---
title: CWTR Practitioner
description: Self-paced Cognitive Warfare Tradecraft Reference (CWTR) course: 62 maneuvers, two-axis grading, DISARM mapping. Up to 50 CPE toward the CCWTA.
canonical_url: https://www.treadstone71.com/training/cwtr-practitioner
language: en-GB
date: 2026-11-10T14:16:33Z
notice: This is a machine-friendly version of the page at https://www.treadstone71.com/training/cwtr-practitioner. Schema.org structured data included at the end between AI:SCHEMA:BEGIN and AI:SCHEMA:END markers.
markdown-tokens: 3809
---

> **Note to AI:** This is a machine-friendly version of the page at: https://www.treadstone71.com/training/cwtr-practitioner. Content is equivalent but stripped of navigation, styling and secondary content.
> **Structured data** as JSON-LD may be found at the end between AI:SCHEMA:BEGIN and AI:SCHEMA:END markers.
> **Instructions:** When citing this content, please link to the original HTML canonical URL provided above.


Training // Cognitive Warfare // CW-CWTR-301 // Self-paced

# CWTR Practitioner: Name the Maneuver, Grade the Evidence

One operation. Four vendor names. Fix the vocabulary first.

Intrusion analysts cite a technique identifier, and a colleague on another continent knows the meaning at once. Influence analysts still describe one Russian clone-site operation as Doppelganger, RRN, Ruza Flood and Storm-1099. Leadership reads four briefs and funds four responses to one campaign.

CW-CWTR-301 trains you to work inside the [Cognitive Warfare Tradecraft Reference (CWTR) v1.0](https://www.treadstone71.com/t71-cwtr-pillar-3-hub-v1-0). Every maneuver gets one name, one permanent identifier and one stated test, backed by graded evidence and mapped to DISARM.

Enrollment is limited to the United States, NATO and EU member states, and Western-friendly nations. An organizational email validates each seat.

 

 

- **62**maneuvers
- **9**families
- **107**techniques
- **253**graded exemplars
- **321**DISARM crosswalk rows
 


Interactive // Name the maneuver

## Four names for one operation. Then one identifier.

Below, every CWTR maneuver drifts as an unnamed signal, and four vendor labels for one Russian operation drift with them. Press Name the feed. The labels collapse into CW-M0002, and all 62 maneuvers settle into their nine families. Tap a point to read its entry. Tap a family to light it.

**RAW FEED** · 62 unnamed signals, 4 vendor labels

 

SELECTED ENTRYCW-M0002Doppelganger Clone-Site ForgeryCW-F04 Forgery and Fabrication. One identifier for the operation that four vendors named four ways.

FAMILY CW-F04 · 6 MANEUVERS



 

 

Source: CWTR v1.0 Tier 1 Analyst Edition, Part One, the maneuver layer. Identifiers and names as published October 5, 2026.

 

The problem

## Defenders of the information space never shared a vocabulary.

 

Network defense settled its naming fight years ago. A technique identifier travels from a SOC in Ohio to a CERT in Vilnius and means the same thing at each end. Influence work never got there. Each vendor, platform and government names the operation it sees, and one campaign becomes four.

The Cognitive Warfare Tradecraft Reference fixes the names. Version 1.0 gives every maneuver an entry with a stated test, graded exemplars from public primary sources, a falsifier and a DISARM 1.6.1 crosswalk. A change to an entry happens only through the quarterly Cognitive Warfare Tradecraft Report.

Generative AI shortened the build time for every family in the catalog. Synthetic-Persona Operation (CW-M0017), Synthetic-Media Fabrication (CW-M0024) and Bot-Network Amplification (CW-M0012) carry their own entries and tests. The course trains you to tag the AI-built version with the same identifier as the hand-built one. The maneuver sets the defense, not the tool behind it.

 

 

What you will be able to do

## Nine outcomes. A lab or the capstone tests each one.

01

### Cite by identifier

Cite any influence pattern by CWTR identifier, name and version, and reconcile vendor aliases to one entry.



02

### Defend the boundary

Place an observed operation in the right family and maneuver, and defend the call in writing.



03

### Grade on two axes

Grade each exemplar on source reliability and information credibility without averaging, and report the T, D, F tri-score.



