Cyber Threat Intelligence: Collect, Analyze, and Operationalize Actionable Threat Intelligence

Rheinwerk Publishing, Inc · Haydar Yener Arıcı

Jul 2026 · Packt Publishing Ltd

Ebook

758

Pages

Tools

About this ebook

Transform raw threat data into intelligence that strengthens security operations. Apply collection, profiling, forensics, threat hunting, incident response, and automation techniques.Key Features

Full-lifecycle coverage connects intelligence planning, collection, analysis, and feedback
Operational examples unite threat profiling, forensics, incident response, and threat hunting
Platform and automation guidance supports feed enrichment, integration, and scalable workflows

Book DescriptionEffective cyber threat intelligence starts with a disciplined understanding of what intelligence is, where it comes from, and how it supports decisions. Readers follow the intelligence lifecycle from planning through feedback and compare sources including OSINT, HUMINT, SIGINT, and material from the deep and dark web. The central chapters turn collection into analysis. Threat actor profiling, behavioral mapping, feed integrity, poisoning, and enrichment are connected with network-centric forensics, host-based analysis, and Windows telemetry. The MITRE ATT&CK framework and practical workflows help readers convert technical evidence into clear, actionable intelligence rather than isolated indicators. The final stage integrates intelligence with security operations. Incident response, proactive threat hunting, automation, and threat intelligence platforms are explored through practical examples and case-based guidance, with attention to feed quality and operational adoption. By the end of this journey, readers can organize collection, assess adversary behavior, interpret forensic evidence, and apply intelligence across modern defensive workflows.What you will learn

Explain the cyber intelligence lifecycle
Collect intelligence from OSINT, HUMINT, and SIGINT
Profile threat actors and map their behavior
Analyze network and host forensic evidence
Integrate intelligence into incident response
Automate threat intelligence workflows

Who this book is for

Best suited to security analysts, cyber threat intelligence teams, and security operations center professionals. It supports readers who need to strengthen intelligence collection, forensic analysis, incident response, threat hunting, automation, and operational integration.

Transform raw threat data into intelligence that strengthens security operations. Apply collection, profiling, forensics, threat hunting, incident response, and automation techniques.Key Features Full-lifecycle coverage connects intelligence planning, collection, analysis, and feedback Operationa...

Discover more

About the author

The Rheinwerk Computing series offers new and established professional comprehensive guidance to enrich the readers' skillsets and enhance their career prospects. Their publications are written by leading experts in the fields of programming, administration, security, analytics, and more. Each book is detailed and hands-on to help readers develop essential, practical skills that they can apply to their daily work.

Haydar Yener Arıcı is a senior systems and cybersecurity specialist with more than 23 years of experience in IT infrastructure, system administration, digital forensics, and open-source intelligence (OSINT). Throughout his career, he has conducted extensive work in critical areas such as the design, operation, and security of enterprise IT infrastructures; digital evidence analysis; and the establishment and development of corporate cybersecurity processes. Haydar holds one bachelor's degree and three master's degrees, combining his academic background with extensive field experience to develop projects at both technical and strategic levels. He is the author of six books published in Turkey covering Windows Server administration, enterprise IT security, and digital evidence management. These works serve as important reference resources for system administrators, cybersecurity professionals, and digital forensics specialists, and are widely used within the industry. For many years, Haydar served as a Microsoft Certified Trainer (MCT), during which he delivered advanced training to numerous IT professionals in system administration, infrastructure security, and enterprise security architectures. He has also collaborated with universities and academic institutions, providing training, consultancy, and academic contributions in areas such as forensic readiness, cybersecurity policy development, and enterprise system hardening. Haydar continues his work by combining technical expertise with academic knowledge and field experience, focusing on enterprise security architectures, digital forensics, and advanced system security.

Rate this ebook

Tell us what you think.

Reading information

Smartphones and tablets

Install the Google Play Books app for Android and iPad/iPhone. It syncs automatically with your account and allows you to read online or offline wherever you are.

Laptops and computers

You can listen to audiobooks purchased on Google Play using your computer's web browser.

eReaders and other devices

To read on e-ink devices like Kobo eReaders, you'll need to download a file and transfer it to your device. Follow the detailed Help Center instructions to transfer the files to supported eReaders.

Flag as inappropriate