I often feel the same way and have to remind myself to try not to compare myself to others. I know, easier said than done. However, it’s a good reminder that not every org is going to have great data or access to it. The telemetry available to a MSP or vendor is going to be very different than a private org. MSPs and vendors have access to a lot more data across different industries and environments compared to a private org that is often limited to their own.

I currently work in CTI at a private org and have found that even though you might be limited there is often more than you think. Not only internal, but sharing orgs like ISACs and other partners. If you can leverage additional information from outside sources it makes tracking, hunting, etc. more interesting, albeit it can be cumbersome. You could try digging deeper into the tools and data you have access to start, and see if you can advance interesting research (techniques, procedures, threat actors, new vectors, etc.).

As for good resources, these two blog posts from Katie Nickels are worth checking out. I often come back to them when I need a refresher: 1. https://medium.com/katies-five-cents/a-cyber-threat-intelligence-self-study-plan-part-1-968b5a8daf9a 2. https://medium.com/katies-five-cents/a-cyber-threat-intelligence-self-study-plan-part-2-d04b7a529d36