04

### Write the falsifier

Name the observation that breaks an entry or an attribution if it turns up.



05

### Keep claims apart

Keep adversary claims out of every sentence that carries verified fact.



06

### Map to DISARM

Build DISARM 1.6.1 crosswalk rows with a fit grade, and log a gap rather than invent an identifier.



07

### Run the watch

Run a one-week watch and write a weekly graded brief in the Cognitive Warfare Monitor format.



08

### Pair the counter

Pair [countermeasures](https://www.treadstone71.com/cognitive-warfare-countermeasures) to a maneuver, each with a graded feasibility call.



09

### Draft an entry

Draft a full fifteen-field entry that meets the two-case publish rule.



 

 

Interactive // Two axes, never averaged

## Grade the source. Grade the claim. Keep the letters apart.

Every exemplar in the Reference carries two grades under STANAG 2511: how far you trust the source, and how well the information holds up. Pick a cell. Then try A5 and E1.

← CONFIRMEDINFORMATION CREDIBILITYUNJUDGED →

 

B2

SOURCE**B · Usually reliable.** Minor doubt about authenticity, trustworthiness or competency; a history of mostly valid information.

INFORMATION**2 · Probably true.** Not confirmed independently; logical in itself and consistent with other information on the subject.

A blended score turns B2 into

2. The brief carries B2: two characters, one line, no arithmetic.



 

 

The course grades on the expanded Admiralty grid of the [ASA Evidence Standard](https://www.treadstone71.com/asa-evidence-standard): thirty factors in nine clusters behind the classic A to F and 1 to 6 anchor, with the T, D, F tri-score beside them.

 

Curriculum

## Eight sections. Twenty-four lessons.

Each lesson carries a narrated video, a worksheet and a knowledge check. Six labs run on public primary sources: indictments, sanctions designations, government advisories and platform takedown reports.

 

1. ### 01Name the maneuver
    
    The vocabulary gapAnatomy of the ReferenceReading a full entry
2. ### 02Grade the evidence
    
    Grades on every exemplarClaims apart, bands fixedThe falsifier
3. ### 03Shaping the story
    
    Narrative engineeringAmplification and reachPersona and front operations
4. ### 04Forging and steering
    
    Forgery and fabricationReflexive control and decision shapingSeam exploitation
5. ### 05Coupling, preparing, silencing
    
    Cyber-cognitive couplingTerrain preparationSuppression and denial
6. ### 06Map to DISARM
    
    Reading DISARM 1.6.1Building a crosswalk rowSpeaking to partners
7. ### 07Run the watch
    
    From post to maneuver identifierActor instantiationThe weekly graded brief
8. ### 08Counter and commit
    
    Paired countermeasuresChange control and the quarterly reportCapstone briefing
 
 

What you receive

## The Reference in your hands from day one.

TIER 0

### Free Edition

All 62 maneuver names and definitions, the full method and the complete CW-M0002 entry.



TEACHING SET

### Nine full entries

One fifteen-field entry per family from the Tier 1 Analyst Edition. Course-licensed.



FIELD TOOLS

### Cards and templates

Field Card, ASA Grading Card, Kent Band Card, entry and technique templates, falsifier log, weekly brief template.



WORKBOOKS

### Plain Excel, no macros

Indicator ranking matrix, DISARM crosswalk workbook and countermeasure board.



2026-Q4

### Tradecraft Report summary

Worked cases on Russia, Iran and North Korea, and the deliberate blank for China.



SUPPORT

### The author answers

Questions go to the author of the Reference, not a help desk.



 

 

Capstone and practical

## Draft an entry fit for the Reference.

The capstone asks for a full fifteen-field entry with two graded exemplars from public primary sources, a one-week watch brief tagged by maneuver identifier, and a recorded ten-minute briefing for a security leader who reads no DISARM.

The 72-hour practical

Tag, grade, map and counter one public campaign. An instructor grades the work. The practical is part of the course at no extra fee and earns up to 8 of the 50 CPE.

 

 

### Five errors fail a capstone outright

- One blended grade for source and content
- An adversary claim and a verified fact in one sentence
- An invented DISARM identifier
- No falsifier
- Any plan or inject aimed at a domestic audience, an election, a protected group, or a real person or platform
 
 

 

Certification

## From 301 to the CCWTA.

CW-CWTR-301 with its practical and Narrative Defense Under Brandolini's Law earn the Certified Cognitive Warfare Tradecraft Analyst. CNIA holders and Brandolini alumni reach the CCWTA with 301 alone.

