Skip to main content
Training // Cognitive Warfare // CW-CWTR-301 // Self-paced

CWTR Practitioner: Name the Maneuver, Grade the Evidence

One operation. Four vendor names. Fix the vocabulary first.

Intrusion analysts cite a technique identifier, and a colleague on another continent knows the meaning at once. Influence analysts still describe one Russian clone-site operation as Doppelganger, RRN, Ruza Flood and Storm-1099. Leadership reads four briefs and funds four responses to one campaign.

CW-CWTR-301 trains you to work inside the Cognitive Warfare Tradecraft Reference (CWTR) v1.0. Every maneuver gets one name, one permanent identifier and one stated test, backed by graded evidence and mapped to DISARM.

Enrollment is limited to the United States, NATO and EU member states, and Western-friendly nations. An organizational email validates each seat.

  • 62maneuvers
  • 9families
  • 107techniques
  • 253graded exemplars
  • 321DISARM crosswalk rows
Interactive // Name the maneuver

Four names for one operation. Then one identifier.

Below, every CWTR maneuver drifts as an unnamed signal, and four vendor labels for one Russian operation drift with them. Press Name the feed. The labels collapse into CW-M0002, and all 62 maneuvers settle into their nine families. Tap a point to read its entry. Tap a family to light it.

RAW FEED · 62 unnamed signals, 4 vendor labels
SELECTED ENTRYCW-M0002Doppelganger Clone-Site ForgeryCW-F04 Forgery and Fabrication. One identifier for the operation that four vendors named four ways.
FAMILY CW-F04 · 6 MANEUVERS

Source: CWTR v1.0 Tier 1 Analyst Edition, Part One, the maneuver layer. Identifiers and names as published October 5, 2026.

The problem

Defenders of the information space never shared a vocabulary.

Network defense settled its naming fight years ago. A technique identifier travels from a SOC in Ohio to a CERT in Vilnius and means the same thing at each end. Influence work never got there. Each vendor, platform and government names the operation it sees, and one campaign becomes four.

The Cognitive Warfare Tradecraft Reference fixes the names. Version 1.0 gives every maneuver an entry with a stated test, graded exemplars from public primary sources, a falsifier and a DISARM 1.6.1 crosswalk. A change to an entry happens only through the quarterly Cognitive Warfare Tradecraft Report.

Generative AI shortened the build time for every family in the catalog. Synthetic-Persona Operation (CW-M0017), Synthetic-Media Fabrication (CW-M0024) and Bot-Network Amplification (CW-M0012) carry their own entries and tests. The course trains you to tag the AI-built version with the same identifier as the hand-built one. The maneuver sets the defense, not the tool behind it.

What you will be able to do

Nine outcomes. A lab or the capstone tests each one.

01

Cite by identifier

Cite any influence pattern by CWTR identifier, name and version, and reconcile vendor aliases to one entry.

02

Defend the boundary

Place an observed operation in the right family and maneuver, and defend the call in writing.

03

Grade on two axes

Grade each exemplar on source reliability and information credibility without averaging, and report the T, D, F tri-score.

04

Write the falsifier

Name the observation that breaks an entry or an attribution if it turns up.

05

Keep claims apart

Keep adversary claims out of every sentence that carries verified fact.

06

Map to DISARM

Build DISARM 1.6.1 crosswalk rows with a fit grade, and log a gap rather than invent an identifier.

07

Run the watch

Run a one-week watch and write a weekly graded brief in the Cognitive Warfare Monitor format.

08

Pair the counter

Pair countermeasures to a maneuver, each with a graded feasibility call.

09

Draft an entry

Draft a full fifteen-field entry that meets the two-case publish rule.

Interactive // Two axes, never averaged

Grade the source. Grade the claim. Keep the letters apart.

Every exemplar in the Reference carries two grades under STANAG 2511: how far you trust the source, and how well the information holds up. Pick a cell. Then try A5 and E1.

