On-Demand - Self Paced - Generative AI - Cyber Intelligence Tradecraft - Certified Intelligence Analyst -

On Demand - Cyber Intelligence Tradecraft Cyber Intelligence Training Course Newly extended and updated content with Generative AI.

   Watch Promo
On-Demand - Self Paced - Generative AI - Cyber Intelligence Tradecraft - Certified Intelligence Analyst - —
Open for Enrollment

On-Demand · Self-Paced · Generative AI — Cyber Intelligence Tradecraft (Certified Threat Intelligence Analyst)

Newly extended and updated with Generative AI. Earn 52 CPE hours across 15 AI-enhanced modules that merge instructor-led video, rolling mentoring, and interactive labs. Sharpen OSINT, darknet collection, structured analytic techniques, bias mitigation, and AI-powered reporting aligned to IAFIE standards. Completion grants Certified Threat Intelligence Analyst status.

Start Now Preview Syllabus

Delivery Mode

On-Demand · Self-Paced · Instructor-Supported

Course Length

Flexible path over sixteen weeks · 52 CPE Credits

Lead Mentor

Direct guidance from Treadstone 71 founder Jeff Bardin · Rolling office hours

Course Overview

Registration runs on-demand from the Cyber Intelligence Training Center page. Validated students receive login and preparation information one week before class access. Prospective students must email [email protected] from a corporate account for eligibility validation. Treadstone 71 may restrict registration based on risk.

IAFIE-Aligned · Certification on Completion

Who Should Attend

Intelligence analysts and advanced analysts, peer reviewers, analytic writers, open-source collectors and researchers, cyber risk and threat management professionals, incident response and security operations leadership, CISOs and CIOs, cybercrime investigators, recipients of internal or external intelligence reporting, and professionals seeking tradecraft with AI-assisted methods.

Registration & Course Delivery

Standards & Certification

Aligned with International Association for Intelligence Education (IAFIE) standards
52 CPE credits on completion; Certified Threat Intelligence Analyst recognition
Generative AI integrated across collection, analysis, writing, and forecasting

Delivery & Support

Recorded instructor video/audio modules with periodic live web meetings
Office hours, direct messaging, and class email support
Corporate-email validation required prior to enrollment

Program Specifications

Audience CISOs, CIOs, SOC and IR leadership, intelligence staff, cybercrime investigators, analysts, reviewers, researchers, and writers
Prerequisites Familiarity with internet browsers, Office 365, and general intelligence concepts
Learning Outcomes Describe the evolution of cyber intelligence and AI-augmented collection; apply critical and creative thinking to mitigate bias; draft structured reports with AI assistants; execute advanced OSINT and darknet collection; employ AI-driven fusion and geospatial analysis; configure anonymous browsing; validate sources and score credibility; develop PIRs; map adversary behavior with ATT&CK and Diamond; run live case studies; deliver IAFIE-aligned products.
Format On-demand recorded modules plus scheduled live meetings, office hours, and direct messaging
Technical Requirements Internet access; modern browser with extension permissions; ability to install required software on a PC or laptop
Assessment Quizzes, hands-on labs, scenario exercises, and a capstone AI-enhanced threat intelligence brief with structured analysis
Resources Two core textbooks and 50+ downloadable documents, reference guides, and white papers; IAFIE standards; vendor documentation for AI and OSINT tools
Schedule Self-paced with flexible access to all modules; no fixed start or end date
Credits 52 Continuing Professional Education credits; certification as Threat Intelligence Analyst on completion

Module Outline

15 AI-Enhanced Modules
# Module Title
1Evolution of Cyber Intelligence and AI-Driven Collection
2Critical Thinking and AI-Assisted Bias Detection
3Analytic Writing and AI Tools
4Creative Thinking and Adversarial Simulation
5Data Visualization and AI-Assisted Presentations
6Structured Analytic Techniques and Hypothesis Testing
7Intelligence Fusion and Strategic Foresight
8Anonymity, OPSEC, and Passive Persona Setup
9OSINT, Deep/Dark Web, and Collection
10Network and Influence Analysis
11Technical Models
12Source Validation, Credibility Scoring, and Confidence Levels
13Production Management and Dissemination
14AI-Enhanced Forecasting, Campaign Analysis, and Bias Mitigation
15Live Headline-Based Case Studies

