Intelligence Training
Taught by the People Who Did the Work.
Admission by application.
Most intelligence training comes from a syllabus. Ours comes from careers. Our instructors include senior CIA operations officers, FBI Special Agents, and U.S. special operations personnel. For decades, they ran sources, worked counter-terrorism cases, and operated in hostile environments. Now they teach what they learned.
Our open-source intelligence (OSINT) courses lead the program. They teach investigators and analysts to turn one email address, phone number, or username into a full profile. They also show analysts how to monitor the fringe spaces where extremists operate. In addition, our counter-terrorism, tradecraft, and leadership courses serve law enforcement, fusion centers, security teams, and executives. Together, they take you inside what the agencies know.
We deliver every course live, online or in person. However, we vet every attendee first, and several courses are open only to sworn personnel.
Florida Class A Private Investigative Agency · License No. 3500181 · Confidential
Decades Inside the Agencies.
Now in the Classroom.
Our instructors come from the U.S. Intelligence Community, the FBI, and U.S. Special Operations. Our lead instructor is a retired senior CIA operations officer with more than 26 years of service. Twenty-five of those years were in counter-terrorism operations. The cadre also includes former FBI Special Agents with Joint Terrorism Task Force (JTTF) experience. In addition, it includes former special operations and military intelligence personnel. As a result, the case studies are their own. They come from operations they planned, sources they ran, and attacks they worked to prevent.
That matters, because training only helps when the material is real. For example, consider a surveillance-detection course. An instructor who ran detection routes under hostile eyes teaches a different course than one who read a manual. Likewise, leadership lessons from field decisions, with lives at stake, land harder than a business-school reading list. Our instructors teach what they did, what worked, and what they would change.
Everett Stern, our Intelligence Director, is the whistleblower whose evidence exposed HSBC’s money laundering for drug cartels and sanctioned entities. Today, Tactical Rabbit runs investigations and national-security work with former CIA, FBI, and military intelligence professionals. In short, that operational work is the foundation of our intelligence training program.
The Threat Has Changed.
Most Intelligence Training Has Not.
Most of what an investigator needs to know about a person, company, or threat is already public. Yet most investigators never learned how to find it. Meanwhile, the threats keep shifting. Extremist groups now use unmanned systems. Foreign intelligence services harass their own citizens on American soil. At the same time, adversaries run disinformation as a military campaign. In addition, the people officers investigate can find their home addresses and family photos with one search. Insiders walk out with the customer list. Finally, espionage and extortion now target executives in ways no corporate policy anticipated.
The people who must meet these threats work in fusion centers, police departments, security offices, and executive suites. Too often, they learn last decade’s threat from instructors who only read about it. Tactical Rabbit’s courses close that gap. Each course comes from practitioners who still watch the threat evolve, and we update the material as it changes. Then we teach it to the people who have to act on it. That includes law enforcement, fusion centers, first responders, and civilian authorities. It also includes corporate security teams, executives, and the next generation of intelligence officers.
The Intelligence Training Course Catalog
Track A
Open-Source Intelligence (OSINT)
Our lead offering. This is practical, tool-based OSINT training for investigators, analysts, attorneys, journalists, corporate security, and trust-and-safety teams. It comes from practitioners who use these methods on live investigations every day. The introductory course needs no prior OSINT experience. Next, the extremism-monitoring course takes analysts into the spaces where extremists actually operate.
From One Clue to a Full Profile: Practical Email, Phone, and Username Investigations
Learn to turn one email address, phone number, or username into an actionable profile. You will use free public tools and simple techniques. The course covers the investigative mindset and OPSEC basics, including covert accounts and privacy protection. Then it shows you how to identify who sits behind an email or phone number. Finally, you will research users across platforms. Real-world examples run throughout.
