EC-Council Certified Threat Intelligence Analyst (CTIA)

[jacob-kraniak]

[Certification] CTIA - EC-Council Certified Threat Intelligence Analyst

Status: Backlog / In Progress / Studying / Completed
Target Completion: [YYYY-MM or QX 2026]
Priority: High / Medium

Overview

Focuses on the full threat intelligence lifecycle — from planning and collection to analysis, dissemination, and integration into SOC/IR/risk management. Practical skills for threat hunters and intelligence analysts.

Official Page: https://www.eccouncil.org/train-certify/certified-threat-intelligence-analyst-ctia/
Exam Blueprint: Available on EC-Council site

Prerequisites / Experience

• Recommended: 2–3 years in SOC, incident response, or security operations.
• No strict prerequisites, but foundational knowledge (Security+ level) is assumed.

Exam Details

• Duration: 2 hours
• Questions: 50 (multiple choice)
• Price: ~$450 USD (exam voucher)
• Passing Score: 70%
• Format: Multiple choice via EC-Council Exam Portal (remote proctored available)

Domains & Study Checklist (Approximate weights)

• Introduction to Threat Intelligence (18%) — Concepts, terminology, intelligence-led security.
• Cyber Threats and Attack Frameworks (18%) — Threat actors, kill chain, MITRE ATT&CK.
• Requirements, Planning, Direction, and Review (16%) — Intelligence requirements, program setup.
• Data Collection and Processing (24%) — Sources, OSINT, processing raw data.
• Data Analysis (16%) — Analytical techniques, tools, reporting.
• Dissemination and Reporting + Threat Hunting / SOC Integration (remaining %) — Actionable intelligence, integration.

Resources & Study Plan

• Official EC-Council CTIA courseware / iLearn
• Hands-on OSINT and threat intel platforms (MISP, OTX, etc.)
• Practice exams
• [Add your specific resources, labs, or notes here]

Milestones / Tasks

• Complete course + domain study
• Hands-on threat intel exercises
• Practice exams (target 80%+)
• Schedule & pass exam
• Claim certification + update Credly / LinkedIn / resume / board
• Plan 3-year renewal (CPEs)

Additional Labels: eccouncil, analyst, intermediate, threat-intelligence