacy, source credibility scoring, and confidence level calibration
- Analytic Writing (BLUF, AIMS) and Forecasting — IAFIE-aligned writing tradecraft, estimative judgments with calibrated confidence language, and AI-assisted writing and grammar tooling
- Threat Hunting with TaHiTI and MaGMa frameworks — operational threat hunting integration with AI-driven pattern recognition and anomaly detection
What You Will Be Able To Do After
Concrete operational capabilities upon cohort completion
- Produce intelligence assessments meeting IAFIE-aligned, ICD 203-equivalent tradecraft standards with documented confidence language and source evaluation
- Conduct OSINT collection operations using Maltego, Hunchly, Tracelabs, and Open Semantic Search with documented provenance and source-reliability grading
- Apply STEMPLES Plus and Hofstede principles to adversary capability, intent, and indicators-of-change analysis
- Execute D3A F3EAD adversary targeting cycles with integrated AI-augmented data correlation
- Apply 30+ Structured Analytic Techniques (ACH, KAC, Red Team, Devil's Advocacy) to fragmented or contested intelligence problems
- Write analytic products using BLUF, AIMS, and ICD 203-equivalent confidence language with stakeholder-aligned report templates
- Run threat hunting operations using TaHiTI and MaGMa frameworks integrated with AI-assisted pattern recognition
- Deliver written and oral case-study presentations to executive, operational, and tactical intelligence audiences
Who This Is For
- Corporate training procurers buying CCIA for analyst teams where cohort delivery, peer dynamics, and live instructor access are preferred over self-paced enrollment
- Government agencies and defense contractors requiring on-site or cohort instructor-led delivery for analyst certification and compliance
- Intelligence analysts who learn best in cohort settings with peer review, live discussion, and structured case-study presentations
- Cyber risk management professionals and incident response leadership building tradecraft capability with hands-on tool instruction
- Researchers and investigators in financial crimes, law enforcement, or academic settings seeking comprehensive in-person cyber intelligence instruction
- Career switchers from non-cyber analytic backgrounds seeking hands-on tool instruction (Maltego, Hunchly, Tracelabs) with live instructor support
- CISOs sponsoring team certification who value structured cohort dynamics, peer accountability, and venue-based concentration over self-paced flexibility
Prerequisites & Technical Requirements
- No formal prerequisites required — open enrollment, civilian-accessible (no clearance required)
- Recommended background: familiarity with general intelligence concepts, Internet browsers, and Office 365
- Laptop requirements: administrative access, 8GB RAM minimum, 100GB free hard drive space, GPU suitable for machine learning tasks
- Pre-course setup: AI software installations and OSINT tool configuration completed before the first session (instructions provided upon enrollment)
- Training dates and locations: published quarterly at treadstone71.com training-event-listings
How CCIA In-Person Differs From On-Demand And Competing In-Person Training
The on-demand CCIA delivers the same curriculum and credential at lower cost for self-paced individual learners. The in-person CCIA is purpose-built for cohort delivery — corporate training procurement, government agency analyst certification, and learners who require live instructor presence, hands-on tool labs, peer accountability, and the venue infrastructure that on-demand training cannot replicate. Versus competing in-person CTI courses (typically SANS-format), CCIA In Person delivers IAFIE-aligned analytic tradecraft (not technical incident response), Treadstone 71's signature STEMPLES Plus and D3A F3EAD methodologies, and the same NICCS-listed credential at a competitive price point.
| Dimension | CCIA In-Person (T71) | CCIA On-Demand (T71) | Generic In-Person CTI Course |
|---|---|---|---|
| Format | Cohort, instructor-led, in-person venue | Self-paced on-demand video | Vendor cohort or hybrid |
| Pricing | $7,499 USD (cohort premium tier) | $4,699 USD | $8,500–$10,000 typical |
| Hands-on tool labs | Live, instructor-supervised (Maltego, Hunchly, Tracelabs, VirtualBox) | Self-driven configuration | Limited or vendor tool only |
| Physical materials | Two books, 50+ documents, AI-generated visuals | Digital materials only | Slide deck PDF only |
| Burn phone tradecraft | Included (US students) | Not addressed | Not addressed |
| Cohort peer learning | Written and oral case-study presentations, peer review | Self-paced individual | Lecture format Q&A |
| Analytic foundation | IAFIE-aligned, STEMPLES Plus, D3A F3EAD, TaHiTI / MaGMa | Same | Technical CTI or vendor-specific framework |
| Credential awarded | Cyber Intelligence Tradecraft Professional / CCIA · NICCS listed | Same | Vendor certification only |
Treadstone 71 is a veteran-owned cyber intelligence firm operational since 2002, codifying CIA and DIA-style intelligence tradecraft for the cyber domain. The firm's foundational capability rests on a rare synthesis of United States Air Force cryptologic linguistics (Arabic and Russian), United States Army armored reconnaissance, academic study of Middle Eastern and Russian history, language, and political systems at Trinity College, Middlebury College, and Colgate University, and direct in-country immersion in Jeddah, Kingdom of Saudi Arabia during the formative years of the modern jihadist movement (1988–89). A Master of Science in Information Assurance from Norwich University extends the field tradecraft into enterprise-scale risk management. The aggregate methodology has been continuously refined across four continents of operational engagement.
Treadstone 71 was honored with the 2007 RSA Conference Award for Excellence in the Field of Security Practices and the 2007 SC Magazine Award for Best Security Team. Operational engagements span clandestine cyber HUMINT (including sustained adversary persona operations within Al-Qaeda and Taliban networks), real-time OSINT support to the Boston FBI following the 2013 Marathon bombing, FBI special-agent OSINT instruction, and senior-leader briefings at NATO Cooperative Cyber Defence Centre of Excellence (CyCon, Estonia), the United States Naval Academy, the Air Force Institute of Technology, and Johns Hopkins. Treadstone 71 is a founding member of the Cloud Security Alliance and holds board seats with Boston InfraGard, the Potomac Institute for Policy Studies, and the Journal of Law and Cyber Warfare.
From 2009 to 2014, Treadstone 71 codified field-tested clandestine cyber tradecraft into the first master's-level cyber intelligence curriculum, established at Utica College, with parallel instruction in Information Security Risk Management at Clark University. The Cyber Intel Training Center is the operational continuation of that curriculum — IAFIE-aligned, PHIA-standards-compliant, and listed in the CISA NICCS cybersecurity workforce development catalog. Treadstone 71 has authored or contributed to The Illusion of Due Diligence — Notes from the CISO Underground, Current and Emerging Trends in Cyber Operations, and multiple editions of the Computer Information Security Handbook, and appears as a primary subject-matter expert on CNN, CBS News, Fox News, BBC Radio, BBN, and i24News.
Beyond training, Treadstone 71 delivers active cyber intelligence engagements — Cyber Threat Intelligence program build, adversary attribution, intelligence maturity assessment, and AI-augmented capability development for commercial, defense, and federal clients.
Explore Cyber Intelligence Program Build at Treadstone 71 →Reserve Your Seat — CCIA In Person
Cohort enrollment with quarterly published dates and venue locations. Includes live instructor delivery, hands-on tool labs, two physical books, 50+ course documents, AI-generated summaries and visualizations, and written / oral case-study presentations. Pre-course setup and timing information delivered upon enrollment.
$7,499 USD Pay-in-installment options at checkout · 12% off with code TWELVEROFFScroll up to use Teachable's enroll button, or contact info@treadstone71.com for enterprise / multi-seat licensing, government procurement, or private on-site cohort delivery. Training dates and locations: treadstone71.com training-event-listings