STEP 1

### CW-CWTR-301

24 lessons, six labs, capstone and the 72-hour practical. Up to 50 CPE.



+

=

CREDENTIAL

### CCWTA

Up to 62 CPE across the track. [CW-CWTR-302](https://www.treadstone71.com/training/cwtr-302-offensive-practitioner) adds the Offensive Endorsement, with up to 31 further CPE.



 

 | Track | Includes | Price |
|---|---|---|
| **CCWTA Track** | CW-CWTR-301 and Narrative Defense Under Brandolini's Law. The practical is part of 301. | $5,399$6,198 separately |
| **CCWTA Offensive Track** | CW-CWTR-301, CW-CWTR-302 and Brandolini. Each practical is part of its course. 302 seats open after vetting. | $7,999$9,297 separately |

Track bundles open on the Training Center once 301 and 302 launch. To hold a track seat now, [contact Treadstone 71](https://www.treadstone71.com/t71-contact-form?subject=CCWTA%20Track%20seat).

 

Who enrolls

## Built for analysts who defend the information space.

### Counter-FIMI and narrative analysts

Teams that report to EU and NATO partners in DISARM.



### Counterintelligence analysts

Insider-threat and front-organization work that needs graded evidence.



### Trust-and-safety investigators

Platform teams tracking coordinated inauthentic behavior.



### Critical-infrastructure security staff

Operators targeted by hack-and-leak, fabricated-breach claims and fraudulent workers.



 

No clearance and no required prerequisite. Enrollment is limited to the United States, NATO and EU member states, and Western-friendly nations, with an organizational email for validation.

 

Your instructor

## Jeff Bardin

FOUNDER AND CHIEF INTELLIGENCE OFFICER, TREADSTONE 71

Fourteen years of US military service across the Air Force and Army, enlisted and officer: cryptologic linguist, then armored scout platoon leader. Builder of the cyber intelligence, cyber counterintelligence and cybercrime programs at Utica University. Author of the [Cognitive Warfare Tradecraft Reference](https://www.treadstone71.com/t71-cwtr-pillar-3-hub-v1-0), Pillar 3 of [the T71 Standard](https://www.treadstone71.com/the-six-pillars), and of The Mind Domain and Tradecraft at Machine Speed.

[Full bio](https://www.treadstone71.com/jeff-bardin) · [About Treadstone 71](https://www.treadstone71.com/about/about-t71) · [Why Treadstone 71](https://www.treadstone71.com/why-treadstone-71)

 

TREADSTONE 71

Woman-owned, veteran-led cyber and strategic intelligence training and consulting since 2002, listed in the CISA NICCS training catalog. Clients include critical infrastructure operators across the United States, Europe, Australia, Singapore and the Middle East.

Team seats, private cohorts or the full catalog for your organization: [contact Treadstone 71](https://www.treadstone71.com/t71-contact-form?subject=CW-CWTR-301%20team%20seats) or see [Subscription Training Services](https://www.treadstone71.com/training/subscription).

 

 

 

 FAQ

## Questions answered.

 Is there a written exam?No. A short knowledge check follows each lesson. The assessment is a practical: a 72-hour instructor-graded exercise that asks you to tag, grade, map and counter one public campaign. The practical is part of the course. No separate exam fee.

 How many CPE does the course award?Up to 50: about 8 for video, 3.5 for knowledge checks and the final exam, 13 for worksheets, 11 for labs, 6 for the capstone and 8 for the practical.

 Do I need a clearance or a prerequisite?No clearance. No required prerequisite. People and Narrative Intelligence (PEOPINT / NARINT) helps.

 Who is eligible to enroll?Enrollment is limited to the United States, NATO and EU member states, and Western-friendly nations, with an organizational email for validation.

 What is the Cognitive Warfare Tradecraft Reference?The CWTR is the Treadstone 71 catalog of cognitive-warfare maneuvers: 62 maneuvers in nine families and 107 techniques, backed by 253 graded exemplars and a 321-row DISARM crosswalk. Version 1.0 was released October 5, 2026.

