Knowledge is Power
BARE METAL CYBERKnowledge is Power

Sitewide Search

Search Bare Metal Cyber

Search exact control and technique identifiers, Cyber Wiki articles, framework records, playbooks, books, podcasts, Academy courses, individual lessons, and BMC Cyber Challenge activities.

GIAC · Free, ad-free audio course

GIAC GCTI

A structured, audio-first learning route for GIAC GCTI, designed for focused review and practical understanding.

Listen to the complete course Browse 67 lessons

Hear the course trailer →

Every Bare Metal Cyber audio course is free and 100% ad-free.

Companion Books

Study with the audio course, then reinforce it in print.

The study guide helps you organize and revisit the material. The flashcards book adds active recall and rapid review across the course objectives.

PUT IT INTO PRACTICE

Practice GIAC GCTI concepts

Try 50 original BMC questions, review every explanation, and return to the lessons behind the answer. No login is required. Earn Challenge achievements and share your progress as you go.

50 original questionsExplanation after every answerAchievements and sharing
Open GIAC GCTI PracticeSee Challenge achievements

Independent BMC learning practice—not official exam items, a full mock exam, or an exam-readiness score.

Certification practice in the BMC Cyber Challenge

Complete Lesson Directory

Choose the exact subject you want to study.

Search by topic or narrow the directory by exam domain. Courses with multiple editions are organized below so every season remains easy to find. Each lesson includes its own audio player, full description, transcript when available, and previous-or-next navigation.

67 lessons available

S01E01Transcript

Course Lessons

Conquer the GCTI blueprint

Listen to Conquer the GCTI blueprint in the GIAC GCTI audio course.

Transcript availableFebruary 8, 2026
→

A Practical Study Routine

Listen, read, and review in the order that works for you.

01

Listen

Use the free audio course during a commute, walk, workout, or focused study session.

02

Read

Use the study guide to organize the material, annotate key ideas, and build a reference you can return to.

03

Review

Use the flashcards book to practice active recall and quickly revisit weak areas.

Related Magazine Features

Connect the course to current cybersecurity analysis.

Cover art for M&A Malware: Security Debt Hidden Inside Acquisitions
Issue 45 · November 11, 2026M&A Malware: Security Debt Hidden Inside AcquisitionsRead the feature →
Cover art for Digital Consequences: Protests, Outages, and Hybrid Threats
Issue 41 · October 14, 2026Digital Consequences: Protests, Outages, and Hybrid ThreatsRead the feature →

Related Cyber Wiki

Continue with the concepts behind the course.

ATT&CK Campaign Analysis

2015 Ukraine Electric Power Attack (C0028)

A defensive guide to the Enterprise ATT&CK campaign record C0028, including chronology, evidence, behavior mapping, and resilience lessons. The official record summarizes public reporting describing a 2015 campaign that disrupted Ukrainian electric-power substations using BlackEnergy and KillDisk.

ATT&CK Campaign Analysis

2016 Ukraine Electric Power Attack (C0025)

A defensive guide to the Enterprise ATT&CK campaign record C0025, including chronology, evidence, behavior mapping, and resilience lessons. The official record summarizes public reporting describing a 2016 campaign that disrupted Ukrainian electric-power distribution using Industroyer.

ATT&CK Campaign Analysis

2022 Ukraine Electric Power Attack (C0034)

A defensive guide to the Enterprise ATT&CK campaign record C0034, including chronology, evidence, behavior mapping, and resilience lessons. The official record summarizes public reporting describing a 2022 campaign against a Ukrainian electric utility that combined malware and living-off-the-land behavior to issue unauthorized SCADA commands.

ATT&CK Campaign Analysis

2025 Poland Wiper Attacks (C0063)

A defensive guide to the Enterprise ATT&CK campaign record C0063, including chronology, evidence, behavior mapping, and resilience lessons. The official record summarizes public reporting describing destructive December 2025 attacks against Polish energy infrastructure involving Windows and PowerShell wipers.

ATT&CK Campaign Analysis

3CX Supply Chain Attack (C0057)

A defensive guide to the Enterprise ATT&CK campaign record C0057, including chronology, evidence, behavior mapping, and resilience lessons. The official record summarizes public reporting describing a cascading supply-chain compromise that moved from a trojanized trading application into 3CX build environments.

AI assurance

AI Audit Evidence Integrity

AI audit evidence integrity is the ability to show that logs, model artifacts, data extracts, test results, approvals, and screenshots are authentic, complete, attributable, and unchanged.