ECCouncil 312-85 考試大綱：

主題	簡介
主題 1	Data Analysis: This topic focuses on enhancing analytical skills for Threat Analysts related to data analysis techniques relevant to threat analysis. They will understand the threat analysis process and how to fine-tune their analysis to improve accuracy and effectiveness in identifying potential threats.
主題 2	Data Collection and Processing: Targeted at Threat Analysis Managers, this section covers various aspects of threat intelligence data collection. Candidates will learn about managing threat intelligence collection processes, identifying sources and feeds, and acquiring data effectively. They will also explore bulk data collection techniques, data processing methods, and how to enrich threat data in cloud environments.
主題 3	Dissemination and Reporting of Intelligence: In this section, the exam emphasizes communication skills for candidates who will recognize the qualities of effective communication in reporting threat intelligence to their organizations.
主題 4	Threat Intelligence in SOC Operations, Incident Response, and Risk Management: This topic focuses on integrating and supporting incident response efforts and contributes to overall risk management strategies within organizations.
主題 5	Requirements, Planning, Direction, and Review: This section is aimed at Threat Intelligence Managers and emphasizes analyzing the organization's current threat landscape. Candidates will engage in requirements analysis to plan an effective threat intelligence program. They will learn how to establish management support and build a competent threat intelligence team to enhance organizational security.
主題 6	Cyber Threats and Attack Frameworks: In this section, the exam focuses on Threat Intelligence Specialists and defines key cyber threats, including advanced persistent threats (APTs). Candidates will prove skills in the Cyber Kill Chain, MITRE ATT&CK framework, and the Diamond Model, which is essential for understanding attack methodologies. They will also learn to identify indicators of compromise (IoCs) that signal potential security breaches.
主題 7	Introduction to Threat Intelligence: This section of the exam measures the skills of Threat Analysts and Managers and covers fundamental concepts of cyber threat intelligence. Candidates will learn about the threat intelligence lifecycle and various frameworks that guide the collection and analysis of threat data. They will also explore threat intelligence platforms (TIPs) and how these platforms function in cloud environments. Additionally, candidates will examine future trends in threat intelligence and the importance of continuous learning in this rapidly evolving field.