90 minutes · Live online webinar
Investigators, analysts, corporate security, journalists, attorneys · Tier 1
Extremism Monitoring: Alternative and Fringe Environments
This course goes beyond mainstream platforms. It takes you into the fringe spaces where radical right, radical left, and religious extremists operate. First, you will set up OPSEC and anonymous research environments. Next, you will learn persona development and management. The course also covers the threat landscape, ideologies, and platform mapping. In addition, it decodes symbols, memes, and coded language. Finally, it teaches practical OSINT collection and monitoring methods.
90 minutes · Live online webinar
Analysts, threat-intelligence teams, law enforcement, trust-and-safety teams · Tier 2
Track B
Careers, Leadership, and Executive Readiness
These courses share what the Intelligence Community and Special Operations know about leading, deciding, and staying safe. They serve individuals and organizations alike. Vetted applicants from any background may apply.
Preparing for a Career in the Intelligence Community
Get an overview of the U.S. Intelligence Community, with a focus on the CIA. Next, walk through the application and clearance process. Then learn the specific skills that make candidates competitive for sought-after roles. A retired senior CIA operations officer with more than 26 years of service teaches the course.
2–3 hours · Online
Students, early-career professionals, veterans, career changers · Tier 1
Leadership Principles of the CIA and Special Operations for the Private Sector
Elite special operations units and the Intelligence Community succeed in the world’s hardest environments. This course teaches the leadership principles behind that success. The lessons come from the real operations of CIA officers, FBI Special Agents, and SOF operators. In addition, the course shows how each principle applies to business, government, and first-response teams. Real-world case studies run throughout.
2–3 hours · Online or in-person
Executives, managers, agency leadership, team leads · Tier 1
Advanced Situational Awareness (Heuristics)
Select law enforcement units, special forces, and intelligence officers rely on advanced situational awareness. This course teaches it as a skill anyone can build. To start, it covers every domain of heuristics. It also gives specific examples of how awareness applies in daily professional and personal life.
4 hours · Online or in-person
Police, military, first responders, civilian authorities, private sector · Tier 1
Urban Survival Course for the Elite Executive
This intense, in-person course follows the model of specialized U.S. special operations and CIA training. It prepares executives to identify, deter, and defeat the threats they and their companies face. Those threats include terrorism, crime, counterintelligence threats, and corporate espionage. You will learn practical solutions and advanced techniques for hostile situations. Then you will apply them in realistic exercises. This course is not for everyone.
8 hours · In-person only
Senior executives and principals · Tier 1, with interview
Track C
Counter-Terrorism and
Homeland Threats
These foundational and deep-dive courses cover terrorism, violent extremism, and the threat to the Homeland. Our instructors bring 25 years of counter-terrorism operations to every session. We built this track for fusion centers, JTTFs, law enforcement, first responders, civilian authorities, and private-sector security.These courses share what the Intelligence Community and Special Operations know about leading, deciding, and staying safe. They serve individuals and organizations alike. Vetted applicants from any background may apply.
C.A.T.C.H.: Countering Active Terrorist Cells in the Homeland
This is the complete overview course, and the other Track C courses dive deeper into its topics. It covers the drivers of homegrown violent extremism and how groups radicalize and recruit Americans. Next, it examines the three pillars of the Islamic State, Al-Qaida, HAMAS, and Hezbollah. Those pillars are radical ideology, extremist doctrine, and strategic messaging. The course also covers extremist use of social media and cyber attacks. In addition, it addresses new threat vectors, including the targeting of police and military personnel. You will study current tactics, techniques, and procedures (TTPs). Finally, a singular analysis of extremist operational manuals reveals the pre-incident indicators present before every attack.
4–8 hours · Online or in-person
Fusion center, JTTF, law enforcement, first responders, private security · Tier 2
Recognizing Pre-Incident Indicators and the TTPs of Terrorist Groups in the U.S.
Radicalized Americans and foreign extremist operatives show warning signs while they plan an attack. This course teaches you to spot those pre-incident indicators “left of bang.” It also covers the TTPs these groups use inside the Homeland. As a result, police, military, first responders, and private-sector personnel can observe, report, and act.
