What is cyber intelligence training?

Cyber intelligence training teaches analysts how to collect, structure, assess, write, and brief intelligence for cyber risk, threat, influence, and operational decisions. Treadstone 71 programs cover collection planning, OSINT, structured analytic techniques, deception detection, warning analysis, reporting, and forecasting — all aligned to IAFIE standards and listed in the CISA NICCS catalog.

Who should take counterintelligence and cyber intelligence courses?

Programs fit threat intelligence analysts, security leaders, investigators, cybercrime teams, intelligence writers, peer reviewers, government agencies, defense organizations, and enterprise security groups that need stronger analytic tradecraft.

Do you offer cognitive warfare and disinformation training?

Yes. The catalog includes cognitive warfare, narrative analysis, deception, influence operations, Russian and Chinese cognitive warfare doctrine, People Intelligence (PEOPINT), and related programs that help students identify manipulation, hostile narratives, and behavior-driven threat patterns.

Are the courses self-paced or live?

Most programs offer online, on-demand access with mentor support. Select programs add live web meetings, office hours, or instructor-supported cohorts. In-person training is available through Treadstone 71's client-driven and Project Omega Prague residency formats.

Do you provide team or enterprise licensing?

Yes. Enterprise subscription options support organization-wide access through a single annual license. Teams gain shared training paths, consistent analytic language across analysts, and centralized progress reporting for security leadership.

Are the certifications recognized in the intelligence community?

Treadstone 71 training is IAFIE-aligned, follows PHIA standards language, and is listed in the CISA NICCS training catalog as a recognized cybersecurity workforce development provider. Certifications carry CPE credits and are recognized by government agencies, defense contractors, and Fortune 500 security teams worldwide.

How does this site relate to Treadstone 71?

The Cyber Intel Training Center is the official online training platform of Treadstone 71 LLC, a woman-owned, veteran-led cyber intelligence firm operating since 2002. Treadstone 71 also delivers in-person training, consulting, adversary dossiers, and intelligence program builds at treadstone71.com.

TREADSTONE 71 WORKFORCE TELEMETRY // IAFIE ALIGNED · ICD 203 · PHIA STANDARDS · CISA NICCS LISTED

Five Tiers of Cyber Intelligence Competency

Name: Enterprise Cyber Intelligence Training Subscription
Brand: Treadstone 71
Price: 99990.00 USD
Availability: InStock

Select any operational archetype below to inspect its live skill telemetry, 5-stage workflow diagram, tactical output artifact, and mapped certification path.

Competency Tiers5

Structured Analytic Techniques66

Master Bundle CPEs144

Enterprise Seats500

INTERACTIVE COMMAND CONSOLE — CLICK ANY TIER (01–05) TO LOAD SKILL METERS, WORKFLOW DIAGRAM & ARTIFACT DRAFT

// TIER 01 TELEMETRY · COLLECTION & REQUIREMENTS DISCIPLINE

01 · The Operator — "Forge the Instrument"

ROLES: SOC L1/L2 · OSINT COLLECTOR · JUNIOR CTI

// OPERATIONAL WORKFLOW DIAGRAM · ADAPTIVE COLLECTION CASCADE PROTOCOL: ACIL-01

STEP 01 Stakeholder Audit Map C-suite & IR decision needs

STEP 02 PIR → EEI → SIR Decompose into collection tasks

STEP 03 OPSEC & Persona Isolated sock-puppet hygiene

STEP 04 Passive Recon Surface, deep & darknet forums

STEP 05 ASA Grading Grade Reliability (A–F) & Credibility (1–6)

