Enter your details to download

Business email required. By downloading, you agree to our Privacy Policy.

Resources · Training

Intel Operations training.

Eight free decks from the analysts who run these programs. Each one teaches the CTI craft first, shows how to do it without a platform, then shows where it lives in Morado.

Every deck ends with a hands-on workshop and a checklist your team can use the same day.

The series

Learn the craft, then run it in Morado.

The decks build on each other, from requirements to maturity. Start with Part 01 and work in order, or jump to the practice your team needs.

Part 01 · 90-minute workshop

Intelligence Requirement Production

Turn stakeholder questions into PIRs and EEIs that drive collection, hunts and reporting, starting from Morado's recommended requirements.

In Morado: Requirements & Stakeholders

Download deck (.pptx) →
Part 02 · 60-minute workshop

RFIs and Escalation

Decide when a question is an RFI rather than a standing requirement, write one that can be answered, and know when to escalate.

In Morado: Stakeholder Accounts

Download deck (.pptx) →
Part 03 · 75-minute workshop

Collection Management

Map sources to requirements so spend, coverage and gaps are visible, first on a whiteboard, then in Morado's collection management framework.

In Morado: TIP & Indicator Management

Download deck (.pptx) →
Part 04 · 90-minute workshop

Hunting Against Intelligence Requirements

Write a hypothesis tied to a requirement before you query, time-box the hunt, and record what it found, including nothing.

In Morado: Threat Hunting

Download deck (.pptx) →
Part 05 · 90-minute workshop

Reporting That Answers EEIs

Finished intelligence as a decision product: bottom line up front, every section mapped to an EEI, gaps stated.

In Morado: Investigations & Reporting

Download deck (.pptx) →
Part 06 · 60-minute workshop

Dissemination and Feedback

Get each product to the right people at the right TLP, then ask feedback questions you can act on.

In Morado: Stakeholder Accounts

Download deck (.pptx) →
Part 07 · 75-minute workshop

Detection Signatures

Turn hunt findings into rules the SOC can run, with intent, platform, owner and lineage back to the requirement.

In Morado: TTP Coverage & Detection

Download deck (.pptx) →
Part 08 · 90-minute workshop

CTI-CMM Self-Assessment

Score your program honestly against CTI-CMM, set dated targets, and back every score with evidence from the work.

In Morado: Program Maturity

Download deck (.pptx) →
Hands-on help

Want us to walk your team through it?

Our analysts can run a live session for your team or your MSSP analysts, on these decks or on any part of the platform. Setting up Morado? The guides cover setup, use and integrations.

Contact Us

See Morado in action.

Book a demo and see Morado built around your organization: your exposure, your threats and the workflows to act on them.

Questions first? Contact us.