2 or 4 hours · Online or in-person
Law enforcement, military, first responders, private sector · Tier 2
Emerging Threats in the Homeland: A Forecast for the Future
This course examines current, emerging, and future terrorist threats. First, it covers in detail how terrorists use unmanned aerial, maritime, and ground systems in attacks. Next, it explores potential terrorist use of artificial intelligence and immersive platforms. It also addresses offensive cyber attacks and the emerging threat of synthetic biology. In addition, it assesses current terrorist capability with weapons of mass destruction. Finally, practical exercises teach mitigation strategies.
2–4 hours · Online or in-person
Fusion center, law enforcement, infrastructure protection, corporate security · Tier 2
Overview of Domestic Terrorism in the U.S.
Domestic terrorism is rising in the U.S. To begin, this course covers the key groups and their differing ideologies. It also examines the growing international ties of some domestic groups. Finally, it presents strategies to counter them.
hours · Online or in-person
Law enforcement, civilian authorities, private sector · Tier 2
Understanding the Homegrown Violent Extremist Threat: Radicalization and Mobilization of Americans
Extremist groups radicalize and mobilize Americans in distinct phases. This course walks through each phase and the hubs where radicalization happens. Next, it shows the indicators of radicalization and mobilization. You will study real-world cases of American homegrown violent extremists (HVEs). Finally, the course presents tested strategies to counter the process.
4 hours · Online or in-person
Police, military, first responders, civilian authorities, private sector · Tier 2
The Three Pillars That Drive the Foreign Terrorist Threat
Three pillars drive the foreign terrorist threat. Radical ideology tells members who to hate. Next, extremist doctrine tells them how to attack. Then strategic messaging sells the group to recruits. Once you understand all three, you can better recognize and report pre-incident indicators.
2 hours · Online or in-person
Fusion center, law enforcement, first responders, private sector · Tier 2
The Dynamic Duo: The IRGC and Hezbollah in the Homeland
Iran’s Islamic Revolutionary Guard Corps (IRGC) and its surrogate Hezbollah pose the greatest potential state-backed threat to the Homeland. This course covers their history, evolution, objectives, and TTPs. It also explains the HAMAS connection and their redlines for a direct attack inside the U.S. In addition, you will review case studies of their activity here. Finally, the course teaches mitigation strategies.
2 hours · Online or in-person
Fusion center, law enforcement, civilian authorities, private sector · Tier 2
Lessons from 25 Years in Counter-Terrorism
CIA operations officers, FBI Special Agents, and special operations personnel share lessons from on-the-ground counter-terrorism work. Those lessons drive a discussion of which strategies actually work. The instructors also present three major case studies. They developed and carried out each one during their operational careers.
2 hours · Online or in-person
Fusion center, law enforcement, first responders, private security · Tier 2
Track D
Nation-State and Information Threats
Foreign governments run operations inside the United States, and they fight on an information battlefield. This track serves security and infrastructure-protection professionals, law enforcement, and civilian authorities.
Transnational Repression in the Homeland: Foreign Government Covert Influence
Russia, China, and Iran run clandestine operations inside the U.S. These include intelligence, sabotage, covert influence, and technology acquisition. They also identify, target, harass, and persecute their own citizens living here. In response, this course shows what that activity looks like, how to recognize it, and how to respond.
6 hours · Online or in-person
Security and infrastructure protection, local and federal law enforcement, first responders, civilian authorities · Tier 2
Information Warfare: The Trifecta Threat to National Security
Disinformation, misinformation, and malinformation now form a domain of conflict, much like cyber and economic warfare. This course shows how adversaries design, execute, and scale influence operations. It also covers the role of digital platforms, AI, and immersive media. Next, it addresses attribution and strategic impact. Finally, you will learn counter-disinformation frameworks for individuals, organizations, and critical infrastructure. These frameworks rest on intelligence-driven validation and structured analytic techniques.