// TIER 01 SKILL PROFICIENCY TELEMETRY6 CORE SKILLS

PIR → EEI → SIR Requirement Cascades95%

Persona Construction & Passive OPSEC92%

Darknet, Telegram & Forum Collection88%

ASA Evidence Standard Grading (A–F / 1–6)90%

Collection Management Matrix (CMM)86%

Circular Reporting & Echo-Chamber Detection84%

// LIVE ARTIFACT DRAFT · COLLECTION LEDGERASA-ES v1.2

[STAKEHOLDER]: VP Infrastructure & SOC Director [PIR-01]: Identify initial access brokers (IABs) auctioning Fortinet/Ivanti VPN credentials in Q4. [EEI-01.2]: Threat actor handles, escrow wallets & ASN ranges on Russian-language forums. [SIR-01.2a]: Extract WHOIS/TLS pivot hashes via isolated residential proxy persona #OP-19. [SOURCE GRADE]: B2 (Reliable Forum Escrow / Probably True Telemetry — Non-Averaged Axis) [OPSEC STATUS]: ✓ ZERO ATTRIBUTION LEAKAGE VERIFIED

Tier 01 Training Path: CCIA Part 1 + Modular Collection Courses Full CCIA ($5,399 · 52 CPEs) · Personas & OPSEC ($499) · Intelligence Requirements ($299)

Deploy CCIA Track ($5,399) → Personas & OPSEC ($499) Start Free Overview ($0)

// TIER 02 TELEMETRY · STRUCTURED ANALYSIS & ESTIMATIVE WRITING

02 · The Analyst — "Turn Noise Into Signal (CCIA)"

CREDENTIAL: CERTIFIED CYBER INTELLIGENCE ANALYST (52 CPE)

// OPERATIONAL WORKFLOW DIAGRAM · MACHINE-SPEED STRUCTURED ANALYSIS PROTOCOL: ICD-203 / 66 SATS

STEP 01 Bias Audit Scan 35+ cognitive & cultural biases

STEP 02 66 SATs Selection Diagnostic, contrarian & red-hat

STEP 03 ACH Falsification Disconfirm weak rival hypotheses

STEP 04 AI Orchestration Human-in-the-loop prompt guardrails

STEP 05 BLUF + PHIA Sherman Kent estimative likelihoods

// TIER 02 SKILL PROFICIENCY TELEMETRY6 CORE SKILLS

66 Structured Analytic Techniques (9 Families)96%

Analysis of Competing Hypotheses (ACH)95%

Cognitive & Cultural Bias Mitigation92%

ICD 203 / PHIA / Sherman Kent Estimative Writing94%

Link, Pattern, Trend & Anomaly Analysis90%

Generative AI Analytic Prompt Guardrails91%

// LIVE ARTIFACT DRAFT · ACH & BLUF ASSESSMENTICD 203 COMPLIANT

[BLUF]: We assess with HIGH CONFIDENCE (80–90% probability) that Intrusion Set #44 is a false-flag operation staged by APT28 rather than a commercial RaaS affiliate. [ACH FALSIFICATION]: H1 (RaaS financially motivated) refuted by Evidence E4 (wiper payload destroys ransom negotiation keys) & E7 (UTC+3 compile timestamps). [KEY ASSUMPTION CHECK]: Audited for Mirror-Imaging & Anchoring Bias via SAT #14. [ANALYTIC RIGOR]: ✓ FACTS SEPARATED FROM ADVERSARY CLAIMS

Tier 02 Flagship Credential: Certified Cyber Intelligence Analyst (CCIA) 15 AI-Infused Modules · 52 CPE Credits ($5,399) · Or 10-Course Analyst Stack ($8,999)

Enroll in Generative AI CCIA ($5,399) → The Analyst Stack ($8,999)

// TIER 03 TELEMETRY · COUNTERINTELLIGENCE, COGWAR & CRIMEWARE

03 · The Hunter — "Dictate the Engagement (CCIAI)"