Practical Takeaways

Common intelligence language and requirements workflows
Collection plans with targeted tools and provenance controls
Multiple analytic methods: ACH, chain-of-reasoning, scenarios, denial & deception, HI-LO, link analysis, Bayesian/Delphi/Pattern
Bias recognition and mitigation; estimative language and calibration
Safe collection in any environment with OPSEC and anonymous setups
Source validation and credibility scoring with confidence levels
Indicators for cyber operations and continuous visualization for stakeholders
Actionable reports aligned to IAFIE with immediate operational use

Lead Instructor

Forty years of intelligence experience are built into this online recorded course with the availability for instructor office hours or email/text Q&A

Course Accolades

“The course prepared our intelligence function end-to-end. Tools, tradecraft, and outputs that changed operations.”

— Enterprise Security Leader

“Foundational tradecraft with real cases. The analysis training translated directly into daily work.”

— Senior Threat Analyst

Open for Enrollment
Flexible Pricing

Access on-demand modules, live support, templates, and case-driven labs. Progress at your pace and deliver professional intelligence products.

Course material is not for resale or commercial use outside the end-user license agreement and may not be used for competitive purposes.

Your Instructor


Treadstone 71
Treadstone 71

Treadstone 71 is a woman and veteran-owned small business exclusively focused on cyber and threat intelligence consulting, services, and training. We are a pure-play intelligence shop.

Training dates and locations here

Since 2002, Treadstone 71 delivers intelligence training, strategic, operational, and tactical intelligence consulting, and research. We provide a seamless extension of your organization efficiently and effectively moving your organization to cyber intelligence program maturity. Our training, established in 2008, follows intelligence community standards as applied to the ever-changing threat environment delivering forecasts and estimates as intelligence intends. From baseline research to adversary targeted advisories and dossiers, Treadstone 71 products align with your intelligence requirements. We do not follow the create once and deliver many model. We contextually tie our products to your needs. Intelligence is our only business.

  • We use intuition, structured techniques, and years of experience.
  • We supply intelligence based on clearly defined requirements.
  • We do not assign five people to do a job only one with experience.
  • We do not bid base bones only to change order you to overspending.
We do not promise what we cannot deliver. We have walked in your shoes. We understand your pressures.

We are known for our ability to:

  • Anticipate key target or threat activities that are likely to prompt a leadership decision.
  • Aid in coordinating, validating, and managing collection requirements, plans, and activities.
  • Monitor and report changes in threat dispositions, activities, tactics, capabilities, objectives as related to designated cyber operations warning problem sets.
  • Produce timely, fused, all-source cyber operations intelligence and indications and warnings intelligence products (e.g., threat assessments, briefings, intelligence studies, country studies).
  • Provide intelligence analysis and support to designated exercises, planning activities, and time-sensitive operations.
  • Develop or recommend analytic approaches or solutions to problems and situations for which information is incomplete or no precedent exists.
  • Recognize and mitigate deception in reporting and analysis.
    Assess intelligence, recommend targets to support operational objectives.
  • Assess target vulnerabilities and capabilities to determine a course of action.
  • Assist in the development of priority information requirements.
  • Enable synchronization of intelligence support plans across the supply chain.
  • ...and Review and understand organizational leadership objectives and planning guidance non-inclusively.

