Sources cited across 1200km · Directory updated 2026-09-09
Articles and Guides — References
Deduplicated external sources cited across maintained 1200km articles, guides, research, case studies, documentation, and labs. Search direct titles, descriptions and tags (shared relationships are explored with Find related), filter every normalized tag, pivot across facets, and find references connected by shared evidence metadata.
Tags and usage links are discovery metadata derived from published 1200km pages. Citation does not imply endorsement, current validity, attribution, exploitation, causality, or control effectiveness.
Search and correlate references
Tag correlations
Top co-occurring tags among the current results. Select a tag to pivot the library.
Related references
Select Find related on a reference to rank other sources by shared normalized tags.
Reference index
Cards intentionally contain only a title, short description, canonical resource link, and discovery tags. Every tag remains visible and clickable; expand a card to inspect the complete tag set.
CTI as a Code in Practice: Reactive Investigation — LifeTech Pharma (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 2 maintained 1200km pages.
Used in 2 pages
CTI as a Code repository (opens the source resource in a new tab)
tool · authored-metadata
External source cited by 43 maintained 1200km pages.
Used in 43 pages
- A01 — Reactive IR: LifeTech Pharma lab
- A02 — Proactive CTI: CelltronX Telecom lab
- A03 — Full CTI Cycle: TechPay FinTech lab
- A04 — Adversary Emulation: TechPay (Operation Desert Cipher) lab
- A05 — Reactive IR (Gov): NDSA Biometric Breach lab
- A06 — Proactive CTI (Gov): GovID 2.0 Pre-Launch lab
- A07 — Full CTI Cycle (Gov): NDSA CTI Program lab
- A08 — Adversary Emulation (Gov): NDSA INCD Section 8 lab
Showing 8 of 43 internal crosslinks.
CTI as a Code: Complete Step-by-Step Methodology (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
CTI Kill Chain: An Analyst Guide With Real-World Evidence (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 2 maintained 1200km pages.
Used in 2 pages
- Andrey Pautov Medium Articles research
- Void Manticore / Handala research
CTI Research Repository (opens the source resource in a new tab)
tool · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
CTI Research: Handala Hack Group aka Handala Hack Team (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 10 maintained 1200km pages.
Used in 10 pages
- Andrey Pautov Medium Articles research
- BiBi / BiBi Wiper lineage research
- CTI Must Evolve: Beyond IOC Feeds research
- CTI Research: Handala Hack Group (aka Handala Hack Team) article
- Guide Overview guide
- Handala-linked destructive installer chains research
- Malware And Tool Intelligence research
- SOC Analyst Playbook: The 90-Day Roadmap research
Showing 8 of 10 internal crosslinks.
CTI Research: MuddyWater / Seedworm / Mango Sandstorm (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 3 maintained 1200km pages.
Used in 3 pages
- Andrey Pautov Medium Articles research
- CTI Research: MuddyWater/Seedworm (Mango Sandstorm) article
- MuddyWater research
CTI-Led Defensive Strategy for a Cellular Provider (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
- Andrey Pautov Medium Articles research
CTI/muddywater-seedworm at main · anpa1200/CTI *Open-source cyber threat intelligence reports: evidence-labeled assessments, SOC-oriented guidance, and defensive…*github.com (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
CTI/sandworm-apt44 at main · anpa1200/CTI *Contribute to anpa1200/CTI development by creating an account on GitHub.*github.com (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
- CTI Research: Sandworm / APT44 article
current C++ String Analyser source (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
- Authenticator.exe/DearSteeler article
Cursor (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 3 maintained 1200km pages.
Customer-Driven AI CTI Project repository (opens the source resource in a new tab)
tool · authored-metadata
External source cited by 30 maintained 1200km pages.
Used in 30 pages
- Artifact Contracts guide
- ATT&CK and D3FEND Mappings guide
- Changelog guide
- Complete Worked Case: Cloud Identity to Backup Deletion guide
- Cross-Project Fact Correlation guide
- CTI Project Ecosystem lab
- CTI Project Ecosystem guide
- CTI Project Ecosystem guide
Showing 8 of 30 internal crosslinks.
CVE Program structure (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 2 maintained 1200km pages.
Used in 2 pages
- Cyber Knowledge Source Index documentation
- Vulnerability Research & Exploit Development guide
CVE-2022–26134 (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
CVE-2024–21626 Impact, Exploitability, and Mitigation | Wiz (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
CVE-2024–3400 advisory (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
CVE-2025–31133 (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
CVE-2025–52565 (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
CVE-2025–52881 (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
CVE-2026-10520 - Ivanti Sentry OS Command Injection Vulnerability (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 2 maintained 1200km pages.
Used in 2 pages
CVSS v4 Practical Guide (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
CVSS v4.0 Enrichment Tool — KEV + EPSS + BTE automation (opens the source resource in a new tab)
tool · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
CVSS v4.0 Specification (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
No references match the current filters.