6 hours · Online or in-person
Security leadership, communications and risk teams, government, critical infrastructure · Tier 2
Track E
Tradecraft and Operational Security
These are our most sensitive courses. They teach HUMINT, surveillance detection, and operational security as the CIA and special operations practice them. We adapt each one for the people who need it most. Strict vetting applies, and two courses accept only sworn U.S. law enforcement. In every case, instructors keep final approval of each attendee.
Protecting the Practitioners: Operational Security, Hostile Surveillance Detection, and Managing Your Digital Profile
Terrorist groups, organized crime, and hostile nation-states target law enforcement and fusion center personnel. This course covers the full range of physical, cyber, and digital threats they pose. Then it teaches advanced techniques to counter them. Topics include surveillance detection, limiting your digital exhaust, red-cell analysis, and CIA operational security methods. You will learn through classroom discussion, practical exercises, and real-life case studies.
4 hours · Online or in-person
Fusion center, law enforcement, civilian authorities, private security · Tier 2
The Importance of Human Intelligence for JTTFs
This course teaches the HUMINT process to Terrorism Liaison Officers (TLOs), law enforcement officers, and analysts. It covers the intelligence cycle, the source cycle, and the difference between intelligence and operational information. You will also learn vetting and validation, operational security, counterintelligence, and analysis and production. Next, the course moves into advanced tradecraft for spotting, assessing, developing, and recruiting sources. In addition, it covers effective intelligence writing. Finally, it trains elicitation, interviewing, deception detection, and interpersonal skills through real-life case studies.
4 hours · Online or in-person
TLOs, law enforcement officers, fusion center and law enforcement analysts · Tier 3 (strictly vetted; instructor approval)
High Threat Meeting Protocols
CIA and special operations units use these protocols to meet clandestine human sources inside dangerous organizations. The course covers operational security, secure communication plans, and surveillance detection routes. It also covers cover for action, counter-surveillance, and ways to mitigate ubiquitous technical surveillance. Finally, it teaches high-threat meeting site selection. This course serves officers who work undercover or handle high-value sources inside organized crime, terrorist, and cartel groups.
4 hours · Online or in-person
Sworn and vetted U.S. law enforcement only · Tier 3
We Vet Every Attendee.
Admission Is by Application.
Much of this material is sensitive. Some of it shows how intelligence officers protect themselves and their sources. Some of it shows how terrorist and state actors operate. For that reason, we do not sell seats. Instead, we vet every applicant before acceptance, and the vetting grows stricter as the course grows more sensitive. Our instructors also keep final approval over every attendee in every course. When we judge it necessary, we decline applicants without explanation. Because we charge nothing until we accept you, there is nothing to refund.
Tier 1: Open
Vetted individuals from any background, including students, professionals, executives, and veterans. |
Your resume, identity (government photo ID), and stated purpose for attending. We also run a background screen as a licensed investigative agency. The Urban Survival course adds an interview.
Tier 2: Professional
Current law enforcement, fusion center, JTTF, military, government, and first-response personnel. Corporate security and infrastructure-protection staff also qualify.
Everything in Tier 1. We also verify your current employer and role through an agency or company email address. In addition, we contact a supervisor or HR.
Tier 3: Restricted
Sworn U.S. law enforcement officers only, in roles that require the material. These include undercover, source handling, JTTF, TLO, and intelligence units.
Everything in Tier 2. We also verify sworn status through your agency and require a command-level reference. Finally, the instructors review and approve each applicant.
Agencies and companies can also request a course for a group. In that case, we vet each attendee individually to the course’s tier. The sponsoring agency provides the roster and a verification contact.
From Application to Classroom
- Apply: Use the contact form on this site. Tell us you want intelligence training, name the courses you want, and paste your resume into the message. Agencies and companies can ask about group courses the same way. Applying is free.
