Sources cited across 1200km · Directory updated 2026-09-09
Articles and Guides — References
Deduplicated external sources cited across maintained 1200km articles, guides, research, case studies, documentation, and labs. Search direct titles, descriptions and tags (shared relationships are explored with Find related), filter every normalized tag, pivot across facets, and find references connected by shared evidence metadata.
Search and correlate references
2718 references shown
Reference index
Cards intentionally contain only a title, short description, canonical resource link, and discovery tags. Every tag remains visible and clickable; expand a card to inspect the complete tag set.
Context
T1003 OS Credential Dumping (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 3 maintained 1200km pages.
Context
T1005 Data from Local System (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 2 maintained 1200km pages.
Used in 2 pages
Context
T1020 Automated Exfiltration (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 2 maintained 1200km pages.
Used in 2 pages
Context
T1021 Remote Services (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 2 maintained 1200km pages.
Context
T1021.001 Remote Desktop Protocol (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 2 maintained 1200km pages.
Used in 2 pages
Context
T1021.002 SMB/Windows Admin Shares (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 2 maintained 1200km pages.
Used in 2 pages
Context
T1021.004 SSH (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
T1021.006 Windows Remote Management (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
T1027 Obfuscated Files or Information (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 3 maintained 1200km pages.
Context
T1030 Data Transfer Size Limits (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 3 maintained 1200km pages.
Context
T1036 Masquerading (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 3 maintained 1200km pages.
Context
T1039 Data from Network Shared Drive (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
T1041 Exfiltration Over C2 Channel (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 4 maintained 1200km pages.
Used in 4 pages
Context
T1046 Network Service Discovery (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 3 maintained 1200km pages.
Context
T1047 Windows Management Instrumentation (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
T1048 Exfiltration Over Alternative Protocol (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 2 maintained 1200km pages.
Used in 2 pages
Context
T1049 (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
- TTP To Detection Matrix research
Context
T1052 Exfiltration Over Physical Medium (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 2 maintained 1200km pages.
Used in 2 pages
Context
T1053 Scheduled Task/Job (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 3 maintained 1200km pages.
Context
T1055 Process Injection (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 3 maintained 1200km pages.
Context
T1056 Input Capture (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 1 maintained 1200km page.
Used in 1 page
Context
T1057 Process Discovery (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 2 maintained 1200km pages.
Used in 2 pages
Context
T1059 Command and Scripting Interpreter (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 3 maintained 1200km pages.
Context
T1059.001 PowerShell (opens the source resource in a new tab)
bibliographic · authored-metadata
External source cited by 5 maintained 1200km pages.
No references match the current filters.