top of page
CTI_in_Agentic_Times.png

CTI IN AGENTIC TIMES

Practical, verifiable & hybrid AI for cyber threat intelligence.
                                                       

Price: 

upon request

​

Duration: 

3 days

Format: 

Online / Offline 

​

Level: 

Intermediate / Advanced

Trainers · Costin Raiu & Vicente Díaz_1x.png

Trainers 

Costin Raiu & Vicente Díaz

About the training: 

Costin Raiu
CYBER-PALEONTOLOGIST · APT RESEARCHER

Costin is a cyber paleontologist and researcher specializing in analyzing advanced persistent threats and high-level malware attacks. He was most recently the director of GReAT, the team that researched the inner workings of Stuxnet, Flame, Duqu, Turla, Lazarus, Moonlight Maze or the Equation Group.

Costin has over 30 years of experience in ITSec, having written his first antivirus when he was 16. He is a member of the Virus Bulletin Technical Advisory Board, a member of the Computer AntiVirus Researchers' Organization (CARO) and a founding member of TLPBLACK, a visionary cybersecurity company.

Costin enjoys playing chess, taking photos and reading science fiction literature. He holds a 2 DAN black belt in Taekwondo.


Vicente Díaz

THREAT INTELLIGENCE & THREAT HUNTING

Vicente is a researcher specialising in threat intelligence, threat hunting and the investigation of advanced threats. Most recently at Google, he was a Threat Intelligence Strategist for VirusTotal and Product Manager for Google Threat Intelligence. He previously spent almost a decade with Kaspersky's GReAT as Deputy Director for Europe — co-creating and managing the APT Intelligence Reporting service — and was e-crime manager at S21sec. He holds a degree in Computer Science and a master's in Artificial Intelligence.

Practical, verifiable & hybrid AI for cyber threat intelligence.

Artificial intelligence is reshaping cyber threat intelligence faster than any technology before it — and most of what's written about it is hype. This course cuts through the noise. Over three days you'll learn to integrate AI and autonomous agents into real CTI workflows the way working analysts actually do it: pragmatically, securely, and without locking yourself to a single vendor.

Rather than chasing the latest model, the course is built around hybrid architectures — where deterministic code, local open-weight models and frontier LLMs each do what they're best at. You'll move well beyond prompt engineering to build secure, local, auditable CTI pipelines: automated OSINT ingestion and campaign tracking, AI-assisted investigation and alert triage, automated detection engineering, and sandboxed, reproducible malware analysis.

​

Every use case is one the trainers have faced professionally and solved themselves. You'll leave able to make these tools work for you — and, just as importantly, to stay in control of them.

Who should attend: CTI analysts, threat hunters, detection engineers, SOC and DFIR practitioners who want to use AI and agents in their daily work. Comfort with the command line and basic scripting is recommended; no prior AI/ML experience required.

bottom of page