Cyber Threat Intelligence: A Hands-On Guide to Threat Modeling, Intelligence Gathering, Forensics, and Operational Security Workflows (Rheinwerk Computing)
A strong cybersecurity program needs to stay informed. With this all-in-one guide, master both the theory and practice of cyber threat intelligence (CTI). Walk through the intelligence lifecycle, and then get up to speed on the latest tools and technologies for intelligence gathering, adversary profiling, network and host-based forensics, threat hunting, and more. Follow practical examples that showcase key CTI strategies in modern security operations.
Understand the cyber intelligence lifecycle and get to know your sources, from OSINT to SIGINTDevelop threat models and conduct forensic analysis of network data and host systems to detect malicious behaviorIntegrate CTI into incident response, explore threat hunting, and see how automation can improve your CTI workflows
Frameworks and Fundamentals
See what cyber threat intelligence is and how it works in the real world. Understand the full intelligence lifecycle, from planning to feedback, and the different sources of intelligence, from OSINT to SIGINT.
Threat Modeling, Analysis, and Response
Learn about CTI tools and techniques. Apply the MITRE ATT&CK framework to model threats, turn network and host data into actionable intelligence, interpret threat detection outputs, assess your automation options including tools like MISP, and more.
Best Practices and Case Studies
Explore real-world workflows and practical examples. See how intelligence supports incident response, threat hunting, and automation, and learn proven methods for handling feed quality, enrichment, and operational integration.
From the Publisher
Your guide to intelligence-based IT security!
Collect, process, and analyze cyber threats to secure your system!
Today’s security teams are overwhelmed with alerts and indicators. But true protection doesn’t come from data alone—it comes from intelligence. In this book, master the core concepts and the concrete skills needed to transform raw data into insights that drive smarter decisions and stronger defenses. Start with the foundational topics: cyber threat intelligence (CTI) principles, techniques, frameworks, and ethical considerations. Gather information from open-source intelligence (OSINT), access hidden services and networks in the dark web, and more.
Then turn to advanced topics: perform threat profiling, mitigate feed poisoning, conduct forensic analysis of network and host-based data, integrate intelligence into incident response, and proactively hunt threats. Automate your CTI workflow to streamline the collection, analysis, and sharing of threat intelligence.
Follow the guidance of a CTI expert with decades of experience both working in and writing about system administration and IT security. Walk through carefully crafted case studies that provide insights for security analysts working in real-world environments.
Cyber intelligence lifecycle OSINT, HUMINT, and SIGINT Adversary profiling Threat intelligence feed integrity Network and host-based forensics Incident response Threat hunting Automation
Inside the book:
Whether you’re a security analyst, a SOC team member, or a security engineer, if you’re interested in cyber threat intelligence, then this is the book for you. New to CTI? Start with a deep conceptual grounding in the lifecycle, intelligence sources, and frameworks. Ready to go beyond the indicators? Dive into hands-on techniques, detailed workflows, and practical examples drawn from real security operations.
Expert knowledge of CTI tools and techniquesPractical, detailed implementation examplesIllustrations, diagrams, tables, and background informationA comprehensive index
Meet the author:
Haydar Yener Arici is a senior system and digital forensic specialization with more than 23 years of professional experience in IT infrastructure, system administration, digital forensics, and open-source intelligence (OSINT). He is the author several publications in Turkey, including books about Windows Server administration, enterprise IT security, and digital evidence handling. He was a Microsoft Certified Trainer for more than ten years and has taught at and collaborated with academic instructions on topics such as forensic readiness, cybersecurity policy development, and enterprise system hardening.
Haydar has a master’s degree in digital forensics. He is currently a system engineer at İşNet, a technology company in Istanbul, Turkey.
Customer Reviews
4.8 out of 5 stars 126
—
4.0 out of 5 stars 9
—
4.7 out of 5 stars 10
Price
$48.20$48.20 $64.99$64.99 $54.99$54.99 $54.99$54.99 $47.73$47.73
What is it? (What does it teach)
Comprehensive guide to pen testing and cybersecurity! The comprehensive guide to hardware pentesting for IT security. Your comprehensive guide to cryptography, from theory to practice! A comprehensive guide to modern software design principles and patterns. Develop your own gen AI applications with Python!
What you’ll learn?
Learn to identify and address IT system vulnerabilities, set up a virtual environment for testing hacking tools like Kali Linux and Wireshark, and master pen testing techniques to secure networks, mobile, cloud, and IoT infrastructures. Learn how to identify hardware vulnerabilities and attack vectors, use pentesting tools to think like a hacker, and protect users from hardware-based threats. Learn cryptography fundamentals, explore encryption algorithms, and apply strategies to secure data and web environments, while gaining practical skills for managing security in cloud environments, cryptocurrency, AI, and quantum computing. Learn to apply software design principles and patterns to build high-quality, scalable, and maintainable programs. Learn to to work with pretrained LLM and NLP models on Hugging Face and LangChain, create vector databases, implement retrieval-augmented generation, and add agentic systems using frameworks like crewAI and AutoGen.
Who is this book for?
Administrators Security administrators, IT consultants, developers, admin teams Data protection engineers, security/cybersecurity administrators, developers. Software developers and architects. Python developers
Key Features?
Step-by-step instructions with diagrams and screenshots. Step-by-step instructions on how to use hacking tools for security tests and countermeasures. The book is divided into two parts for easier learning. Includes code examples throughout and can be read cover-to-cover or used as a practical reference guide. Step-by-step instructions and detailed listings, with downloadable code examples.
Level of difficulty?
This book provides an accessible introduction to hacking and IT security, ideal for beginners while offering depth for system and security administrators building a solid foundation. The book starts with the basics of hardware pentesting and gradually progresses to more advanced techniques, assuming some prior cybersecurity experience. Cryptography beginners. This book is appropriate for developers of all experience levels. Python programming is a prerequisite for this book because the language is central to most AI systems.