Adjunct Faculty — Cyber Threat Intelligence

University of Maryland (UMD). I teach hands‑on Cyber Threat Intelligence (CTI) with a focus on tradecraft, analytic rigor, and operational relevance. On this page you’ll find my syllabus, office hours, and curated CTI resources for students and practitioners.

MITRE ATT&CK STIX/TAXII YARA & Sigma Threat Hunting Intel Analysis

Current Syllabus Contact GitHub

About

I’m an adjunct faculty member at the University of Maryland with professional experience in software engineering, defense, and cyber operations. My teaching emphasizes analytic tradecraft, structured techniques, and the translation of intelligence into action for SOCs, hunt teams, and leadership.

Areas of Interest

  • Threat group analysis & attribution caveats
  • Building and defending secure software applications
  • Collection strategies & bias mitigation
  • Production workflows, PIRs, and stakeholder mapping
  • Detection engineering from intel (ATT&CK → Sigma/YARA)

Teaching

Cyber Threat Intelligence (CTI)

Outcomes: Students learn to plan collection, analyze intrusion sets, communicate decision‑quality intel, and produce detections informed by ATT&CK.

Topics: Kill Chain & ATT&CK, CTI lifecycle, STIX/TAXII, malware triage, campaign analysis, reporting & briefing, detection engineering, ethics & law.

Download Syllabus Course Policies

CTI Resources

Practitioner Toolkit

Reading

  • Analysis of Competing Hypotheses (ACH)
  • Structured analytic techniques for intelligence
  • Hunt team case studies and DFIR write‑ups

Talks & Workshops

Recent

  • CTI to Detection: From ATT&CK to Action (workshop)
  • Intelligence Requirements that Actually Drive Collection
  • Bias & Confidence in CTI Reporting

Invite Me

I’m available for guest lectures and practitioner workshops. Reach out with date, format, and audience.

Request a session

Contact

Email: [enable JS]
GitHub: @bfarmerUMD

For students: include your section and a concise subject. For sensitive topics, request a 1:1 meeting.

Office Hours

  • TBD and by appointment (Zoom available)