"Why IOC-Only Detection Fails"
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Cyber Knowledge · Reference index
Cyber Knowledge Source Index
A transparent inventory of the external material referenced by the field guides, grouped by source class and linked to its publisher.
Referenced sources
178 unique external destinations cited by the ten guides. Classification is descriptive; normative authority depends on the exact document and claim.
1200km research
AdversaryGraph RAG/MCP
Used in: Malware Analysis
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
AdversaryGraph vs malware sandboxes →
Used in: Malware Analysis
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
AdversaryGraph: I Built a Self-Hosted AI Threat Intelligence Platform
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
AI Offensive Security: Practical Attacks Against LLM Agents
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Android Malware Analysis: A Practical Guide
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Applying Sherman Kent's Analytic Discipline to CTI
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
APT41 Targeting Pharmaceutical Sector
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
ATT&CK as a Working Tool
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Attribution Methodology
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
CTI Analyst Field Manual
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
CTI as a Code
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
CTI Kill Chain: An Analyst Guide With Real-World Evidence
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Customer-Driven AI CTI Project Template
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Customer-Driven AI CTI Project Template
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
CVSS v4.0: The Practical Field Guide for Vulnerability Management
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Detecting Malicious Insider Activity
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Endpoint Threat Hunting
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Foundations
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
From Log to Report Using AdversaryGraph
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Handala Hack Group
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
HexStrike documentation
Used in: Red Team
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Infrastructure Pivoting
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
AdversaryGraph workflow
Used in: CTI, Malware Analysis
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
malware-family behavior mapping
Used in: Malware Analysis
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
MuddyWater / Seedworm
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Newest Detection Engineering Techniques
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Operation Desert Hydra
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Sandworm / APT44
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
SpiderFoot
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
The Intelligent Shield: OpenCTI
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
theHarvester
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
worked reactive-investigation case study
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
First-party or practitioner reference
AddressSanitizer
Used in: Vulnerability R&D
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Adversary Emulation
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
AICPA SOC suite
Used in: GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
ATT&CK Navigator
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
AWS shared-responsibility model
Used in: Cloud Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Azure shared responsibility
Used in: Cloud Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Azure Well-Architected Security Pillar
Used in: Cloud Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Censys
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Censys Platform quick start
Used in: OSINT
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
CIS Controls v8.1
Used in: GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
consumer implementation guide
Used in: Vulnerability R&D
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
COSO Enterprise Risk Management
Used in: GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
CSA Cloud Controls Matrix 4.1
Used in: Cloud Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
CVE Program
Used in: Vulnerability R&D
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
CVSS v4.0
Used in: Vulnerability R&D
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
CVSS v4.0 user guide
Used in: Vulnerability R&D
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
CycloneDX SBOM
Used in: Secure Code
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
DORA
Used in: GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
EPSS data definition
Used in: Vulnerability R&D
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
EPSS user guide
Used in: Vulnerability R&D
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
FIRST CSIRT Services Framework 2.1
Used in: DFIR
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
forensics-in-IR guidance
Used in: DFIR
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
GDB manual
Used in: Vulnerability R&D
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
GDPR
Used in: GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Ghidra
Used in: Malware Analysis
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Ghidra Debugger courseware
Used in: Malware Analysis
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
GitHub repository visibility and security considerations
Used in: OSINT
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Google Cloud shared responsibility/shared fate
Used in: Cloud Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Google Cloud Well-Architected Security, Privacy, and Compliance
Used in: Cloud Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
ICANN RDAP
Used in: OSINT
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
ISAC / ISAO
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Kubernetes auditing
Used in: Blue Team
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Kubernetes Security Checklist
Used in: Cloud Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Kubernetes Security documentation
Used in: Cloud Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Linux kernel self-protection
Used in: Vulnerability R&D
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
LLVM libFuzzer
Used in: Vulnerability R&D
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Maltego
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Microsoft Cloud Security Benchmark: Incident Response
Used in: DFIR
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Microsoft exploit protection reference
Used in: Vulnerability R&D
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Microsoft Process Monitor
Used in: Malware Analysis
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Microsoft Sysmon
Used in: Malware Analysis
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
MISP
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
MITRE D3FEND
Used in: CTI, Blue Team
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
NIS2
Used in: GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
OCSF
Used in: Blue Team
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Berkeley Protocol
Used in: OSINT
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
OpenCTI
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
OpenSSF Scorecard
Used in: Secure Code
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
OpenTelemetry logs
Used in: Blue Team
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
osquery
Used in: DFIR
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
OSS-Fuzz
Used in: Vulnerability R&D
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
OSS-Fuzz getting started
Used in: Vulnerability R&D
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
OWASP Agentic Security Initiative
Used in: Red Team
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
OWASP GenAI Security Project
Used in: AI Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
OWASP MASVS
Used in: Red Team
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
OWASP Prompt Injection