Course Curriculum


  Start Building and Enhancing Your Program - Stakeholder Analysis
Available in days
days after you enroll
  Data Provenance - Hunchly - OPSEC - Rules of Engagement
Available in days
days after you enroll
  STEMPLES Plus - Indicators of Change - Hofstede Principles
Available in days
days after you enroll
  Intelligence Requirements and Adversary Targeting
Available in days
days after you enroll
  Blue - Red - Purple
Available in days
days after you enroll
  Technical Security - Threat Intelligence
Available in days
days after you enroll
  Analysis of Competing Hypothesis
Available in days
days after you enroll
  Critical Thinking - Thinking with AI
Available in days
days after you enroll
  Cognitive Bias - Fallacies
Available in days
days after you enroll
  Argument Mapping and Threat Hunting
Available in days
days after you enroll
  Analytic Writing Part 1
Available in days
days after you enroll
  Assignment 1
Available in days
days after you enroll
  Assignment 2
Available in days
days after you enroll
  Assignment 3
Available in days
days after you enroll
  Readings, Tools, Core Information
Available in days
days after you enroll
  Analytic Writing Quiz
Available in days
days after you enroll
  Reports and Reporting - Types of Reports - Templates
Available in days
days after you enroll

Frequently Asked Questions


How does the course run?
The Cyber Intelligence Tradecraft Certification online course is geared to accommodate times for students globally. Meaning, office hours for discussions, questions/answers will vary weekly from 6AM Eastern Time to 6PM to 9PM (as examples) Eastern time based upon locations of enrolled students. Office hours will not be the same weekly unless all students happen to be from a specific time zone (unlikely this will happen). Courses are released in the 'drip' method just like attending a university course with weekly lectures, readings, and assignments. Recorded lectures will be available weekly for students to review. Lectures are followed by individual and team exercises that focus on Case Studies and online research cover the 8 weeks of the course. Normal time spent per week is from 5-6 hours. The office hours are live and not required but available should students have questions. Students may also contact the instructor directly via phone, text, Cyphr, Wickr, Signal, etc., should they have out of band questions. In addition, there will be an online forum for online Q&A. The online course is exactly the same as the face to face minus the travel. Same content, same books, etc. We just start and finish on Saturday. Office Hours: • These are much like college office hours for Q&A. We may hold a lecture or 2 that is live and need-based upon student requests. We intend to keep office hours at no more than 60 minutes maximum. • Since the lectures will be available online, students will have an opportunity to review them throughout the course. • The team delivers, and it is the expectation that all on the team will actively participate. We are considering team ratings.
How long do I have access to the course?
The course runs for 10 weeks from the published start date although if you run into any potential issues, we can easily extend the course time. Just send us an email. On the other hand, it is geared to be self-paced.
COURSE EULA
Course EULA - REQUIRED Treadstone 71 LLC ("T71") IS WILLING TO LICENSE THE T71 Cyber Intelligence Training (COLLECTIVELY, "COURSE") UPON THE CONDITION THAT YOU ACCEPT ALL OF THE TERMS OF THIS NON-COMMERCIAL VERSION LICENSE AGREEMENT ("AGREEMENT"). PLEASE READ THESE TERMS CAREFULLY BEFORE MOVING AHEAD WITH THIS COURSE. BY INSTALLING OR USING THE INFORMATION ON THE PROVIDED USB, YOU ARE CONSENTING TO BE BOUND BY AND ARE BECOMING A PARTY TO THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS AGREEMENT, T71 IS UNWILLING TO LICENSE THE COURSE TO YOU ("YOU"), AND YOU SHOULD NOT INSTALL OR USE THE COURSE. NON-COMMERCIAL VERSION LICENSE To qualify for a Non-Commercial Version License, You must: (1) use the Course for non-commercial purposes as defined herein. The term "Non-Commercial Version License" is limited to using the concepts, methods, processes, procedures, and plans for internal organizational use. Entities are not allowed to teach this course or semblance of this course without express permission from Treadstone 71 LLC. Organizations are not allowed to deliver commercial services based upon this course that compete directly or indirectly with Treadtone 71 LLC. If You do not qualify for a Non-Commercial Version License, then you should discontinue the COURSE. GRANT OF LICENSE Provided that you qualify for a Non-Commercial Version License as specified above, and subject to the terms and conditions contained herein, T71 hereby grants You, an end user, a personal, non-transferable, non-exclusive, non-sublicensable