MITRE ATT&CK Defender MAD CTI

Exam cost

$579 USD (historical estimate)

Questions · time · passing score

The certification requires earning five distinct badges, each with its own assessment. The final certification is awarded upon successful completion of a comprehensive examination. Specific details on number of questions, time limit, question types, and passing score for the comprehensive exam are not publicly available, though badge assessments may have individual passing criteria.

Prerequisites

| Solid understanding of the ATT&CK Framework; understanding of security concepts or prior CTI field experience; completion of the ATT&CK Cyber Threat Intelligence course (which consists of five modules/badges). | | Renewal Period | Every 1 year (annual subscription renewal) | | Renewal Fee | $129.00 per year (Annual Maintenance Fee Program) | | CPE Requirements | 13 CPE Hours (from initial course); further CPE requirements for renewal not explicitly stated but likely covered by annual subscription and new content. | | Study Hours | 13 Hours (for the core training course, additional self-study time may vary) | | Demand | High | |

Estimated salary premium

10–10% (historical estimate)

Renewal requirements

1-year cycle · 13 CPE/CEU credits per year

Difficulty

Not rated

Domains covered

• ** Identifying and developing ATT&CK-mapped intelligence
• Analyzing ATT&CK-mapped intelligence
• Applying ATT&CK-mapped intelligence for defensive recommendations
• Mapping to ATT&CK from finished reporting and raw data
• Understanding data storage considerations for ATT&CK-mapped data
• Visualizing CTI analysis using ATT&CK-mapped data
• Leveraging MITRE ATT&CK Navigator
• Performing CTI studies
• Threat hunting using Sigma Rules and Sigma2attack
• Understanding adversary tactics
• techniques
• and procedures (TTPs)

Where this credential fits

MyCyberPath career mappings are planning guidance, not universal employer requirements.

This credential is not currently mapped to a metro line.

Recent catalog changes

No recent changes are recorded for this credential.

Sources and verification

No reviewed source links are attached. Confirm current requirements with the issuer.