TRACK A: CCIAI & COGWAR · TRACK B: CRIMEWARE & CRYPTO

// OPERATIONAL WORKFLOW DIAGRAM · ACTIVE DECEPTION & COUNTER-INFLUENCE PROTOCOL: D3A / F3EAD

STEP 01 Behavioral Profile Dark Triad, 7 Radicals & MBTI

STEP 02 Deception Matrix Deploy honey-personas & canaries

STEP 03 Cyber-HUMINT Forensic elicitation & insider tests

STEP 04 CogWar & Crypto Expose reflexive control & peel chains

STEP 05 Active Disruption Contain influence & attribution dossier

// TIER 03 SKILL PROFICIENCY TELEMETRYTRACKS A & B

Offensive & Defensive Counterintelligence (CCIAI)96%

Denial, Deception Planning & Honey-Personas94%

RU / CN / IR / KP Cognitive Warfare & Reflexive Control95%

Insider Threat & Forensic Elicitation Protocols92%

Dark Triad, Pitch Black Tetrad™ & Seven Radicals93%

Transnational RaaS & Blockchain Peel-Chain Tracing91%

// LIVE ARTIFACT DRAFT · COUNTER-DECEPTION DOSSIERCCIAI / EC3

[TARGET PROFILE]: DPRK RGB Contagious Interview Operator (#KP-Lazarus-09) [PSYCHOLOGIC VECTOR]: High Machiavellianism / Pitch Black Tetrad score; Paranoid-Schizoid radical profile. [COUNTERMEASURE]: Injected watermarked canary repo via honey-persona; traced TRON USDT bridge hop to Lazarus cluster. [ELICITATION RESULT]: Subject forced off-script during live video verification probe. [ENGAGEMENT STATUS]: ✓ ADVERSARY COLLECTION CONTAINED & ATTRIBUTED

Tier 03 Stacks & Certifications: CI Stack ($9,699) · Cognitive Stack ($8,399) Standalone CCIAI ($3,999) · Transnational Cybercrime ($5,399) · Crypto CCIAI ($3,999)

Deploy CI Stack ($9,699) → Cognitive Stack ($8,399) Crimeware Analyst ($5,399)

// TIER 04 TELEMETRY · STRATEGIC INTELLIGENCE & PROGRAM BUILD

04 · The Architect — "Design the Board"

ROLES: CTI DIRECTOR · CISO · PRINCIPAL STRATEGIC ANALYST

// OPERATIONAL WORKFLOW DIAGRAM · ENTERPRISE CTI PROGRAM & STRATEGIC FORECASTING PROTOCOL: T71-CMM / STEMPLES+

STEP 01 CMM Maturity Audit Score 5 program dimensions

STEP 02 Charter & SOPs Governance, KPIs & RFI SLAs

STEP 03 STEMPLES Plus™ 10-domain geopolitical model

STEP 04 Cyber Wargaming Red-cell scenario simulations

STEP 05 Boardroom Brief Capital & risk decision advantage

// TIER 04 SKILL PROFICIENCY TELEMETRY60 CPE CAPSTONE

Enterprise CTI Charter, SOP & Governance Design97%

STEMPLES Plus™ + Hofstede Cultural Indicators96%

Cyber Intelligence Capability Maturity Model (CMM)95%

Estimative & Warning Intelligence (12–36 Mo Horizon)94%

Executive Wargaming & Scenario Architecture92%

C-Suite & Boardroom Risk Translation95%

// LIVE ARTIFACT DRAFT · BOARD STRATEGIC NIE BRIEFSTEMPLES+ / CMM

[STRATEGIC WARNING]: PRC Volt/Salt Typhoon pre-positioning in OT/telecommunications aligns with 2027 geopolitical escalation windows (LIKELY: 65–75%). [STEMPLES+ DRIVER]: Military-Civil Fusion mandate + Semiconductor export pressure + High Power-Distance/Long-Term Orientation (Hofstede). [CMM MATURITY DELTA]: Unit upgraded from Level 1 (Reactive Feed Consumer) to Level 4 (Foresight-Driven Intelligence Program). [BOARD ACTION]: ✓ CHARTER & Q1–Q4 PIR ROADMAP RATIFIED

Tier 04 Capstone: Building & Enhancing Your CTI Program with Strategic Intel Analysis 60 Verifiable CPE Hours · 10 Additional Program-Build Lectures + Templates ($5,699)

Enroll in Strategic CTI Program Build ($5,699) → Run Free CMM Assessment

// TIER 05 TELEMETRY · CROSS-DOMAIN MASTERY & DOCTRINE AUTHORSHIP

05 · The Source — "Define the Standard. Write the Doctrine."