license to install and use the COURSE, free of charge, for non-commercial purposes only. In addition, subject to the terms and conditions contained herein and provided that You meet the requirement specified above for an Non-Commercial Version License, T71 hereby grants to You, an end user, a non-transferable, non-exclusive, non-sublicensable license, free of charge, to (1) use the COURSE for the intent of building or expanding a cyber intelligence program within your organization. For the avoidance of doubt, the following are considered examples of commercial uses of the COURSE: (1) use for financial gain, personal or otherwise; (2) use by government agencies without recompense to T71; (3) use by a telecommunication or Internet service provider company with recompense to T71; (4) use in connection with administering a commercial web site; (5) use in connection with the provision of professional service for which you or your company or organization are compensated (including paid administration); (6) bundling or integrating the COURSE with any other product, service, or another COURSE product for commercial use. (7) teaching this course in a seminar, online, commercial or academic setting. T71 and/or its licensors reserve all rights not expressly granted to You herein. This license is not a sale of the COURSE or any copy of the COURSE. The COURSE contains valuable trade secrets of T71 and its licensors. All worldwide ownership of and all rights, titles and interests in and to the COURSE, and all copies and portions of the COURSE, including without limitation, all intellectual property rights therein and thereto, are and will remain exclusively with T71. The COURSE is protected, among other ways, by the copyright laws of the United States and international copyright treaties. All rights not expressly granted herein are retained by T71 and its licensors. USE RESTRICTIONS You may not: (i) use the COURSE, except under the terms listed above; (ii) create derivative works based on the COURSE (e.g. incorporating the COURSE in a commercial product or service without a proper license). (iii) copy the COURSE (iv) rent, lease, sublicense, convey, distribute or otherwise transfer rights to the COURSE; (v) remove any product identification, copyright, proprietary notices or labels from the COURSE; or (vii) use any T71 trademarks in any manner other than their presence within Your copy of the COURSE without written permission of T71. Any and all copies made by You as permitted hereunder must contain all of the original COURSE's copyright, trademark and other proprietary notices and marks. MAINTENANCE, SUPPORT AND UPDATES T71 is under no obligation to maintain or support or update the COURSE in any way, or to provide updates or error corrections CONFIDENTIALITY The COURSE and any license authorization codes are confidential and proprietary information of T71. You agree to take adequate steps to protect the COURSE and any license authorization codes, if any, from unauthorized disclosure or use. You agree that You will not disclose the COURSE, in any form, to any third party, except as otherwise provided herein. WARRANTY T71 EXPRESSLY DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY, OF FITNESS FOR A PARTICULAR PURPOSE, NONINFRINGEMENT OF THIRD PARTY INTELLECTUAL PROPERTY RIGHTS, AND ANY WARRANTY THAT MAY ARISE BY REASON OF TRADE USAGE, CUSTOM, OR COURSE OF DEALING. WITHOUT LIMITING THE FOREGOING, YOU ACKNOWLEDGE THAT THE COURSE IS PROVIDED "AS IS" AND THAT T71 DOES NOT WARRANT THAT THE COURSE WILL RUN UNINTERRUPTED OR ERROR FREE NOR THAT THE COURSE WILL OPERATE WITH HARDWARE AND/OR COURSE NOT PROVIDED BY T71. THIS DISCLAIMER OF WARRANTY CONSTITUTES AN ESSENTIAL PART OF THE AGREEMENT. SOME STATES DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES, SO THE ABOVE EXCLUSION MAY NOT APPLY TO YOU, AND YOU MAY HAVE OTHER RIGHTS, WHICH VARY FROM STATE TO STATE. TERMINATION This Agreement will terminate immediately and automatically without notice if You breach any provision in this Agreement. Upon termination You will remove all copies of the COURSE or any part of the COURSE from any and all computer storage devices and destroy the COURSE. At T71's request, You or your authorized signatory, will certify in writing to T71 that all complete and partial copies of the COURSE have been destroyed and that none remain in your possession or under your control. The provisions of this Agreement, except for the license grant and warranty, will survive termination. U.S. GOVERNMENT RIGHTS If You use the COURSE by or for any unit or agency of the United States Government, this provision applies. The COURSE shall be classified as "TRAINING COURSE", as that term is defined in the Federal Acquisition Regulation (the "FAR") and its supplements. T71 represents that the