← CONFIRMEDINFORMATION CREDIBILITYUNJUDGED →
B2
SOURCEB · Usually reliable. Minor doubt about authenticity, trustworthiness or competency; a history of mostly valid information.
INFORMATION2 · Probably true. Not confirmed independently; logical in itself and consistent with other information on the subject.
A blended score turns B2 into 2. The brief carries B2: two characters, one line, no arithmetic.

The course grades on the expanded Admiralty grid of the ASA Evidence Standard: thirty factors in nine clusters behind the classic A to F and 1 to 6 anchor, with the T, D, F tri-score beside them.

Curriculum

Eight sections. Twenty-four lessons.

Each lesson carries a narrated video, a worksheet and a knowledge check. Six labs run on public primary sources: indictments, sanctions designations, government advisories and platform takedown reports.

  1. 01Name the maneuver

    The vocabulary gapAnatomy of the ReferenceReading a full entry
  2. 02Grade the evidence

    Grades on every exemplarClaims apart, bands fixedThe falsifier
  3. 03Shaping the story

    Narrative engineeringAmplification and reachPersona and front operations
  4. 04Forging and steering

    Forgery and fabricationReflexive control and decision shapingSeam exploitation
  5. 05Coupling, preparing, silencing

    Cyber-cognitive couplingTerrain preparationSuppression and denial
  6. 06Map to DISARM

    Reading DISARM 1.6.1Building a crosswalk rowSpeaking to partners
  7. 07Run the watch

    From post to maneuver identifierActor instantiationThe weekly graded brief
  8. 08Counter and commit

    Paired countermeasuresChange control and the quarterly reportCapstone briefing
What you receive

The Reference in your hands from day one.

TIER 0

Free Edition

All 62 maneuver names and definitions, the full method and the complete CW-M0002 entry.

TEACHING SET

Nine full entries

One fifteen-field entry per family from the Tier 1 Analyst Edition. Course-licensed.

FIELD TOOLS

Cards and templates

Field Card, ASA Grading Card, Kent Band Card, entry and technique templates, falsifier log, weekly brief template.

WORKBOOKS

Plain Excel, no macros

Indicator ranking matrix, DISARM crosswalk workbook and countermeasure board.

2026-Q4

Tradecraft Report summary

Worked cases on Russia, Iran and North Korea, and the deliberate blank for China.

SUPPORT

The author answers

Questions go to the author of the Reference, not a help desk.

Capstone and practical

Draft an entry fit for the Reference.

The capstone asks for a full fifteen-field entry with two graded exemplars from public primary sources, a one-week watch brief tagged by maneuver identifier, and a recorded ten-minute briefing for a security leader who reads no DISARM.

The 72-hour practical

Tag, grade, map and counter one public campaign. An instructor grades the work. The practical is part of the course at no extra fee and earns up to 8 of the 50 CPE.

Five errors fail a capstone outright

  • One blended grade for source and content
  • An adversary claim and a verified fact in one sentence
  • An invented DISARM identifier
  • No falsifier
  • Any plan or inject aimed at a domestic audience, an election, a protected group, or a real person or platform
Certification

From 301 to the CCWTA.

CW-CWTR-301 with its practical and Narrative Defense Under Brandolini's Law earn the Certified Cognitive Warfare Tradecraft Analyst. CNIA holders and Brandolini alumni reach the CCWTA with 301 alone.

STEP 1

CW-CWTR-301

24 lessons, six labs, capstone and the 72-hour practical. Up to 50 CPE.

+
STEP 2

Narrative Defense Under Brandolini's Law

21 lessons on the cost of correction. Up to 12 CPE.

=
CREDENTIAL

CCWTA

Up to 62 CPE across the track. CW-CWTR-302 adds the Offensive Endorsement, with up to 31 further CPE.

