Sources cited across 1200km · Directory updated 2026-09-09
Articles and Guides — References
Deduplicated external sources cited across maintained 1200km articles, guides, research, case studies, documentation, and labs. Search direct titles, descriptions and tags (shared relationships are explored with Find related), filter every normalized tag, pivot across facets, and find references connected by shared evidence metadata.
Evidence boundary
Tags and usage links are discovery metadata derived from published 1200km pages. Citation does not imply endorsement, current validity, attribution, exploitation, causality, or control effectiveness.
Search and correlate references
2733 references shown
Tag correlations
Top co-occurring tags among the current results. Select a tag to pivot the library.
Related references
Select Find related on a reference to rank other sources by shared normalized tags.
Reference index
Cards intentionally contain only a title, short description, canonical resource link, and discovery tags. Every tag remains visible and clickable; expand a card to inspect the complete tag set.
Core research
Defending Against an Active Threat to Siemens S7 Series PLCs | CISA (opens the source resource in a new tab)
bibliographic · authored-metadata
CISA government or law-enforcement publication covering Exploit development, Obfuscation and evasion, and Reconnaissance and target research. Indexed with Critical Infrastructure context.
Context
Defending against CVE-2025–55182 (React2Shell) in React Server Components | Microsoft Security Blog (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Core research
Defending Your Enterprise When AI Models Can Find Vulnerabilities Faster Than Ever (opens the source resource in a new tab)
bibliographic · authored-metadata
Google Threat Intelligence Group / Mandiant operational CTI publication covering Exploit development, Vulnerability research, and Prompt injection. Indexed with Critical Infrastructure and Anthropic context.
Context
Dennis V. Lindley, “On a Measure of the Information Provided by an Experiment” (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
Deploy a Complete Active Directory PenTest Lab in One Prompt with Cursor AI How I automated the deployment of a complex AD lab environment using AI assistance medium.com (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 3 maintained 1200km pages.
Context
detect.fyi (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Core research
Detecting and countering malicious uses of Claude: March 2025 (opens the source resource in a new tab)
bibliographic · authored-metadata
Anthropic provider or government report covering Identity fraud and impersonation, Influence operations, and Malware development. Indexed with Artificial Intelligence and Anthropic context.
Used in 1 page
Core research
Detecting and countering misuse of AI: August 2025 (opens the source resource in a new tab)
bibliographic · authored-metadata
Anthropic provider or government report covering Reconnaissance and target research, Data exfiltration, and Agentic AI. Indexed with Cryptocurrency and Anthropic context.
Context
detection.fyi (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
detection.fyi (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
detection.fyi (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
detection.fyi (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
detection.fyi (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
detection.fyi (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
detection.fyi (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
detections/kql/intune-bulk-device-wipe-anomaly.kql (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 26 maintained 1200km pages.
Used in 26 pages
- Actor Navigation Workbench research
- Agrius research
- Apostle research
- AshTag research
- ASPXSpy research
- BFG Agonizer research
- BiBi / BiBi Wiper lineage research
- BlackShadow research
Showing 8 of 26 internal crosslinks.
Context
detections/kql/mail-click-to-exec-correlation.kql (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 61 maintained 1200km pages.
Used in 61 pages
- Actor Navigation Workbench research
- APT42 research
- AshTag research
- BiBi / BiBi Wiper lineage research
- BlackBeard research
- BugSleep research
- CharmPower research
- CHIMNEYSWEEP research
Showing 8 of 61 internal crosslinks.
Context
detections/kql/suspicious-rmm-file-sharing-download.kql (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 32 maintained 1200km pages.
Used in 32 pages
- Actor Navigation Workbench research
- BlackBeard research
- BugSleep research
- ConnectWise research
- CrackMapExec research
- DCHSpy research
- Dindoor research
- Empire research
Showing 8 of 32 internal crosslinks.
Context
detections/sigma/suspicious-rmm-file-sharing-download.yml (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 32 maintained 1200km pages.
Used in 32 pages
- Actor Navigation Workbench research
- BlackBeard research
- BugSleep research
- ConnectWise research
- CrackMapExec research
- DCHSpy research
- Dindoor research
- Empire research
Showing 8 of 32 internal crosslinks.
Context
detections/sigma/unitronics-plc-hmi-web-access.yml (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 25 maintained 1200km pages.
Used in 25 pages
- Actor Navigation Workbench research
- Caterpillar WebShell research
- CRYPTOSLAY research
- Cyber Toufan research
- Cyber Toufan supplier-access playbook research
- CyberAv3ngers research
- Explosive RAT research
- IOControl research
Showing 8 of 25 internal crosslinks.
Context
DeTT&CT (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
developer.android.com/studio (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 2 maintained 1200km pages.
Context
DHS/FBI GRIZZLY STEPPE archival mirror (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
DIA photo record (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
No references match the current filters.