.jpg)
Structure + Content
Gain hands-on experience with industry tools and techniques.
Short Advanced Studies (SAS)
Short Advanced Studies (SAS) are courses that take 30 to 160 hours (1 to 9 ECTS – can be credited towards DAS or MAS). Participants acquire in-depth, industry-relevant insights and skills on current topics in a short space of time. Students who do not wish to take SAS competency assessments are awarded a course certificate (no ECTS in that case).
Do you have any questions?
FAQ: a short and handy guide to BFH’s Short Advanced Studies (SAS)
Portrait
CTI Specialist I is a practical, hands-on module focused on the tools, methodologies, and workflows used by cyber threat intelligence analysts in real-world environments.
Participants will work with primary data sources such as malware samples, IP addresses, domains, certificates, and code reuse indicators. The module emphasizes the importance of structured analytical approaches, including frameworks such as MITRE ATT&CK, the Diamond Model, and DISARM.
A central component of the course is mastering widely used CTI tools and platforms, including Maltego, OpenCTI, VirusTotal, MISP, Shodan, and others. Students will learn how to extract, correlate, and enrich data to generate meaningful intelligence.
The module also introduces key techniques such as pivoting on indicators of compromise (IoCs), applying OSINT methodologies, and understanding adversary tactics, techniques, and procedures (TTPs).
Through case-based exercises and practical labs, participants develop the ability to track threat actors, analyze incidents, and produce actionable insights.
This module equips students with the technical skills required to operate effectively as a CTI analyst in professional environments.
Career opportunities
The SAS CTI-Specialist I program will prepare students for career opportunities in a variety of organizations:
- Law enforcement (police intelligence) – Federal agencies, KAPOs
- Military and government intelligence – CERTs, cyber-troops
- Finance industry – cyber fraud intelligence teams
- Large enterprises – IT/Cyber security and CTI teams
- Consultancy firms with a focus on cyber security
- IT/Cyber intelligence providers and product vendors
- Private boutique (specialized) intelligence firms
Education Goals
This continuing education program has practical learning objectives. Students completing the SAS CTI-Specialist I will understand the concepts of cyber threat intelligence, and have skills for intelligence gathering, analysis, and dissemination. The program will focus on the use of industry-level capabilities, like threat intelligence analysis tools and platform for information sharing. Students will understand how to operationalize their work for a variety of customers and end-users
