Ultimate Bundle

Ultimate Bundle

Every course. Every skill. One bundle. Master Cyber Threat Intelligence, then learn to take disinformation apart.

100% Online • Self-Paced • Start Immediately

Intermediate to
Advanced
• 70,000+ students trained • 4.9/5 average rating

What's Included

  • 80+ hours of training content
  • 190 units covered in around 60 hours of video content
  • CREST accredited training courses
  • 100+ engaging exercises
  • 6000+ practice questions
  • Final exam and certificate for the Practitioner, Advanced and new The Anatomy of Disinformation
Secure checkout 12 months access

Trusted by leading organisations worldwide

Deloitte
United States Air Force
Cyber Security Agency of Singapore
Ernst and Young
UK Ministry of Defence
Barclays
Accenture
KPMG
Raytheon
Hiscox
Crowdstrike
ST Engineering

Three crafts, one complete analyst

The adversary who breaches your network can also poison the story told about the breach. This path trains you for both fights.

3 courses

Most threat work stops at the wire. You read the firewall log, weigh the credential dump, map the intrusion, and hand over a verdict. That is a genuine craft, and it is where this path begins: learning to turn raw feeds and forum boasts into intelligence a defender can actually act on.

But the interesting problems start after that. A breach hits and everyone wants a name, yet motivation, capability and intent rarely line up cleanly, and rival hypotheses splinter the story within days. Learning to weigh those attributes, model the campaign against MITRE ATT&CK and the Diamond Model, and defend a judgement in front of a customer is a second, harder craft.

Then there is the layer that never touches a packet: the deliberate lie. Disinformation drives elections, public health and the narrative around every major incident, and it uses tactics as old as defaced Roman coins. Being able to name the technique, take the claim apart and explain why it works completes the analyst.

The Ultimate Bundle runs all three in sequence: read the fragments, name who is behind them, then see the machinery of manipulation that surrounds it all. You start with the intelligence cycle and finish able to dismantle a conspiracy theory on sight.

Product Overview

The Ultimate Bundle is exactly what it sounds like: every course we make, in one collection. You'll go from your first day in Cyber Threat Intelligence to advanced tradecraft, then beyond, into territory most analysts never touch: the anatomy of disinformation itself.

It starts with the Practitioner course, perfect for beginners and those with basic CTI knowledge. You'll get an in-depth understanding of the role of a CTI analyst and the fundamental skills needed to operate within a Threat Intelligence team.

Next, the Advanced course takes your skills to the next level and turns you into a dominant force in the field. You'll learn cutting-edge techniques and apply them in carefully crafted practical exercises, including researching real cyber criminal groups like the Conti Ransomware Group and Lockbit.

And then comes the newest weapon in the arsenal: The Anatomy of Disinformation. Our brand-new course breaks down exactly how disinformation is built, so you can take it apart. Deepfakes, synthetic media, images stripped of their context, bot-driven amplification and manipulated data: you'll learn to spot them all, at a time when anyone can fake almost anything.

Three courses. One analyst the modern threat landscape can't fool. Remember, the Practitioner course is a prerequisite for the Advanced course, so start with the fundamentals, and The Anatomy of Disinformation can be taken at any point along the way.

What's Included

3 courses in this bundle

Cyber Threat Intelligence Practitioner

The foundation stage. You learn the four-step intelligence cycle, the Diamond Model, the Lockheed Martin Cyber Kill Chain and the Analysis of Competing Hypotheses, then apply them to real cases like Avaddon ransomware and the Carbanak Group. It grounds you in source grading, Boolean and Maltego collection, cognitive bias, dissemination language and UK legislation such as the Computer Misuse Act, all mapped to the CREST CPTIA syllabus.

A firewall log, a leaked credential dump and a boast on a criminal forum all land in your queue at once. Threat intelligence is deciding which one matters, and what it means.

  • Run the full intelligence cycle from direction through collection, analysis and dissemination
  • Map real intrusions using the Diamond Model and the Lockheed Martin Cyber Kill Chain
  • Categorise threat actors by motive, affiliation and TTPs, from nation-state APTs to cybercriminals
6 modules93 lessons Practitioner Level Threat intelligence Analyst
Explore the full course

Advanced Cyber Threat Intelligence Analyst

The attribution stage, building directly on the Practitioner course. This is where you dissect threat actors through motivation, capability and intent, work through the Conti and Lockbit groups, apply MITRE ATT&CK and intelligence preparation of the battlespace, and get into technical ground like IP protocols, C2, exfiltration and the Hammertoss case. It aligns to the CREST CRTIA syllabus and teaches you to defend a verdict, not just form one.

A breach hits and the headline writes itself: a famous nation-state, a familiar group, a confident verdict. A week later three rival hypotheses have splintered the story and none can be proven.

  • Attribute malicious activity at technical, operational and strategic levels and attach an honest confidence band to every claim
  • Assess an actor with the capability, intent and opportunity trinity and defend which threat and which exposure to prioritise first
  • Measure motivation by intensity, reading persistence, investment and adaptation from behaviour rather than stated feelings
7 modules96 lessons Advanced Level Threat Intelligence Analyst
Explore the full course

The Anatomy of Disinformation

The influence stage. It turns your analytical eye on the deliberate lie: conspiracy theories, pseudoscience, moral panics and violent extremism, worked through case studies from the Satanic Panic to QAnon and the Moghaddam staircase of radicalisation. You leave with a diagnostic toolkit for naming the tactic in any tweet, speech or flyer, the one skill the technical courses do not cover.