- Vetting: First, we review your resume. Then we reply with what your course’s tier requires, such as ID, employment or sworn-status verification, and references. Next, we run the background screen. For Tier 3 courses, the instructors review your application. We return most decisions within five business days of receiving the requested material.
- Acceptance and tuition: Once we accept you, you receive an acceptance letter with the course schedule, delivery details, and tuition. We charge nothing before acceptance.
- Pre-course materials: Some courses include pre-reading or a participant agreement, and all Tier 3 courses do. We send these when you enroll.
- The course: Instructors lead every session live, online, or in person. Each course uses case studies, and some add practical exercises. We do not record sessions for distribution.
- Certificate: When you complete a course, you receive a Tactical Rabbit certificate of completion. It lists the course, its length, and the instructor cadre.
Who We Train
- Investigators, analysts, attorneys, journalists, and trust-and-safety teams: OSINT skills for anyone who documents facts from public sources. Practitioners who do this work daily teach it. OSINT
- Fusion centers, JTTFs, and law enforcement intelligence units: The core audience for Tracks C, D, and E. Analysts, TLOs, detectives, and sworn officers gain current threat knowledge and the tradecraft to work safely.
- Police departments and sheriff’s offices: Training for patrol, investigative, and command staff. Topics include pre-incident indicators, officer safety, digital-profile protection, and leadership.
- First responders and civilian authorities: Fire, EMS, emergency management, and public officials learn to recognize and report what they see.
- Corporate security, infrastructure protection, and insider-threat teams: Private-sector security staff, especially in critical infrastructure, finance, and technology. Trade Secret Theft & Insider Threat Protection
- Executives and principals: Leadership lessons from the CIA and special operations, plus situational awareness. For those who want a real test, there is the Urban Survival course.
- Aspiring intelligence officers: Students, veterans, and professionals preparing to apply to the CIA and the wider Intelligence Community. Your instructor spent an entire career inside it.
Need to train a team, an agency, or a region?
We can deliver every course to a group, online or on site. We also tailor each course to your jurisdiction’s threat picture. In addition, we scope multi-course programs for fusion centers, departments, and corporate security teams on request.
Why Choose Tactical Rabbit for Intelligence Training
- Practitioners, not presenters: Our instructors spent their careers in CIA operations, the FBI, and U.S. Special Operations. Likewise, our OSINT instructors use these methods on live investigations. The case studies are their own.
- Current, and kept current: Course content tracks the threat as it evolves. That includes unmanned systems, AI-enabled extremism, transnational repression, and information warfare. Our instructors still watch it every day.
- Vetted, every time: As a licensed investigative agency, we vet attendees ourselves. As a result, sensitive material reaches only the people who should have it.
- Part of an operating intelligence agency: Tactical Rabbit investigates, attributes, and refers cases every day. Our training sits beside live work in national security, insider threat, and crisis response.
- Licensed and accountable: Florida Class A Private Investigative Agency No. 3500181, operating under Chapter 493 of the Florida Statutes. In addition, our Intelligence Director holds Class C License No. C3400428.
fAQ
What does Tactical Rabbit's intelligence training cover?
Our intelligence training covers five tracks. They are OSINT, careers and leadership, counter-terrorism, nation-state and information threats, and tradecraft. In total, the catalog includes nineteen live, instructor-led courses. Former CIA, FBI, and military intelligence personnel teach them.
How much do the courses cost?
Tuition depends on the course, format, and group size. We quote it in your acceptance letter after we review your application. Applying is free, and we charge nothing before acceptance. Agency and group rates are available on request.
Who are the instructors?
Our instructors are former CIA operations officers, FBI Special Agents, and U.S. special operations and military intelligence personnel. In fact, the lead instructor is a retired senior CIA operations officer with more than 26 years of service. You will also receive instructor backgrounds in the acceptance materials for each course.