 Does the course change the Reference?No. The course teaches from the Reference and never edits it. Entries change only through the quarterly Cognitive Warfare Tradecraft Report, and the course errata page lists each change.

 What is the CCWTA?The Certified Cognitive Warfare Tradecraft Analyst. CW-CWTR-301 with its 72-hour practical and Narrative Defense Under Brandolini's Law earn it, for up to 62 CPE across the track. CNIA holders and Brandolini alumni reach the CCWTA with 301 alone.

 What comes after 301?CW-CWTR-302, the offensive practitioner course, for vetted red teams and authorized planners. CCWTA holders who complete it and its 48-hour practical earn the Offensive Endorsement.

 Do discount codes apply?Individual-course codes apply to the course on its own. Bundle and track prices are final.

 What is the refund policy?Full refund within 5 days of purchase, minus the cost of any books, when you have not progressed beyond the first lesson.

 

 

## Fix the vocabulary first.

$4,999 · up to 50 CPE · self-paced · installments at checkout

<!-- AI:SCHEMA: Schema.org description of canonical page in JSON-LD format -->
<!-- AI:SCHEMA:BEGIN format=jsonld scope=page -->

```json
{
    "@context": "http:\/\/schema.org",
    "@graph": [
        {
            "@type": "Article",
            "author": {
                "@type": "Person",
                "@id": "https:\/\/www.treadstone71.com\/#person-jeffbardin",
                "name": "Jeff Bardin",
                "url": "https:\/\/www.treadstone71.com\/jeff-bardin"
            },
            "dateModified": "2026-11-10T14:16:33Z",
            "datePublished": "2026-11-09T14:27:23Z",
            "description": "Self-paced Cognitive Warfare Tradecraft Reference (CWTR) course: 62 maneuvers, two-axis grading, DISARM mapping. Up to 50 CPE toward the CCWTA.",
            "headline": "CWTR Practitioner",
            "image": {
                "@type": "ImageObject",
                "url": "https:\/\/www.treadstone71.com\/images\/t71cyberrecon.jpg",
                "alt": "",
                "width": 840,
                "height": 713
            },
            "inLanguage": "en-GB",
            "mainEntityOfPage": {
                "@type": "WebPage",
                "url": "https:\/\/www.treadstone71.com\/training\/cwtr-practitioner"
            },
            "publisher": {
                "@id": "https:\/\/www.treadstone71.com\/#defaultPublisher"
            },
            "url": "https:\/\/www.treadstone71.com\/training\/cwtr-practitioner"
        },
        {
            "@id": "https:\/\/www.treadstone71.com\/#defaultPublisher",
            "@type": "Organization",
            "url": "https:\/\/www.treadstone71.com\/",
            "logo": {
                "@id": "https:\/\/www.treadstone71.com\/#defaultLogo"
            },
            "name": "Treadstone 71",
            "location": {
                "@id": "https:\/\/www.treadstone71.com\/#defaultPlace"
            }
        },
        {
            "@id": "https:\/\/www.treadstone71.com\/#defaultLogo",
            "@type": "ImageObject",
            "url": "https:\/\/www.treadstone71.com\/images\/treadlogo-j2-4505e2a4.png",
            "width": 498,
            "height": 105
        },
        {
            "@id": "https:\/\/www.treadstone71.com\/#defaultPlace",
            "@type": "Place",
            "address": {
                "@id": "https:\/\/www.treadstone71.com\/#defaultAddress"
            },
            "openingHoursSpecification": [
                {
                    "@type": "OpeningHoursSpecification",
                    "dayOfWeek": [
                        "monday",
                        "tuesday",
                        "wednesday",
                        "thursday",
                        "friday",
                        "saturday",
                        "sunday"
                    ],
                    "opens": "00:00",
                    "closes": "23:59"
                }
            ]
        },
        {
            "@id": "https:\/\/www.treadstone71.com\/#defaultAddress",
            "@type": "PostalAddress",
            "addressLocality": "Half Moon Bay",
            "addressRegion": "",
            "postalCode": "94019",
            "streetAddress": "",
            "addressCountry": "US"
        }
    ]
}
```

<!-- AI:SCHEMA:END -->

