312-85 Exam Information and Outline
Certified Threat Intelligence Analyst (C|TIA)
Syllabus Update Checked on: November 12, 2026
312-85 Exam Syllabus & Study Guide
Before you start practicing with our exam simulator, it is essential to understand the
official 312-85 exam objectives. This course outline serves as your roadmap.
The information below reflects the 2026 syllabus defined by
EC-Council.
Below are complete topics detail with latest syllabus and course outline, that will help you good knowledge about exam objectives and topics that you have to prepare. These contents are covered in questions and answers pool of exam.
- Exam Format
- 50 multiple-choice questions; 2 hours; passing score 70%
- Introduction to Threat Intelligence
- Intelligence concepts, types and lifecycle
- Cyber Threats and Kill Chain Methodology
- Threat actors, TTPs, IoCs, Cyber Kill Chain and MITRE ATT&CK
- Requirements, Planning, Direction and Review
- Intelligence requirements and program planning
- Data Collection and Processing
- OSINT, HUMINT, CYBINT; feeds and bulk data collection
- Data Analysis
- Analytic techniques, threat modelling and validation
- Intelligence Reporting and Dissemination
- Report types, sharing platforms and standards (STIX/TAXII)
- Threat Hunting and Detection
- Hunting methodologies and threat intelligence in SOC/IR