威胁情报与狩猎
主动追踪对手
Key facts
- Level: Professional
- Field: Cybersecurity & Information Security
- Certification price: $194 (one-time payment)
- Online course: 威胁情报与狩猎 — 学习课程 — $195
- Course + exam bundle: $389
- Exam: 40 multiple-choice questions · 90 minutes · passing score 70% · up to 3 attempts
- Estimated study time: about 32 hours
- Validity: 24 months
- Certification language: English
About the 威胁情报与狩猎 certification
将威胁情报与主动狩猎落地运营：情报生命周期、MITRE ATT&CK、IOC 与 TTP 的对比、假设驱动的狩猎、检测工程，以及将情报转化为检测能力。
Course outline
The 威胁情报与狩猎 — 学习课程 course covers:
- 威胁情报基础 — 建立支撑所有威胁情报项目的核心概念、词汇和生命周期。 (4 lessons)
- MITRE ATT&CK框架 — 深入探讨ATT&CK知识库——其结构、用例，以及如何将其应用于检测、威胁狩猎和情报分析。 (3 lessons)
- 威胁行为者画像与对手情报 — 构建关于威胁行为者群体、其动机的结构化知识，并学习如何对对手进行画像以预测其下一步行动。 (3 lessons)
- 假设驱动的威胁狩猎 — 从被动告警转向主动狩猎——利用真实遥测数据制定、执行并记录结构化的狩猎行动。 (4 lessons)
- 检测工程 — 使用Sigma、YARA和现代SIEM平台，将威胁情报转化为持久、高保真的自动化检测。 (3 lessons)
- 情报运营化：从情报到行动 — 闭环情报生产与安全运营——自动化情报工作流、衡量项目有效性，并与SOAR集成。 (3 lessons)
- 考试准备：威胁情报与狩猎 — 整合所有关键概念，理解考试结构，并制定自信的考试日策略。 (3 lessons)
Frequently asked questions
- Is the 威胁情报与狩猎 certificate verifiable?
- Yes. Every certificate issued by BC Skills Academy carries a unique credential ID that anyone can check on the public verification page.
- How is the 威胁情报与狩猎 exam structured?
- It is a timed, randomized multiple-choice exam of 40 questions in 90 minutes, graded instantly; you need 70% to pass.
- Can I get a refund?
- Full refund within 7 days of purchase if you have not started the exam. Once the exam has been started or completed, the purchase is no longer refundable.