MASTER PIPELINE: CCIA + CCIAI + CRIMEWARE + PEOPINT/NARINT

// OPERATIONAL WORKFLOW DIAGRAM · DOCTRINE CREATION & MULTI-DOMAIN OVERWATCH PROTOCOL: T71-STANDARD / TAI

STEP 01 Triple-Cert Fusion Unify CTI + CI + Crimeware

STEP 02 PEOPINT / NARINT Unwitting Participant & Subversion

STEP 03 Method Invention Author custom SATs & AI workflows

STEP 04 Adversary Index™ Quantitative TAI & ASA-MOE audits

STEP 05 Red-Cell Overwatch Command & mentor Tiers 01–04

// TIER 05 SKILL PROFICIENCY TELEMETRYAPEX ECHELON

Cross-Domain Synthesis (CCIA + CCIAI + Crimeware)99%

PEOPINT / NARINT & Unwitting Participant Doctrine98%

Proprietary SAT Invention & Doctrine Authorship97%

ASA-MOE Cognitive Warfare Effect Auditing96%

National & Enterprise Societal Resilience Design97%

Red-Cell Overwatch & Tier 01–04 Mentorship98%

// LIVE ARTIFACT DRAFT · DOCTRINAL SPECIFICATIONTHE T71 STANDARD

[DOCTRINE ID]: T71-PEOPINT-ESF-2026 (Embedded Subversion & Unwitting Participant Counter-Architecture) [ADVERSARY INDEX (TAI)]: PRC (8.92) · RU (8.74) · IR (7.88) · KP (7.65) [ASA-MOE VERIFICATION]: Separated vanity bot amplification from verified decision-shift telemetry across 14 target nodes. [OVERWATCH STATUS]: ✓ SOVEREIGN DOCTRINE RATIFIED ACROSS ALL 5 TIERS

Tier 05 Apex Pathways: Mastering the Tradecraft ($12,199) + PEOPINT/NARINT ($2,499) 144 CPE Triple-Certification Bundle · Or Enterprise Subscription (from $17,240/yr)

Mastering the Tradecraft ($12,199) → PEOPINT / NARINT Tier 5 ($2,499) Enterprise License (from $17,240/yr)

Skill Progression Telemetry Matrix (Tiers 01–05)

How core intelligence tradecraft capabilities scale from tactical execution (Tier 01) to doctrinal authorship (Tier 05).

Core Tradecraft Skill Domain	01 · Operator	02 · Analyst	03 · Hunter	04 · Architect	05 · The Source
PIR → EEI → SIR Requirements	Tactical Cascade	Hypothesis Alignment	Targeting & CI Collection	Enterprise Governance	Doctrinal Standard
OPSEC & Persona Hygiene	Passive Sock-Puppets	Attribution Auditing	Active Honey-Personas	Unit OPSEC Policy	Counter-Recon Overwatch
ASA Evidence Grading (A–F / 1–6)	Source Ledger	Disconfirmation Weight	Deception Scoring	Program QA Gate	ASA-ES Standard Author
66 Structured Analytic Techniques	Foundational	Full 9-Family Mastery	Adversarial & Red-Hat	Wargaming & Foresight	New SAT Invention
ICD 203 & PHIA Estimative Writing	Collection Briefs	Finished BLUF Reports	Attribution Dossiers	Board & NIE Forecasts	Final Review Chair
Cyber Counterintelligence & Deception	Indicator Awareness	Deception Hypotheses	CCIAI Offensive/Defensive	Enterprise CI Program	Multi-Domain Campaigns
PEOPINT, NARINT & Cognitive Warfare	Narrative Collection	Bias & Framing Audit	RU/CN/IR/KP Doctrine	Corporate Defense	Unwitting Participant Doctrine
Behavioral Profiling (Dark Triad / 7 Radicals)	Baseline Indicators	Actor Motivation	Forensic Elicitation	Insider Threat CMM	Pitch Black Tetrad™
Crimeware & Crypto Tracing	Darknet Recon	Syndicate Link Analysis	RaaS & Peel-Chain Disruption	Financial Risk Briefs	Cross-Border Takedowns
STEMPLES Plus™ & Program Architecture	Task Execution	Domain Inputs	Cultural Nexus™	Full CTI Program Build	The Adversary Index (TAI)

Curated Role Stacks & Enterprise Licensing

Lock in multi-course role stacks or license all 5 tiers across 5 to 50 named seats.

