//Topic
Best Threat Intelligence books
7 books in our catalog cover Threat Intelligence, ranked by rating. Each entry is an opinionated review with who the book is for and who should skip it.
01 · 2019
Sandworm
A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers
Long-form journalism on the GRU's hacking operations, the best non-technical book on what state-level cyber actually looks like.
Beginner5/5Andy Greenberg02 · 1989
The Cuckoo's Egg
Tracking a Spy Through the Maze of Computer Espionage
Clifford Stoll's first-person account of investigating a 75-cent accounting discrepancy at LBNL that turned into a year-long pursuit of a KGB-paid intruder across early-internet networks.
Beginner5/5Clifford Stoll03 · 2026
Dissecting the Dark Web
Reverse Engineering the Tools of the Underground Economy
HUMAN Security's VP of Threat Intelligence tears down real malware-as-a-service offerings sold on dark web forums, chapter by chapter, from stealers and loaders to ransomware and living-off-the-land post-exploitation kits.
Advanced4/5Lindsay Kaye04 · 2025
Cybersécurité et Malwares
Détection, analyse et Threat Intelligence
Now in its 5th edition, the French-language reference for malware analysis by Sébastien Larinier and Paul Rascagnères, a well-known APT threat researcher, running from identification to Threat Intelligence across Windows, macOS, Linux, Android, and iOS.
Advanced4/5Sébastien Larinier, Paul Rascagnères05 · 2025
Data Engineering for Cybersecurity
Build Secure Data Pipelines with Free and Open-Source Tools
A decade-plus threat analyst teaches how to collect, normalize, enrich, and secure the telemetry (logs, events, metrics) that security teams depend on, using open-source tools like Filebeat, Logstash, Redis, Kafka, and Elasticsearch.
Advanced4/5James Bonifield06 · 2023
Intelligence-Driven Incident Response
Outwitting the Adversary
A practitioner's guide to wiring threat intelligence into the incident response loop, built around the F3EAD cycle rather than tool-of-the-week tutorials.
Intermediate4/5Scott J. Roberts, Rebekah Brown07 · 2015
Sécurité et espionnage informatique
Connaissance de la menace APT et du cyberespionnage
A technical French guide to advanced persistent threats and cyber-espionage — how APT campaigns work, how to detect them, and how to defend — by one of France's APT specialists.
Advanced4/5Cédric Pernet