Threat Hunting
Threat Hunting From Intelligence to Validated Defense
A practical threat hunting guide connecting intelligence, telemetry, AdversaryGraph, human review, detection engineering, and reusable knowledge.
- Images
- 10
- Code blocks
- 5
1200km research library
Security research articles, available locally.
Browse the complete local archive of technical articles, including 87 permitted full mirrors from TrainSec.net. Every card opens the locally hosted article on 1200km.com; the original publication remains the source and attribution link.
- Articles
- 284
- Preserved images
- 2,392
- Code/config blocks
- 3,584
Full archive
Find an article
284 articles found
Incident Response
The Incident Response Lifecycle: From First Alert to Verified Recovery
A practical incident response lifecycle guide: NIST SP 800-61 Rev. 3, evidence handling, identity containment, verified recovery, and tested improvements.
- Images
- 6
- Code blocks
- 1
AI Security
Can Continuous Recursive Reasoning Give Rise to Machine Consciousness?
The Continuous Recursive Reasoning Hypothesis distinguishes persistent self-modeling and measurable functions from unresolved claims about subjective consciousness.
- Images
- 9
- Code blocks
- 7
AI Security
The Right Question: A Framework for Auditable Question Discovery
A framework for discovering, challenging, and prioritizing empirical questions, with current SciFact, prospective KEV, reproducibility, and blocked-track validation results.
- Images
- 3
- Code blocks
- 0
Threat Intelligence
Cyberattacks on Big Pharma and Its Ecosystem: Threat Actors, Attack Surfaces, TTPs, and Defensible Lessons
Evidence-based research on pharmaceutical cyberattacks: actors, ransomware, espionage, attack surfaces, ATT&CK TTPs, operational impact, and a 30/90/180-day defense plan.
- Images
- 3
- Code blocks
- 0
Malware Analysis
Can AdversaryGraph Tell the Story of a Malware PCAP?
Twenty malware PCAP tests with real AdversaryGraph screenshots, short reports, IOC checks, official-answer comparisons, and downloadable evidence.
- Images
- 21
- Code blocks
- 20
Malware Analysis
AdversaryGraph vs Ten Malware PCAPs: What the Evidence Actually Shows
Ten live-instance malware-PCAP tests with 20 original screenshots, ten full reports, 52 enrichment lookups, packet-level proofs and explicit limits on the 87/88 selected-indicator score.
- Images
- 5
- Code blocks
- 3
AI Security
AI Agent vs. Human with Wireshark: Six Malware PCAPs Put to the Test
This experiment measures how Daybreak Blue at extra-high reasoning investigated six malicious packet captures, where it succeeded, what it missed, and how its work compares with a trained human analyst.
- Images
- 9
- Code blocks
- 3
Malware Analysis
Course Review — TrainSec Malware Analyst Professional — Level 1
A practical review of TrainSec's Malware Analyst Professional Level 1 course, its learning path, workload, lab depth, and companion research guides.
- Images
- 1
- Code blocks
- 0
AI Security
AI Security Course, Module 00 — Chapter 4
Trace an LLM request from structured messages to generated output, then place authorization, validation, and forensic evidence at the boundaries that actually enforce security.
- Images
- 26
- Code blocks
- 11
Malware Analysis
AIDebug 3.1 Full Release Review: From Binary Intake to String Intelligence
Review AIDebug 3.1 from evidence-first binary intake through PE and ELF triage, String Intelligence, disassembly, Ghidra, optional AI analysis, controlled debugging, history, and reports.
- Images
- 13
- Code blocks
- 21
Malware Analysis
Strings Analysis for Malware Analysis: Turning Binary Text into Defensible Hypotheses
Turn extracted binary text into defensible malware-analysis hypotheses with evidence-first triage, AIDebug String Intelligence, cross-references, and validation.
- Images
- 14
- Code blocks
- 16
Malware Analysis
PE File Structure for Malware Analysis: A Practical Guide
Map Windows Portable Executable files from disk to memory with an evidence-led guide to headers, sections, imports, exports, resources, relocations, TLS, mitigations, signatures, debug data, .NET metadata, and AIDebug inspection.
- Images
- 34
- Code blocks
- 23
Malware Analysis
Assembly for Malware Analysis: A Practical x86/x64 Guide
Learn to recover meaning from x86 and x64 assembly with real AIDebug examples covering registers, memory, flags, calling conventions, control flow, Windows API behavior, decompilation, and a repeatable malware-analysis workflow.
- Images
- 27
- Code blocks
- 44
AI Security
AI Security Course, Module 00 — Chapter 3: Neural Networks and Optimization
This chapter explains neural-network computation, optimization, reproducibility, attacker access, adversarial claims, and defensible evidence for security practitioners without a calculus prerequisite
- Images
- 23
- Code blocks
- 5
Malware Analysis
How to Build a Safe Malware Analysis Lab with FLARE-VM, REMnux, and INetSim
This guide turns lessons 2–4 of TrainSec's Malware Analyst Professional — Level 1 into a repeatable lab-preparation procedure. The course demonstrates the topology and deployment process; this version adds explicit co…
- Images
- 17
- Code blocks
- 38
Malware Analysis
What Is Malware?
Malware is software or code intentionally used to compromise the confidentiality, integrity, or availability of devices, applications, networks, or data.
- Images
- 14
- Code blocks
- 0
AI Security
AI Security Course, Module 00 — Part 2
Data, features, labels, parameters, training, validation, testing, and inference become an evidence-preserving workflow for AI security engineering.
- Images
- 19
- Code blocks
- 4
AI Security
AI Security Course, Module 00 — Part 1: Introduction, AI/ML Taxonomy
Before securing an AI system, build a precise vocabulary for AI, machine learning, models, data, and the boundaries between them.
- Images
- 9
- Code blocks
- 1
AI Security
I’m Building an AI Security Engineering Course
A practical, evidence-grounded path from AI fundamentals to secure agentic systems and modern AI security engineering.
- Images
- 2
- Code blocks
- 0
CTI
AdversaryGraph
AdversaryGraph is a self-hosted security intelligence workbench that connects observables, ATT&CK, malware findings, detection validation, and reporting.
- Images
- 6
- Code blocks
- 0
Detection Engineering
Newest Detection Engineering Techniques: From Rules to Validated Security Telemetry
Practical detection engineering methods for identity, cloud, CI/CD, runtime, telemetry validation, and AI-era threats.
- Images
- 25
- Code blocks
- 13
AI Security
When AI Coding Agents Say Yes Too Easily: Testing Suspicious Cybersecurity Prompts in Cursor
A controlled comparison of how AI coding models respond to the same suspicious cybersecurity prompt inside Cursor.
- Images
- 11
- Code blocks
- 0
CTI
Comprehensive Cyber Intelligence Research: Attacks Against Embedded Systems, Hardware, Firmware…
Evidence-led cyber intelligence research into attacks against embedded systems, hardware, firmware, edge devices, and their vendors.
- Images
- 49
- Code blocks
- 0
Showing 24 of 284