They've Been Doing This Since Rome. You Just Scroll Faster.

  • Name the exact tactic behind a piece of content instead of reaching for "fake news"
  • Distinguish misinformation, disinformation, malinformation, and propaganda by intent and harm
  • Apply SWOT, the psyops colour spectrum, Facebook's quadrant model, and RAND's Truth Decay to any false claim
5 modules67 lessons The Anatomy of Disinformation
Explore the full course

Who This Course Is For

This bundle is for anyone who wants the full arc of the intelligence craft rather than a single slice of it, and who would rather build the three skills as one connected path than buy them piecemeal.

  • Aspiring CTI analysts who want to start at first principles and keep going all the way to attribution and influence
  • Working analysts studying towards both the CREST CPTIA and CRTIA examinations who want one continuous route
  • Incident responders and security professionals who want to add threat intelligence and disinformation analysis to their day job
  • Journalists, communicators, educators and policy advisors who need the analytical rigour of the technical courses alongside the disinformation toolkit
  • Anyone weighing three separate purchases who would rather commit to the complete progression from foundation to named adversary to weaponised narrative

The path carries three certifications: the Practitioner Level Threat Intelligence Analyst (PTIA) from the foundation course, the Advanced Level Threat Intelligence Analyst (ATIA) from the advanced course, and The Anatomy of Disinformation (CDA). The Practitioner and Advanced courses are aligned to the CREST CPTIA and CRTIA syllabuses respectively.

Student Reviews

Trusted by Security Professionals

Join 70,000+ professionals who have advanced their careers with arcX training

Advanced Career

"The courses provided by arcX are the best in terms of content and structure I have come across, that are aligned to CREST's CPTIA and CRTIA exams. An absolute must for anyone wanting to pursue these certifications but also anyone wanting to gain a solid baseline knowledge set for a career in CTI."

C

Chris

Cyber Threat and Risk Manager

Earned Certification

"Great content and fantastic customer service. Put me in a great position to gain my qualification. 10/10 recommend."

D

Dan

Cyber Security Project Manager

Promoted to Senior

"I have done courses in offensive security, networking, forensics and malware. All from prestigious training vendors. None compare to arcX. I secured a straight transition into a senior CTI role. The platform provided me with insights into my strengths and weaknesses and allowed me to track changes. Very grateful to the guys for this!"

P

Pat

Senior Threat Intelligence Analyst

Frequently Asked Questions

About This Course

The three courses are designed to run in sequence: the Practitioner course teaches the intelligence cycle and core frameworks, the Advanced course builds on it to tackle attribution and technical analysis, and the Disinformation course adds the influence layer the technical courses do not cover. Buying them together commits you to the whole progression rather than a single stage.
Yes. The Advanced Cyber Threat Intelligence course is built to follow the Practitioner course and assumes you already understand the intelligence cycle, the Diamond Model, the kill chain and ACH. Working through the bundle in order gives you that foundation first.
No, and that is the point. It examines conspiracy theories, pseudoscience, moral panics and violent extremism through real case studies rather than logs and malware. It gives you an analytical toolkit for taking apart deliberate lies, complementing the technical intrusion focus of the other two courses.
The Practitioner course is based on the CREST CPTIA syllabus and the Advanced course covers nearly every element of the CREST CRTIA syllabus, including the legal and ethical requirements shared across both. The courses prepare you for those exams; sitting the exams themselves is arranged separately through CREST.
The Practitioner course is built both for newcomers and for professionals formalising existing experience. Even if you respond to incidents daily, it gives you the shared vocabulary, frameworks and dissemination discipline that the Advanced course then extends, so you start the harder material on solid ground.
Expect hands-on exercises throughout: mapping Avaddon and Carbanak to the Diamond Model and kill chain, pulling intelligence requirements from a CISO's email, using Maltego and Boolean search, assessing Conti and Lockbit, applying MITRE ATT&CK, and diagnosing real disinformation cases from the Satanic Panic to QAnon.

General Course FAQs

Click your avatar in the top right corner and select Contact Support, or email us directly at [email protected]. We typically respond within 24-hours.

You will have 12 months access after activating your course in accordance with our Terms & Conditions. You can work through your course at a pace that suits you. Once you have completed your course you will retain access and be able to refresh your knowledge anytime within the access period.

Our courses are delivered on-demand. This means you can start and stop learning whenever you like. There is no time limit and no restriction on how many times you can access course content.

No. CREST exam vouchers need to be purchased separately through CREST or Pearson VUE. You can find further information on our CREST Accreditation page.

Absolutely! Demonstrating your dedication to professional development in cyber security is always valuable. Our certifications are recognised by partner organisations who value our training.

Yes! You can create individual accounts and purchase courses through our portal for instant access. For multiple employees, please contact us for volume pricing.

Yes! We're always happy to speak with industry experts interested in producing high-quality training courses. Become an instructor and help make a positive impact on someone's career.

If you bought a course before this change, you keep lifetime access to it. The new terms only apply to new purchases.

Can't find what you're looking for? Get in touch