EC-Council · 2026 Edition
A complete preparation guide, edited by Johnson Ajibi, a network and security engineer with 12+ years' experience. Covers the exam format,all 8 blueprint domains, a week-by-week study plan, and proven tips for passing first time.
2–4 months
Prep time
Intermediate
Difficulty
50
Exam questions
70%
Pass mark
Exam code
312-85
Full name
Certified Threat Intelligence Analyst
Vendor
EC-Council
Duration
120 minutes
Questions
50 items
Passing score
70%
Domains covered
8 blueprint domains
Recommended experience
Foundational IT knowledge recommended
Typical prep time
2–4 months
Domain percentage weights are not currently available for this exam. The checklist below is still useful for planning your study.
Phase 1
Data Analysis
Tip: Start with the official Data Analysis objectives, then practise questions on it.
Phase 2
Intelligence Reporting And Dissemination
Tip: Cover the Intelligence Reporting And Dissemination objectives, then answer practice questions to confirm you can apply them.
Phase 3
Data Collection And Processing
Tip: Cover the Data Collection And Processing objectives, then answer practice questions to confirm you can apply them.
Phase 4
Introduction TO Threat Intelligence
Tip: Cover the Introduction TO Threat Intelligence objectives, then answer practice questions to confirm you can apply them.
Phase 5
Cyber Threats And Attack Frameworks
Tip: Cover the Cyber Threats And Attack Frameworks objectives, then answer practice questions to confirm you can apply them.
Phase 6
Threat Hunting And Detection
Tip: Cover the Threat Hunting And Detection objectives, then answer practice questions to confirm you can apply them.
Phase 7
Threat Intelligence IN SOC IR And Risk Management
Tip: Cover the Threat Intelligence IN SOC IR And Risk Management objectives, then answer practice questions to confirm you can apply them.
Phase 8
Requirements Planning Direction And Review
Tip: Finish with Requirements Planning Direction And Review, then re-test your weakest earlier domain before a mock exam.
Study the official exam blueprint — weight percentages tell you exactly where to invest prep time.
Practise scenario-based questions regularly — every modern cert exam is scenario-heavy.
Use spaced repetition to retain what you've learned (Courseiva does this automatically).
Book your exam date once you're scoring 80%+ consistently on practice tests.
Review explanations for every wrong answer, not just the question — the 'why' is what makes it stick.
Apply everything in this guide with adaptive practice questions, detailed answer explanations, and domain analytics.