1200km research library
Browse the complete local archive of technical articles, including 84 permitted full mirrors from TrainSec.net. Every card opens the locally hosted article on 1200km.com; the original publication remains the source and attribution link.
Full archive
270 articles found
Map Windows Portable Executable files from disk to memory with an evidence-led guide to headers, sections, imports, exports, resources, relocations, TLS, mitigations, signatures, debug data, .NET metadata, and AIDebug inspection.
Learn to recover meaning from x86 and x64 assembly with real AIDebug examples covering registers, memory, flags, calling conventions, control flow, Windows API behavior, decompilation, and a repeatable malware-analysis workflow.
This chapter explains neural-network computation, optimization, reproducibility, attacker access, adversarial claims, and defensible evidence for security practitioners without a calculus prerequisite
This guide turns lessons 2–4 of TrainSec's Malware Analyst Professional — Level 1 into a repeatable lab-preparation procedure. The course demonstrates the topology and deployment process; this version adds explicit co…
<img src="https://cdn-images-1.medium.com/max/1024/1WQ9mso4SbaVsTYujN86dcQ.png" alt="Cover image" width="1024" height="576" loading="eager" fetchpriority="high" decoding="async" />
<img src="https://cdn-images-1.medium.com/max/1024/1rAH1xSKZP28Iw6vZGWEA.png" alt="Cover image" width="1024" height="768" loading="eager" fetchpriority="high" decoding="async" />
<img src="https://cdn-images-1.medium.com/max/1024/1iXjLTeK5gtBdXKgVpUFBMw.png" alt="Cover image" width="1024" height="682" loading="eager" fetchpriority="high" decoding="async" />
<img src="https://cdn-images-1.medium.com/max/1024/10V1atQwOKtY2BXdKheNDCA.jpeg" alt="Cover image" width="1024" height="687" loading="eager" fetchpriority="high" decoding="async" />
<img src="https://cdn-images-1.medium.com/max/1024/1ML9xzyAJOr2u6l1Dy4RpdA.png" alt="Cover image" width="1024" height="576" loading="eager" fetchpriority="high" decoding="async" />
<img src="https://cdn-images-1.medium.com/max/1024/1PtjHgt5EKpMEspEmntakBw.png" alt="Cover image" width="1024" height="559" loading="eager" fetchpriority="high" decoding="async" />
<img src="https://cdn-images-1.medium.com/max/1024/1NezWwOLX9Mv2QjCu2TQMMw.png" alt="Cover image" width="1024" height="559" loading="eager" fetchpriority="high" decoding="async" />
<img src="https://cdn-images-1.medium.com/max/1024/1igBKySDQUuXS4X3AYyE0kg.png" alt="Cover image" width="1024" height="683" loading="eager" fetchpriority="high" decoding="async" />
How can a security team move from threat intelligence to detection engineering without losing the evidence trail?
You upload a sample to one tool for hash reputation. You open another tool for strings. You use a disassembler for functions. You check imports somewhere else. You copy indicators into a CTI platform. You build ATT&CK…
The harder problem is turning scattered technical evidence into a defensible investigation
This release marks an important transition for the project: the tool now has a new canonical name
AdversaryGraph v2.5: New Name, New Release, Full AI CTI Platform Capability Map
A report is not enough. A PDF from a vendor, an incident response write-up, a malware analysis note, or a DFIR case study still needs to be translated into practical defensive work
GitHub - anpa1200/threatmapper: AI-powered MITRE ATT&CK threat intelligence platform - D3.js navigator, APT comparison, Claude/GPT-4o/Gemini analysis, PDF reports
All organizations, names, and data are fictional. This is training assignment A01 from the CTI as a Code repository
The evidence problem.An analyst writes “the adversary used T1078” in a report. Six months later nobody can answer: what log line supports that claim? Was it confirmed or inferred? What alternative hypotheses were rule…
Most threat actor writeups stop too early. They describe the group, list ATT&CK techniques, and paste some IoCs. Then the report sits in a folder while defenders wonder:what do I actually do with this on Monday?
Andrey Pautov - CTI, Detection Engineering & Security Research
In an era of relentless and complex cyber attacks, traditional, manual threat intelligence cannot keep pace. Security teams are overwhelmed by data fragmentation and the critical lack of context. “The Intelligent Shie…
Showing 24 of 270