Sources cited across 1200km · Directory updated 2026-09-09
Articles and Guides — References
Deduplicated external sources cited across maintained 1200km articles, guides, research, case studies, documentation, and labs. Search direct titles, descriptions and tags (shared relationships are explored with Find related), filter every normalized tag, pivot across facets, and find references connected by shared evidence metadata.
Evidence boundary
Tags and usage links are discovery metadata derived from published 1200km pages. Citation does not imply endorsement, current validity, attribution, exploitation, causality, or control effectiveness.
Search and correlate references
2733 references shown
Tag correlations
Top co-occurring tags among the current results. Select a tag to pivot the library.
Related references
Select Find related on a reference to rank other sources by shared normalized tags.
Reference index
Cards intentionally contain only a title, short description, canonical resource link, and discovery tags. Every tag remains visible and clickable; expand a card to inspect the complete tag set.
Context
Microsoft Learn — How Microsoft names threat actors (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 2 maintained 1200km pages.
Used in 2 pages
Context
Microsoft MSRC: CVE-2025-32711 (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 5 maintained 1200km pages.
Used in 5 pages
- AI Security Course, Module 00 — Chapter 4 article
- AI Security Course, Module 00 — Chapter 4: Transformers and LLM Generation guide
- AI Security Course, Module 00 — Part 1: Introduction, AI/ML Taxonomy article
- AI Security Course, Module 00 — Part 1: Introduction, AI/ML Taxonomy, and Data Foundations research
- AI Security Threat Landscape research
Context
Microsoft PE format specification (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 2 maintained 1200km pages.
Used in 2 pages
Context
Microsoft Secure Boot “Act now” 2026 guidance (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Context
Microsoft Secure Boot certificate expiration guidance (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Context
Microsoft Security Blog, AI as tradecraft: How threat actors operationalize AI (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
Microsoft Security Blog, AI-enabled device code phishing campaign (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
Microsoft Security Blog, How Microsoft discovers and mitigates evolving attacks against AI guardrails (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
Microsoft Security Blog: identity and Midnight Blizzard guidance (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
Microsoft Security, SesameOp: Novel backdoor uses OpenAI Assistants API for command and control (November 3, 2025) (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 2 maintained 1200km pages.
Context
Microsoft SignTool documentation (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
Microsoft TEB structure (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
Microsoft VirtualAlloc documentation (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
Microsoft x64 ABI conventions (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
Microsoft x64 calling convention (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
Microsoft, GoldMax, GoldFinder, and Sibot (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 2 maintained 1200km pages.
Context
Microsoft, Iran accelerates cyber operations against Israel (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
Microsoft, NotPetya technical analysis (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 2 maintained 1200km pages.
Context
Microsoft: Analyzing attacks taking advantage of the Exchange Server vulnerabilities (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 4 maintained 1200km pages.
Context
Microsoft: Microsoft mitigates China-based threat actor Storm-0558 targeting of customer email (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 4 maintained 1200km pages.
Context
Microsoft: Midnight Blizzard: Guidance for responders on nation-state attack (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 8 maintained 1200km pages.
Used in 8 pages
- Evidence Register: Real APT Campaigns and Documented Anomaly Patterns guide
- Frequency / Rate guide
- From Threat Intelligence to Detection: A Practitioner’s Guide article
- Geographic / ASN guide
- Graph / Relationship guide
- Malicious Activity as a Statistical Signal: Anomaly Detection Engineering article
- Newest Detection Engineering Techniques: From Rules to Validated Security Telemetry article
- References guide
Context
Microsoft: Threat actors misuse OAuth applications to automate financially driven attacks (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 6 maintained 1200km pages.
Used in 6 pages
Context
Microsoft’s Volt Typhoon advisory (May 2023). (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 4 maintained 1200km pages.
Context
MISP — self-hosted (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 10 maintained 1200km pages.
Read assessed profile for MISP →
Used in 10 pages
- AdversaryGraph vs MISP documentation
- Comparison Overview documentation
- CTI as a Code — Methodology lab
- Customer-Driven AI CTI Project Template guide
- Customer-Driven AI CTI Project Template guide
- Customer-Driven AI CTI Project Template guide
- Customer-Driven AI CTI Project Template. Part 1: Foundations article
- Cyber Knowledge Source Index documentation
Showing 8 of 10 internal crosslinks.
No references match the current filters.