COURSE was developed entirely at private expense, that no part of the COURSE was first produced in the performance of a Government contract, and that no part of the COURSE is in the public domain. (1) If the COURSE is supplied for use by DoD, the COURSE is delivered subject to the terms of this license agreement and either (i) in accordance with DFARS 227.7202-1(a) and 227.7202-3(a), or (ii) with restricted rights in accordance with DFARS 252.227-7013(c)(1)(ii) (OCT 1988), as applicable. (2) If the COURSE is supplied for use by a Federal agency other than DoD, the COURSE is restricted computer COURSE delivered subject to the terms of this license agreement and (i) FAR 12.212(a); (ii) FAR 52.227-19; or (iii) FAR 52.227-14(ALT III), as applicable. RESTRICTED RIGHTS Use, duplication, or disclosure by the U.S. Government is subject to restrictions set forth in this agreement and as provided in DFARS 227.7202-1(a) and 227.7202-3(a) (1995),DFARS 252.227-7013(c)(1)(ii) (OCT 1988), FAR 12.212(a) (1995), FAR 52.227-19, or FAR 52.227-14 (ALT III), as applicable. Manufacturer is Treadstone 71 LLC, 11864 Izarra Way, 7206, Fort Myers, FL 33912 EXPORT LAW You acknowledge and agree that the COURSE may be subject to restrictions and controls imposed by the United States Export Administration Act (the "Act") and the regulations thereunder. You agree and certify that neither the COURSE nor any direct product thereof is being or will be acquired, shipped, transferred, or re-exported, directly or indirectly, into any country, except pursuant to an export control license under the Act and the regulations thereunder, or will be used for any purpose prohibited by the same. By using the COURSE, You are acknowledging and agreeing to the foregoing, and You are representing and warranting that You will comply with all of the United States and other applicable country laws and regulations when either exporting or re-exporting or importing the COURSE or any underlying information technology. Further, You represent and warrant that You are not a national of Cuba, Iran, Iraq, Libya, North Korea, Russia, Sudan or Syria or a party listed in the U.S. Table of Denial Orders or U.S. Treasury Department's list of Specially Designated Nationals. GOVERNING LAW This Agreement is governed by the laws of the State of Florida without regard to conflict of laws rules and principles. Application of the United Nations Convention on Contracts for the International Sale of Goods is expressly excluded. MISCELLANEOUS If any provision hereof shall be held illegal, invalid or unenforceable, in whole or in part, such provision shall be modified to the minimum extent necessary to make it legal, valid and enforceable, and the legality, validity and enforceability of all other provisions of this Agreement shall not be affected thereby. No delay or failure by either party to exercise or enforce at any time any right or provision hereof shall be considered a waiver thereof or of such party's right thereafter to exercise or enforce each and every right and provision of this Agreement. This Agreement will bind and inure to the benefit of each party's permitted successors and assigns. You may not assign this Agreement in whole or in part, without T71's prior written consent. Any attempt to assign this Agreement without such consent will be null and void. This Agreement is the complete and exclusive statement between You and T71 relating to the subject matter hereof and supersedes all prior oral and written and all contemporaneous oral negotiations, commitments and understandings of the parties, if any. In the case of any conflict between the terms of this Agreement and the provisions of any purchase order for the COURSE, the terms of this Agreement shall control. Please contact the Director of Business Development at T71 11864 Izarra Way, 7206, Fort Myers, FL 33912 888.714.0071 – [email protected]
Once I enroll, what happens?
You receive an invitation email from Teachable.com, the online portal hosting our training classes. The email requires your registration into the course. One week before the course starts, we send you information on course requirements, what you will receive, links to other information, proper email addresses for books and other course information.
Course Cancellation Policy
If you wish to cancel your course registration, your registration fee will be fully refunded when written notification is received 30 days before class start. After that date, if you need to cancel your registration, please email [email protected] with the reason why you need to cancel. If you have accessed the content (i.e., the class has started) we will be unable to refund your registration fee. Refunds will be issued back to the original payment method used within 5-7 business days minus platform registration fees.

Get started now!