Hootix Academy

Threat Intelligence & Hunting Certification

Hunt the adversary

Key facts

About the Threat Intelligence & Hunting certification

Operationalize threat intel and proactive hunting: the intelligence lifecycle, MITRE ATT&CK, IOCs vs TTPs, hypothesis-driven hunting, detection engineering and turning intel into detections.

What you will learn

The official Threat Intelligence & Hunting study course covers:

  1. Foundations of Threat Intelligence — Establishes the core concepts, vocabulary, and lifecycle that underpin every threat-intelligence programme.
  2. MITRE ATT&CK Framework — Deep dive into the ATT&CK knowledge base — its structure, use cases, and how to apply it to detection, hunting, and intel analysis.
  3. Threat Actor Profiling and Adversary Intelligence — Build structured knowledge of threat actor groups, their motivations, and how to profile adversaries to anticipate their next move.
  4. Hypothesis-Driven Threat Hunting — Move from reactive alerting to proactive hunting — formulate, execute, and document structured hunt operations using real telemetry.
  5. Detection Engineering — Translate threat intelligence into durable, high-fidelity automated detections using Sigma, YARA, and modern SIEM platforms.
  6. Operationalising Intelligence: From Intel to Action — Close the loop between intelligence production and security operations — automating intelligence workflows, measuring programme effectiveness, and in…
  7. Exam Readiness: Threat Intelligence & Hunting — Consolidate all key concepts, understand the exam structure, and build a confident exam-day strategy.
  8. Hands-on Lab — From Intel to Detection — A threat-intelligence capstone in Google Colab: parse and prioritize IOCs with the Pyramid of Pain, profile a threat actor by ATT&CK TTPs, run a hypo…

Frequently asked questions

Is the Threat Intelligence & Hunting certificate verifiable?
Yes. Every issued Hootix Academy certificate carries a unique credential code that anyone can verify online.
How is the Threat Intelligence & Hunting exam structured?
It is a 90-minute ID-verified multiple-choice exam of 60 questions; you need 70% to pass.
Do I need to buy the course to take the exam?
Each certification is sold three ways: the exam on its own, the online course on its own, or both together as a Course + exam bundle (the bundle price is the course price plus the exam price).
How long does the Threat Intelligence & Hunting course take?
About 32 hours of self-paced study.

Related certifications