Do I have to be in law enforcement to attend?
Not for most courses. The introductory OSINT course and all of Track B accept vetted applicants from any background. However, other courses require a current professional role in law enforcement, government, first response, or security. These include the extremism-monitoring course, Tracks C and D, and most of Track E. In addition, two Track E courses accept only sworn U.S. law enforcement officers.
What does vetting involve?
Every applicant provides a resume and identity verification and passes a background screen. Professional courses add employment and role verification. Restricted courses also require sworn-status verification, a command reference, and instructor approval. For details, see Admission and Vetting above and How to Apply below.
Can my agency or company book a course for a group?
Yes. We can deliver every course to a group, online or on site, and combine several into a program. However, we still vet group attendees individually to the course’s tier. The sponsoring organization provides the roster and a verification contact.
Are courses online or in person?
Most courses run both ways, live and instructor-led. However, the Urban Survival Course runs in person only. We do not record online sessions for distribution.
Will I receive a certificate?
Yes. When you complete a course, you receive a Tactical Rabbit certificate of completion. It lists the course, its length, and the instructor cadre. Your agency and state decide whether a course qualifies for continuing-education or POST credit. We provide the documentation your training office needs to decide.
I want to work for the CIA. Is the career course a guarantee of anything?
No. The course gives you an accurate picture of the Intelligence Community and the application and clearance process. It also covers the skills that make candidates competitive. Your instructor spent 26 years inside the CIA. However, hiring decisions belong to the agencies.
Can I apply if I am not a U.S. citizen?
The introductory OSINT course and Track B accept vetted applicants regardless of citizenship. However, professional and restricted courses accept only U.S. law enforcement, government, and security personnel. Some also require U.S. citizenship, as each course card states.
Disclaimers
Tactical Rabbit LLC is a Florida Class A Private Investigative Agency (License No. 3500181). We operate under Chapter 493 of the Florida Statutes. We offer these training courses for professional education. Admission is by application and subject to vetting. Tactical Rabbit and its instructors reserve the right to decline or remove any applicant or attendee. They may do so at their sole discretion and without stated reason. Also, course content is proprietary, and attendees may not record, reproduce, or redistribute it. Attendance does not confer any credential, clearance, certification, or employment eligibility with any government agency. In addition, completing a course does not guarantee any outcome. Instructors teach from their own experience and in their personal capacities. Nothing in any course represents the official position of any U.S. government agency. Finally, each attendee’s agency and state determine continuing-education or POST credit.
How to Apply for
Intelligence Training
Applying takes two minutes. Go to our contact form, tell us you want intelligence training, and paste your resume into the message. Applying is free, and we charge nothing until we accept you.
- Say you want training: Name the course or courses you want. If you are applying for an agency or company, say so. Also tell us roughly how many people
- Paste your resume into the message: Your resume starts the vetting process. It tells us who you are, where you work, and whether the course fits your role. So make sure it shows your current employer or agency and your title.
- Use a work email if you have one: A work address speeds up verification for professional and restricted courses.
We review every application. Then we reply with what your course’s vetting tier requires. Every applicant provides a government photo ID. Professional courses add employment and role verification through a supervisor or HR contact. Restricted courses also require sworn-status verification, a command-level reference, and instructor approval. Please do not send ID documents or badge numbers through the contact form. Instead, we will tell you how to provide them securely.
Learn It From the People Who Lived It
Apply through our contact form, or tell us what your agency or company needs to train for.
Tactical Rabbit LLC · Florida Class A License No. 3500181 · Licensed by the Florida Department of Agriculture & Consumer Services · Services Compliant with Florida Statutes Chapter 493
National Security
Our national security and counter-terrorism work, the operational side of what these courses teach.
Trade Secret Theft & Insider Threat Protection
Investigation and prevention when the threat is inside your organization.
Crisis Management
Intelligence-led response when the threat has already arrived.