Threat Intelligence and Threat Hunting (IMCS-018) Training Course

Threat Intelligence and Threat Hunting

Threat intelligence helps organisations understand who is likely to attack them and how, while threat hunting proactively searches for attackers that have evaded…

5 daysClassroom or online

14Upcoming dates

8Cities

£2,750Fees from

Course overview

Why Attend

Threat intelligence helps organisations understand who is likely to attack them and how, while threat hunting proactively searches for attackers that have evaded automated defences.

This LLMI course covers the intelligence life cycle, sources and feeds, threat actor profiling, frameworks for attacker techniques, operationalising intelligence, hypothesis-driven hunting, hunt techniques and data sources, and measuring intelligence and hunting programmes. Participants plan and execute a simulated hunt.

The course suits security analysts and managers developing proactive capabilities.

Course Objectives

Explain the threat intelligence life cycle

Use intelligence sources and frameworks

Profile threat actors relevant to the organisation

Operationalise intelligence in defences

Plan and conduct threat hunts

Measure intelligence and hunting value

Target Audience

Security analysts

SOC staff

Threat intelligence analysts

Incident responders

Security managers

Risk professionals

Course Methodology

Concept sessions

Framework exercises

Simulated hunt

Case studies

Group discussions

Course outline

1Day 1: Threat Intelligence Fundamentals

Intelligence types
Life cycle
Requirements
Sources
Sharing communities
Exercise: Intelligence requirements

2Day 2: Analysis and Frameworks

Attacker technique frameworks
Kill chain
Indicators and behaviours
Analytic methods
Bias
Workshop: Mapping a campaign

3Day 3: Operationalising Intelligence

Detection engineering
Blocking and enrichment
Risk reporting
Strategic intelligence
Case study: Intelligence-led defence
Exercise: Intelligence report

4Day 4: Threat Hunting

Hunting approaches
Hypotheses
Data sources
Techniques
Documentation
Simulation: Threat hunt

5Day 5: Programme Value

Metrics
Automation
Team structure
Improvement
Roadmap
Capstone: Intelligence and hunting plan

Frequently asked questions

How long is the Threat Intelligence and Threat Hunting course?

The course runs over 5 days of classroom training, usually Monday to Friday.

When is the next Threat Intelligence and Threat Hunting course?

The next public date is 16 - 20 Nov 2026 in London. There are 14 upcoming dates in total.

Where is this course held?

Upcoming sessions run in London, Istanbul, Cape Town, Barcelona, Rome, Munich, Amsterdam, Vienna.

Can I take Threat Intelligence and Threat Hunting online?

Yes. Every date can also be joined live online in a virtual classroom with the trainer, for £1,280 per participant. Choose "Live online" in the dates table when you register.

How much does the course cost?

Fees start from £2,750 per delegate, depending on the city. Fees include tuition and course materials.

Do participants receive a certificate?

Yes. Delegates who complete the course receive a London Leadership Management Innovation certificate of completion.

Can this course be delivered in-house for our team?

Yes. LLMI can tailor and deliver this course privately for your organisation at your premises or in one of our training cities.

Course information last updated 14 November 2026.

Threat Intelligence and Threat Hunting

Course overview

Course outline

Dates and fees

Frequently asked questions

More IT Management and Cyber Security courses

AI Security: Protecting Machine Learning Systems

Application Security and Secure Software Development

Artificial Intelligence (AI) in Cyber Forensics: Investigating Advanced Cyber Crimes

Training a team?