In this course, you will dive into the core aspects of threat intelligence, learning to identify and analyze a wide range of cyber threats such as ransomware, identity theft, and business email compromise. The course is designed for intermediate learners and covers intelligence collection methodologies like OSINT, HUMINT, and SIGINT, helping you gain expertise in understanding the tactics, techniques, and procedures (TTPs) of adversaries. You’ll explore threat actor landscapes and gain insights into advanced persistent threat (APT) campaigns, using frameworks like MITRE ATT&CK and applying NIST 800-53 security controls to protect both business assets and personal data.
Along with technical analysis, you’ll develop key communication skills to present your findings effectively to both technical teams and non-technical stakeholders, including executives and decision-makers. The course emphasizes report-writing and oral presentations, teaching you to communicate complex intelligence clearly and persuasively. You will leave with the skills to transform threat data into actionable intelligence, enabling you to make informed decisions and drive security initiatives that protect organizations from evolving cyber risks.
This course is ideal for IT and cybersecurity professionals looking to elevate their skills in threat detection, incident response, and security architecture. It also caters to Chief Information Security Officers (CISOs) and security leaders aiming to update their strategies for managing evolving threats. Business executives, including CEOs and other senior leaders, will benefit from understanding cybersecurity risks and compliance, while cybersecurity analysts seeking advanced investigative and analytical techniques will find this course essential for career growth.
To get the most out of this course, participants should have a beginner-level understanding of IT or cybersecurity, along with familiarity in basic networking and security concepts. While certifications like A+, Network+, or Security+ are helpful, they are not mandatory for enrollment. The course is designed to build on foundational knowledge, making it accessible to those with some prior experience in the field.
By the end of this course, learners will be able to differentiate between data, intelligence, and threats, and identify reliable sources for threat data collection. They will also learn to apply intelligence collection methodologies to analyze and correlate threat data, evaluate threats across multiple sources, and conduct risk assessments. Additionally, learners will be able to craft strategic intelligence reports tailored to different audiences, effectively communicating complex findings through data storytelling techniques.
In this course, you’ll learn how to identify, analyze, and respond to evolving cyber threats. You’ll focus on advanced threat intelligence techniques, including data collection, analysis of threat actors, and malware correlation, using frameworks like MITRE ATT&CK and NIST 800-53. Through expert instruction, real-world case studies, and hands-on exercises, you’ll gain the skills to interpret intelligence from multiple sources, assess risks, and develop strategic reports. By the end of this course, you’ll be equipped to protect your organization from cyber threats, effectively communicate findings, and lead proactive defense initiatives across your business.
What's included
1 video1 reading
Show info about module content
1 video•Total 4 minutes
Intro Video to Course •4 minutes
1 reading•Total 5 minutes
Welcome to the Course: Course Overview•5 minutes
Introduction to Threat Intelligence
Module 2•2 hours to complete
Module details
In this module, you’ll learn how to embed security directly into your applications and development processes. You’ll explore Secure by Design principles, secure coding techniques, and secure configuration practices to prevent critical vulnerabilities. Through practical demonstrations, static and dynamic application security testing, and runtime protection strategies, you’ll develop the skills to identify, mitigate, and manage vulnerabilities throughout the software development lifecycle. This module emphasizes proactive security practices aligned with industry standards such as OWASP Top 10 and SANS Top 25 to ensure robust, production-ready applications.
In this module, you’ll learn how to analyze, attribute, and model cyber threats using structured, evidence-based intelligence techniques. You’ll work with methods like ACH, red teaming, and scenario modeling to evaluate adversary behavior, identify analytical biases, and communicate confidence levels clearly. You’ll also build strategic threat models using frameworks such as STRIDE, ATT&CK, and NIST 800-30, ensuring your assessments align with real organizational risk. By focusing on rigorous analysis and defensible reasoning, this module prepares you to produce reliable intelligence that supports strong, strategic cybersecurity decisions.
In this module, you’ll learn how to perform advanced threat research, correlate complex attack indicators, and map adversary infrastructure across multiple data sources. You’ll explore collection planning, OSINT tradecraft, malware analysis workflows, and behavioral fingerprinting techniques to uncover patterns in threat activity. Through hands-on tools, graph analytics, and real-world case studies, you’ll develop the skills to connect campaigns, identify threat actors, and build accurate intelligence assessments that strengthen attribution and support proactive defense.
Hands-On-Learning: Use VirusTotal, Any. Run, and Shodan for Malware and Infrastructure Research •10 minutes
1 discussion prompt•Total 10 minutes
Impact of Threat Intelligence Platforms in Real-World Threat Analysis•10 minutes
Reporting and Communication of Intelligence
Module 5•2 hours to complete
Module details
In this module, you’ll learn how to turn complex technical threat intelligence into clear, actionable insights tailored for different audiences across an organization. You’ll practice structuring reports, communicating uncertainty with confidence, and presenting intelligence in formats suited for executives, SOC teams, legal stakeholders, and board members. Through hands-on exercises and real-world examples, you’ll develop the skills to write professional intelligence reports, use visual storytelling, and leverage modern reporting tools to support strategic decision-making and drive meaningful security actions.
Adapting Intelligence for Diverse Stakeholders •10 minutes
Course Conclusion
Module 6•1 hour to complete
Module details
In this final module, you’ll apply everything you’ve learned by analyzing a simulated threat actor campaign and turning raw intelligence into a clear, stakeholder-ready brief. You’ll correlate indicators across multiple sources, assess risk and confidence levels, and use structured analysis and reporting techniques to deliver actionable insights that support real-world security decision-making.
What's included
1 video1 peer review
Show info about module content
1 video•Total 3 minutes
Course Wrap-Up•3 minutes
1 peer review•Total 60 minutes
Project: Threat Actor Campaign Analysis & Intelligence Brief •60 minutes
Our purpose at Starweaver is to empower individuals and organizations with practical knowledge and skills for a rapidly transforming world. By collaborating with an extensive, global network of proven expert educators, we deliver engaging, information-rich learning experiences that work to revolutionize lives and careers. Committed to our belief that people are the most valuable asset, we focus on building capabilities to navigate ever evolving challenges in technology, business, and design.
OK
Why people choose Coursera for their career
Felipe M.
Learner since 2018
"To be able to take courses at my own pace and rhythm has been an amazing experience. I can learn whenever it fits my schedule and mood."
Jennifer J.
Learner since 2020
"I directly applied the concepts and skills I learned from my courses to an exciting new project at work."
Larry W.
Learner since 2021
"When I need courses on topics that my university doesn't offer, Coursera is one of the best places to go."
Chaitanya A.
"Learning isn't just about being better at your job: it's so much more than that. Coursera allows me to learn without limits."
When will I have access to the lectures and assignments?
To access the course materials, assignments and to earn a Certificate, you will need to purchase the Certificate experience when you enroll in a course. You can try a Free Trial instead, or apply for Financial Aid. The course may offer 'Full Course, No Certificate' instead. This option lets you see all course materials, submit required assessments, and get a final grade. This also means that you will not be able to purchase a Certificate experience.
What will I get if I purchase the Certificate?
When you purchase a Certificate you get access to all course materials, including graded assignments. Upon completing the course, your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile.
Is financial aid available?
Yes. In select learning programs, you can apply for financial aid or a scholarship if you can’t afford the enrollment fee. If fin aid or scholarship is available for your learning program selection, you’ll find a link to apply on the description page.