--- title: Applying Sherman Kent’s Analytic Discipline to CTI: A... description: A practical guide for cyber threat intelligence (CTI) analysts on applying Sherman Kent's analytic discipline — originally developed for national-security... canonical: https://daily.dev/posts/applying-sherman-kent-s-analytic-discipline-to-cti-a-practical-analyst-guide-1ptfxuki2 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Applying Sherman Kent’s Analytic Discipline to CTI: A Practical Analyst Guide | daily.dev og:description: A practical guide for cyber threat intelligence (CTI) analysts on applying Sherman Kent's analytic discipline — originally developed for national-security... og:url: https://daily.dev/posts/applying-sherman-kent-s-analytic-discipline-to-cti-a-practical-analyst-guide-1ptfxuki2 og:image: https://api.daily.dev/og/posts/1PTFxUKI2.png og:image:alt: Applying Sherman Kent’s Analytic Discipline to CTI: A Practical Analyst Guide og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Applying Sherman Kent’s Analytic Discipline to CTI: A Practical Analyst Guide **[InfoSec Write-ups](https://daily.dev/sources/infosecwriteups)** · 27 min read · 0 upvotes · 0 comments ## Summary A practical guide for cyber threat intelligence (CTI) analysts on applying Sherman Kent's analytic discipline — originally developed for national-security intelligence — to modern CTI work. The guide covers estimative probability language, separating facts from assumptions and judgments, distinguishing confidence from probability, testing alternative hypotheses, identifying collection gaps, and maintaining analytic integrity. Real-world examples include SolarWinds, NotPetya, APT1, APT28, WannaCry, the Iraq WMD failure, the 2007 Iran NIE, and the Cuban Missile Crisis. The guide also addresses cognitive biases common in CTI (confirmation bias, anchoring, mirror imaging, groupthink) and explains how Kent-style discipline complements frameworks like MITRE ATT&CK and the Pyramid of Pain. A 15-point pre-publication checklist and a full analyst report template are included. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [CTI as a Code: Complete Step-by-Step Methodology](https://daily.dev/posts/cti-as-a-code-complete-step-by-step-methodology-fpdjhhlf0) · InfoSec Write-ups · 0 upvotes · 0 comments - [The Reality of CTI: Voices from the Analysts](https://daily.dev/posts/the-reality-of-cti-voices-from-the-analysts-nhqrycflp) · Security Boulevard · 0 upvotes · 0 comments - [How to turn threat intel into real security wins](https://daily.dev/posts/how-to-turn-threat-intel-into-real-security-wins-7fsyucnoh) · CSO Online · 0 upvotes · 0 comments - [Extracting the How: Scaling Adversary Procedures Intelligence with AI](https://daily.dev/posts/extracting-the-how-scaling-adversary-procedures-intelligence-with-ai-9yazvficq) · Security Boulevard · 0 upvotes · 0 comments --- [View this post on daily.dev](https://daily.dev/posts/applying-sherman-kent-s-analytic-discipline-to-cti-a-practical-analyst-guide-1ptfxuki2) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Applying Sherman Kent’s Analytic Discipline to CTI: A Practical Analyst Guide","url":"https://daily.dev/posts/applying-sherman-kent-s-analytic-discipline-to-cti-a-practical-analyst-guide-1ptfxuki2","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/applying-sherman-kent-s-analytic-discipline-to-cti-a-practical-analyst-guide-1ptfxuki2"},"datePublished":"2026-06-08T05:44:17.311Z","dateModified":"2026-06-08T05:44:43.500Z","description":"A practical guide for cyber threat intelligence (CTI) analysts on applying Sherman Kent's analytic discipline — originally developed for national-security...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/df739826bd4584643a1c6a43cb697b88?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/df739826bd4584643a1c6a43cb697b88?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"InfoSec Write-ups","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"InfoSec Write-ups","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/f0dc21b5bbfd46fda36f7b4b53dd1705","url":"https://daily.dev/sources/infosecwriteups"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/applying-sherman-kent-s-analytic-discipline-to-cti-a-practical-analyst-guide-1ptfxuki2","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"","timeRequired":"PT27M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"InfoSec Write-ups","item":"https://daily.dev/sources/infosecwriteups"},{"@type":"ListItem","position":3,"name":"Applying Sherman Kent’s Analytic Discipline to CTI: A Practical Analyst Guide"}]} ```