The CTIA Certified Threat Intelligence Analyst is the world's only certification exclusively focused on threat intelligence. CTIA teaches you how to collect, process, analyse and disseminate cyber threat intelligence to proactively protect your organisation. The training covers the complete threat intelligence lifecycle and the application of MITRE ATT&CK. The exam (312-85) consists of 50 questions and lasts 2 hours. Requires a minimum of 3 years of work experience in information security.

E-learning via the official EC-Council iClass platform

The CTIA at OEM is an official EC-Council iLearn e-learning: completely self-paced, at your own speed, 365 days access. You learn through professionally recorded video lectures by EC-Council Certified Instructors, combined with hands-on labs for threat intelligence analysis. Start immediately after activation.

OEM offers the lowest price for official EC-Council e-learning in the Netherlands. Found the same training cheaper elsewhere? We'll match that price.

Who is this e-learning for?

Suitable for threat intelligence analysts, SOC analysts (level 2 and 3), security engineers, incident responders and cybersecurity professionals with a minimum of 3 years of work experience. Recommended prior knowledge: CEH or CND certification.

What will you learn in the CTIA e-learning?

• Set up and manage threat intelligence programmes for the organisation
• Collect threat information via OSINT, technical sources and the dark web
• Produce tactical, operational and strategic threat intelligence
• Analyse threat actors, TTPs and campaigns with MITRE ATT&CK
• Share threat intelligence via STIX/TAXII and threat intelligence platforms
• Write intelligence reports for different audiences
• Conduct threat hunting based on threat intelligence
• Enrich and apply Indicators of Compromise (IoCs) in security tools

CTIA course content

• Threat intelligence lifecycle: planning, collection, processing, analysis, dissemination and feedback
• Setting up and managing a threat intelligence programme
• OSINT techniques for open source data collection
• Collecting technical intelligence: network, malware and dark web intelligence
• Analysing threat actors and their motivations
• Mapping TTPs with the MITRE ATT&CK framework
• Analysing malware samples for threat intelligence
• Sharing threat intelligence via STIX/TAXII protocols
• Writing intelligence reports for executive, operational and technical audiences
• Integrating threat intelligence in SIEM, SOAR and EDR solutions

Exam and certification

The CTIA exam (312-85) consists of 50 multiple choice questions and lasts 2 hours. The exam is taken via the EC-Council ECC Exam Centre (online). The certification is valid for 3 years.

What is included?

• Official EC-Council CTIA e-course materials
• Hands-on labs for threat intelligence analysis
• Exam voucher for the CTIA exam (312-85)
• 365 days access to the iClass learning platform
• Online mentor for technical questions for 90 or 365 days after activation
• Certificate of participation

SLIM subsidy

As a Dutch SME, you may be eligible for the SLIM subsidy for ICT training. The Dutch government reimburses 60% of your training costs, up to a maximum of €24,999. Period 2 opens 10 August 2026.

Related training courses

• CSA: Certified SOC Analyst - recommended preparation
• CEH v13: Certified Ethical Hacker
• ECIH v2: Certified Incident Handler

Request a quote via our quote form or contact us via our contact page. Or ask Sanne, our AI assistant - available 24/7 via the blue icon at the bottom right of the page.