Used in: Red Team
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
OWASP Top 10 for LLM Applications 2025
Used in: Secure Code, AI Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
PCI DSS v4.0.1 library
Used in: GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
RBAC Good Practices
Used in: Cloud Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
REMnux documentation
Used in: Malware Analysis
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
RFC 3227
Used in: DFIR
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
RFC 9162 — Certificate Transparency Version 2.0
Used in: OSINT
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Shodan
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Shodan Help Center
Used in: OSINT
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Shodan query fundamentals
Used in: OSINT
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Sigma rule documentation
Used in: Blue Team
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
SLSA 1.2
Used in: Secure Code
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
STIX / TAXII
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Traffic Light Protocol (TLP)
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
UBSan
Used in: Vulnerability R&D
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
urlscan Documentation Hub
Used in: OSINT
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
urlscan Search API
Used in: OSINT
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
urlscan search semantics
Used in: OSINT
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Velociraptor
Used in: DFIR
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
VERIS
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
VirusTotal
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
VirusTotal API v3 concepts and relationships
Used in: OSINT
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
VirusTotal relationship model
Used in: OSINT
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Volatility 3 documentation
Used in: Malware Analysis
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
YARA
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
YARA 4.5 documentation
Used in: Malware Analysis
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Framework
ATT&CK detection strategies
Used in: Blue Team
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
MITRE adversary-emulation plans
Used in: Red Team
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
MITRE ATLAS
Used in: CTI, AI Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
MITRE ATT&CK
Used in: CTI, Malware Analysis
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
MITRE ATT&CK Cloud Matrix
Used in: Cloud Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
MITRE ATT&CK Reconnaissance tactic
Used in: OSINT
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
MITRE ATT&CK Software
Used in: Malware Analysis
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
CWE
Used in: Vulnerability R&D
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
MITRE vulnerability theory
Used in: Vulnerability R&D
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Government
CISA BOD 23-01
Used in: OSINT
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
CISA Incident and Vulnerability Response Playbooks
Used in: DFIR
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
CISA KEV
Used in: Vulnerability R&D
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
CISA logging guidance
Used in: Blue Team
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
CISA/FBI Product Security Bad Practices
Used in: Secure Code
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
CISA/NCSC Guidelines for Secure AI System Development
Used in: AI Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
CSF Quick Start Guides
Used in: GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
NIST AI 100-2e2025: Adversarial Machine Learning taxonomy
Used in: AI Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
NIST AI 600-1 GenAI Profile
Used in: AI Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
NIST AI Resource Center
Used in: Blue Team, AI Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
NIST AI RMF
Used in: GRC, AI Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
NIST CSF 2.0
Used in: GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
NIST CSF 2.0
Used in: Blue Team, DFIR, GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
NIST OSCAL
Used in: GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
NIST Privacy Framework
Used in: GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
NIST SP 800-115
Used in: Red Team, OSINT
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
NIST SP 800-161 Rev. 1
Used in: GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
NIST SP 800-190
Used in: Cloud Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
NIST SP 800-207
Used in: Cloud Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
NIST SP 800-216
Used in: Vulnerability R&D
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
NIST SP 800-218A
Used in: GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
SP 800-30 Rev. 1
Used in: GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
SP 800-37 Rev. 2
Used in: GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
SP 800-53A Rev. 5
Used in: GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
NIST SP 800-61r3
Used in: Blue Team, DFIR
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
NIST SP 800-83 Rev. 1
Used in: Malware Analysis
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
NIST SP 800-86
Used in: DFIR
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
NIST SSDF 1.1
Used in: Vulnerability R&D, Secure Code, GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
SP 800-207A
Used in: Cloud Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Source repository
AIDebug
Used in: Secure Code
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Atomic Red Team
Used in: CTI
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
AuditAI
Used in: GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
FileInfo project
Used in: Malware Analysis
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
FLARE Learning Hub
Used in: Malware Analysis
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
GitHub (opens in a new tab) ↗
Used in: CTI, Red Team, Blue Team, Vulnerability R&D, Malware Analysis, Secure Code, DFIR, Cloud Security, GRC, OSINT, AI Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
HexStrike repository
Used in: Red Team
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Malware Behavior Catalog
Used in: Malware Analysis
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Mandiant capa
Used in: Malware Analysis
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Mandiant FLARE-VM
Used in: Malware Analysis
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
MCP trust model
Used in: Red Team
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
StratusAI
Used in: Cloud Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
String Analyzer source
Used in: Vulnerability R&D
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Volatility 3 project
Used in: DFIR
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Vulnerable APK source
Used in: Vulnerability R&D
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
Standard or framework
ISO/IEC 23894 AI risk management
Used in: AI Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
ISO/IEC 27000 family
Used in: GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
ISO/IEC 27001:2022
Used in: GRC
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
ISO/IEC 42001 AI management systems
Used in: AI Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
OWASP Amass
Used in: OSINT
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
OWASP API Security Top 10:2023
Used in: Secure Code
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
OWASP ASVS
Used in: Red Team, Secure Code
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
OWASP LLMSVS
Used in: Secure Code, AI Security
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
OWASP TCASVS
Used in: Red Team
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
OWASP Top 10:2025
Used in: Secure Code
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.
OWASP WSTG
Used in: Red Team, OSINT
Referenced as of 2026-07-27. Use the destination’s own version and supersession notice for normative decisions.