// TIERS 01 & 02 · 10 COURSES

The Analyst Stack

$8,999

CCIA Tradecraft, 66 SATs, Analytic Writing, Collection Management, Stakeholder Analysis, and STEMPLES Plus.

Deploy Analyst Stack →

// TIER 03 · 10 COURSES · CCIAI

CounterIntelligence Stack

$9,699

Full CCIAI Certification, Insider Threats & Elicitation, Personas & OPSEC, Deception Planning, PEOPINT, and SATs.

Deploy CI Stack →

// TIERS 03 & 05 · 18 COURSES

AI-Infused Cognitive Stack

$8,399

Russian, Chinese, and Iranian cognitive warfare doctrines, NATO PSYOPs, PEOPINT/NARINT, and Disinformation defense.

Deploy Cognitive Stack →

// ALL TIERS 01–05 · 5 TO 50 SEATS

Enterprise Subscription

from $17,240/yr

Unrestricted 12-month catalog access across all 5 tiers for 5 to 50 reassignable operators under one annual invoice.

Lock Enterprise License →

Competency Model FAQ

Why does Treadstone 71 structure competency across 5 Tiers instead of a single certification?

Collection without structured analysis produces raw noise, and strategic leadership without collection discipline produces ungrounded speculation. The 5-Tier Model (01 The Operator, 02 The Analyst, 03 The Hunter, 04 The Architect, 05 The Source) ensures every practitioner masters foundational requirement cascades and bias mitigation before executing counterintelligence, cognitive warfare defense, or enterprise program architecture.

Where do People & Narrative Intelligence (PEOPINT/NARINT) and Disinformation courses fit in the 5 Tiers?

PEOPINT & NARINT (/p/cyberintel5webbundle) and Disinformation, Cognitive Warfare & Identity Fusion (/p/aspectsdisinformation) bridge Tier 03 (The Hunter — Cognitive Warfare & Counterintelligence Specialization) and Tier 05 (The Source — Human & Narrative Domain Doctrine Mastery). Practitioners apply PEOPINT/NARINT operationally in Tier 3 hunting cells and elevate it to national and enterprise resilience architecture at Tier 5 alongside the Mastering the Tradecraft triple-certification bundle.

Can experienced analysts skip Tier 1 or trade in legacy vendor certifications?

Practitioners who enroll in the flagship Generative AI Certified Cyber Intelligence Analyst (CCIA) course complete both Tier 01 (The Operator) and Tier 02 (The Analyst) in one unified 16-week path. Analysts holding legacy third-party threat intelligence certificates can also apply prior training credit (10% off single-operator certifications using code AMNESTY10 at checkout) through the Treadstone 71 Skills Amnesty program. Veteran, government, alumni, team, referral, and promotional discounts apply to individual courses only. They do not apply to bundles, Stacks, or the Enterprise Subscription, and discounts never combine.

How does the Enterprise Subscription map to the 5 Competency Tiers?

The Enterprise Subscription unlocks unrestricted 12-month catalog access across all five competency tiers—allowing SOC directors and CTI leaders to assign Tier 01 and Tier 02 tracks to junior and mid-level analysts, Tier 03 tracks to counterintelligence and threat hunting cells, and Tier 04/05 tracks to program leads under a single annual invoice.

Benchmark Your Unit. Advance Across All 5 Tiers.

Use code AMNESTY10 for 10% off single-operator certifications, code TEAMINTEL for 10% off teams of 3 to 5 (larger teams: contact info@treadstone71.com), or lock in the Enterprise Subscription. Veteran, government, alumni, team, referral, and promotional discounts apply to individual courses only. They do not apply to bundles, Stacks, or the Enterprise Subscription, and discounts never combine.

Explore Featured Certifications → Compare All Bundles Free CMM Readiness Scorecard