search menu icon-carat-right cmu-wordmark

Thinking Like an Analyst

This tutorial introduces the basic skills necessary to be an effective cyber analyst. The central focus is analytical acumen, or "how to think."

Practical application of portions of the analytic process will be interspersed throughout the presentation, building around a scenario of a company at risk while conducting IT business processes.


The target audience for this course is staff new to incident handling processes and related technology. The course is also beneficial for staff with limited incident handling experience who are seeking formal training to improve their skills or benchmark their existing operations who are in other parts of an enterprise and want a basic understanding of incident handling.


Major topics covered include:

  • Framing the analysis context
  • Logical fallacies
  • Data gathering
  • Microanalysis
  • Macroanalysis
  • Awareness of assumptions
  • The various forms of bias
  • Reporting


It is recommended, but not required, that attendees be familiar with Internet services and protocols (for example DNS, TCP, UDP, HTTP, HTTPS) and have some system or network administration background. Students will not need laptop computers during the tutorial.


This one day course meets at the following times:

8:30 a.m. - 5:00 p.m.

This course may be offered by special arrangement at customer sites. For details, please email or telephone at +1 412-268-1817.

Course Questions?

Phone: 412-268-7388
FAX: 412-268-7401

Training courses provided by the SEI are not academic courses for academic credit toward a degree. Any certificates provided are evidence of the completion of the courses and are not official academic credentials. For more information about SEI training courses, see Registration Terms and Conditions and Confidentiality of Course Records.