Intel Operations Training Materials
Eight training decks that teach CTI craft first, then show how Morado operationalizes each practice in the platform.
Module 01
Intelligence Requirement Production
From stakeholder questions to a living collection agenda. Learn how to write PIRs and EEIs that drive collection, hunts, and reporting — then operationalize them in Morado at /intel_requirements.
Download deck (.pptx)
Module 02
RFIs and Escalation
Time-bound questions that stay visible, assignable, and escalatable. Distinguishes RFIs from standing IRs and shows how Morado tracks status across /rfis.
Download deck (.pptx)
Module 03
Collection Management and CMF
Map sources to requirements so spend, hunts, and gaps are visible. Covers source registers, coverage dashboards, and Morado’s CMF at /cmf and /sources.
Download deck (.pptx)
Module 04
Hunting Against Intelligence Requirements
Hypotheses tasked to data and linked to IRs and EEIs. Turns hunts into records that move coverage metrics in Morado at /hunts.
Download deck (.pptx)
Module 05
Reporting That Answers EEIs
Finished intelligence as a decision product — every section maps to an EEI. Practice structured reporting in Morado at /reports and /feedback.
Download deck (.pptx)
Module 06
Dissemination and Feedback
Intelligence that never reaches the decision-maker did not happen. Covers audience routing, feedback loops, and Morado workflows at /feedback and /customers.
Download deck (.pptx)
Module 07
Detection Signatures
How CTI pays down hunt findings in SOC time. Translate intelligence into durable detections and manage them in Morado at /signatures.
Download deck (.pptx)
Module 08
CTI-CMM Self-Assessment
Score honestly, pick targets, then prove it in the platform. Walks teams through CTI capability maturity and Morado’s assessment at /library/cti-cmm.
Download deck (.pptx)