Structure + Content
Advance your CTI capabilities with deep web investigations, blockchain analysis, and threat hunting.
Short Advanced Studies (SAS)
Short Advanced Studies (SAS) are courses that take 30 to 160 hours (1 to 9 ECTS – can be credited towards DAS or MAS). Participants acquire in-depth, industry-relevant insights and skills on current topics in a short space of time. Students who do not wish to take SAS competency assessments are awarded a course certificate (no ECTS in that case).
Do you have any questions?
FAQ: a short and handy guide to BFH’s Short Advanced Studies (SAS)
Portrait
CTI Specialist II builds on practical skills by exploring advanced intelligence domains and specialized applications of cyber threat intelligence.
The module focuses on secondary intelligence sources, including commercial feeds, cybersecurity partners, and internet infrastructure providers. Participants learn how to integrate and evaluate these sources to enhance situational awareness.
A significant part of the course is dedicated to emerging domains such as blockchain analysis and cryptocurrency-related investigations. Students gain an understanding of decentralized finance (DeFi), transaction tracing, and techniques used in cybercrime, including laundering mechanisms.
The module also covers deep and dark web monitoring, equipping participants with the skills to conduct investigations in less accessible parts of the internet.
Beyond intelligence collection, the course highlights how CTI supports broader cybersecurity functions such as threat hunting, detection engineering, vulnerability management, attack surface reduction, and fraud prevention.
Through practical exercises and case studies, participants learn to apply intelligence in operational contexts and contribute to proactive defense strategies.
This module prepares students to address complex and evolving cyber threats in modern organizations.
Career opportunities
The SAS CTI-Specialist II program will prepare students for career opportunities in a variety of organizations:
- Law enforcement (police intelligence) – Federal agencies, KAPOs
- Military and government intelligence – CERTs, cyber-troops
- Finance industry – cyber fraud intelligence teams
- Large enterprises – IT/Cyber security and CTI teams
- Consultancy firms with a focus on cyber security
- IT/Cyber intelligence providers and product vendors
- Private boutique (specialized) intelligence firms
Education Goals
This continuing education program has practical learning objectives. Students completing the SAS CTI-Specialist II will understand the concepts of cyber threat intelligence, and have skills for intelligence gathering, analysis, and dissemination. The program will focus on the use of industry-level capabilities, like threat intelligence analysis tools and platform for information sharing. Students will understand how to operationalize their work for a variety of customers and end-users.