TrackIncludesPrice
CCWTA TrackCW-CWTR-301 and Narrative Defense Under Brandolini's Law. The practical is part of 301.$5,399$6,198 separately
CCWTA Offensive TrackCW-CWTR-301, CW-CWTR-302 and Brandolini. Each practical is part of its course. 302 seats open after vetting.$7,999$9,297 separately

Track bundles open on the Training Center once 301 and 302 launch. To hold a track seat now, contact Treadstone 71.

Who enrolls

Built for analysts who defend the information space.

Counter-FIMI and narrative analysts

Teams that report to EU and NATO partners in DISARM.

Counterintelligence analysts

Insider-threat and front-organization work that needs graded evidence.

Trust-and-safety investigators

Platform teams tracking coordinated inauthentic behavior.

Critical-infrastructure security staff

Operators targeted by hack-and-leak, fabricated-breach claims and fraudulent workers.

No clearance and no required prerequisite. Enrollment is limited to the United States, NATO and EU member states, and Western-friendly nations, with an organizational email for validation.

Your instructor

Jeff Bardin

FOUNDER AND CHIEF INTELLIGENCE OFFICER, TREADSTONE 71

Fourteen years of US military service across the Air Force and Army, enlisted and officer: cryptologic linguist, then armored scout platoon leader. Builder of the cyber intelligence, cyber counterintelligence and cybercrime programs at Utica University. Author of the Cognitive Warfare Tradecraft Reference, Pillar 3 of the T71 Standard, and of The Mind Domain and Tradecraft at Machine Speed.

Full bio · About Treadstone 71 · Why Treadstone 71

TREADSTONE 71

Woman-owned, veteran-led cyber and strategic intelligence training and consulting since 2002, listed in the CISA NICCS training catalog. Clients include critical infrastructure operators across the United States, Europe, Australia, Singapore and the Middle East.

Team seats, private cohorts or the full catalog for your organization: contact Treadstone 71 or see Subscription Training Services.

FAQ

Questions answered.

Is there a written exam?

No. A short knowledge check follows each lesson. The assessment is a practical: a 72-hour instructor-graded exercise that asks you to tag, grade, map and counter one public campaign. The practical is part of the course. No separate exam fee.

How many CPE does the course award?

Up to 50: about 8 for video, 3.5 for knowledge checks and the final exam, 13 for worksheets, 11 for labs, 6 for the capstone and 8 for the practical.

Do I need a clearance or a prerequisite?

No clearance. No required prerequisite. People and Narrative Intelligence (PEOPINT / NARINT) helps.

Who is eligible to enroll?

Enrollment is limited to the United States, NATO and EU member states, and Western-friendly nations, with an organizational email for validation.

What is the Cognitive Warfare Tradecraft Reference?

The CWTR is the Treadstone 71 catalog of cognitive-warfare maneuvers: 62 maneuvers in nine families and 107 techniques, backed by 253 graded exemplars and a 321-row DISARM crosswalk. Version 1.0 was released October 5, 2026.

Does the course change the Reference?

No. The course teaches from the Reference and never edits it. Entries change only through the quarterly Cognitive Warfare Tradecraft Report, and the course errata page lists each change.

What is the CCWTA?

The Certified Cognitive Warfare Tradecraft Analyst. CW-CWTR-301 with its 72-hour practical and Narrative Defense Under Brandolini's Law earn it, for up to 62 CPE across the track. CNIA holders and Brandolini alumni reach the CCWTA with 301 alone.

What comes after 301?

CW-CWTR-302, the offensive practitioner course, for vetted red teams and authorized planners. CCWTA holders who complete it and its 48-hour practical earn the Offensive Endorsement.

Do discount codes apply?

Individual-course codes apply to the course on its own. Bundle and track prices are final.

What is the refund policy?

Full refund within 5 days of purchase, minus the cost of any books, when you have not progressed beyond the first lesson.

Fix the vocabulary first.

$4,999 · up to 50 CPE · self-paced · installments at checkout

Treadstone 71, LLC · Half Moon Bay, California · Page last updated November 8, 2026