Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures | Paper Citation Record

Observation 9c57aa00-ad48-4f80-856f-116966edf673 · outbound

This paper cites Computer security incident handling guide,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Computer security incident handling guide,

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.646244Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f6fbc5fa-2ece-44eb-8ba9-55bd2605fe50 · outbound

This paper cites Advanced persistent threats and how to monitor and deter them,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Advanced persistent threats and how to monitor and deter them,

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.649796Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8b8f1ff0-7567-4676-917d-7989628b78f0 · outbound

This paper cites APT 1: Exposing one of china’s cyber espionage units,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures APT 1: Exposing one of china’s cyber espionage units,

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.652801Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dbf8544b-0f63-440d-98c1-6d0eaa8adb9f · outbound

This paper cites E ARLYCROW: Detecting APT malware command and control over HTTP(S) using contextual summaries,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures E ARLYCROW: Detecting APT malware command and control over HTTP(S) using contextual summaries,

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.656937Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 44dd7f4e-07d4-4903-810e-bc2432c9d18a · outbound

This paper cites Apt beaconing detection: A systematic review,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Apt beaconing detection: A systematic review,

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.660856Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 26d74dcc-d828-4301-bb7a-cc34d61077ca · outbound

This paper cites Survey of publicly available reports on advanced persistent threat actors,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Survey of publicly available reports on advanced persistent threat actors,

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.664769Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2e4651e9-8634-4e92-9a51-69ec776d23c6 · outbound

This paper cites Apt datasets and attack modeling for automated detection methods: A review,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Apt datasets and attack modeling for automated detection methods: A review,

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.669497Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ca5b8936-1f69-475a-a019-3688c8e476bf · outbound

This paper cites A survey on advanced persistent threats: Techniques, solutions, challenges, and research opportunities,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures A survey on advanced persistent threats: Techniques, solutions, challenges, and research opportunities,

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.673739Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d4d77364-3308-4f12-a098-17f25154762a · outbound

This paper cites Finding cyber threats with att&ck™-based analytics,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Finding cyber threats with att&ck™-based analytics,

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.677087Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 733c086f-0cae-4243-9f21-f4f815628219 · outbound

This paper cites APT 28 under the scope a journey into exfiltrating intelligence and government information,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures APT 28 under the scope a journey into exfiltrating intelligence and government information,

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.680544Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1b7632a8-d432-4094-b1bd-b123a2512059 · outbound

This paper cites Sednit update: How fancy bear spent the year.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Sednit update: How fancy bear spent the year

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.684073Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 457c0c5b-0ff9-4da0-9399-49f4aa47b490 · outbound

This paper cites Operation cobalt kitty: A large-scale APT in asia carried out by the oceanlotus group.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Operation cobalt kitty: A large-scale APT in asia carried out by the oceanlotus group

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.687388Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 559bef54-cdee-4aca-b157-c6b0d68bbb82 · outbound

This paper cites Operation cobalt kitty cybereason labs analysis,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Operation cobalt kitty cybereason labs analysis,

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.690823Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 59a11d99-26d9-47e5-bfd7-58f266b8aa06 · outbound

This paper cites The dukes 7 years of russian cyberespionage,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures The dukes 7 years of russian cyberespionage,

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.694189Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7cccd95a-36bc-4c61-b953-b48d8ecafb74 · outbound

This paper cites Bears in the midst: Intrusion into the democratic national committee.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Bears in the midst: Intrusion into the democratic national committee

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.697559Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b665c94f-c363-42e4-b70e-10d3f00cb9bb · outbound

This paper cites Buckeye cyberespionage group shifts gaze from us to hong kong.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Buckeye cyberespionage group shifts gaze from us to hong kong

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.700856Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 550d7160-e059-4e31-b673-3d37c21a8412 · outbound

This paper cites Where you at?: Indicators of lateral movement using at.exe on windows 7 systems.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Where you at?: Indicators of lateral movement using at.exe on windows 7 systems

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.707896Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9dc5709d-3ca2-4ddd-b9ee-0f010b085555 · outbound

This paper cites Evasive maneuvers by the wekby group with custom rop-packing and dns covert channels.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Evasive maneuvers by the wekby group with custom rop-packing and dns covert channels

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.711390Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5f65e229-6482-45dc-be57-e81d8151b3a0 · outbound

This paper cites APT 37 (reaper) the overlooked north korean actor, special report,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures APT 37 (reaper) the overlooked north korean actor, special report,

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.714825Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0f873496-590a-49e6-b8b6-64fe98841de2 · outbound

This paper cites A taxonomy of botnet behavior, detection, and defense,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures A taxonomy of botnet behavior, detection, and defense,

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.718563Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3735ab84-30c3-4d12-8b9c-46940332a6fd · outbound

This paper cites Detecting APT malware infections based on malicious dns and traffic analysis,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Detecting APT malware infections based on malicious dns and traffic analysis,

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.722240Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bd0f8f98-191a-4233-8946-79a680f90ec6 · outbound

This paper cites Botnet communication patterns,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Botnet communication patterns,

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.725929Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1670e588-ecb1-4bcd-b389-21870d3c01a7 · outbound

This paper cites Advanced persistent threats: Behind the scenes,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Advanced persistent threats: Behind the scenes,

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.729365Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 93133b80-0bbc-4c5a-a16f-0e0f70e84081 · outbound

This paper cites A study on advanced persistent threats,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures A study on advanced persistent threats,

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.733120Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9a5e5e43-6110-41df-8798-b63fc1c41146 · outbound

This paper cites H AWK-E YE: Holistic detection of APT command and control domains,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures H AWK-E YE: Holistic detection of APT command and control domains,

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.736564Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 47d5f66f-b919-42db-b644-5d43cb3395ed · outbound

This paper cites Intelligence- driven computer network defense informed by analysis of adversary campaigns and intrusion kill chains,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Intelligence- driven computer network defense informed by analysis of adversary campaigns and intrusion kill chains,

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.740118Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b4a13848-5953-464f-b785-54af61e73208 · outbound

This paper cites Sys- tems for detecting advanced persistent threats: A development roadmap using intelligent data analysis,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Sys- tems for detecting advanced persistent threats: A development roadmap using intelligent data analysis,

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.743064Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2090bc96-4e18-4d54-a396-a3d4ff6a8375 · outbound

This paper cites A context-based detection framework for advanced persistent threats,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures A context-based detection framework for advanced persistent threats,

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.745923Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e46e959e-cd60-447f-a63f-e819d33cfbea · outbound

This paper cites Technical aspects of cyber kill chain,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Technical aspects of cyber kill chain,

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.748658Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ada5b21f-f2eb-4e27-92d5-f80e058aa7f1 · outbound

This paper cites A cyber kill chain based taxonomy of banking trojans for evolutionary computational intelligence,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures A cyber kill chain based taxonomy of banking trojans for evolutionary computational intelligence,

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.751572Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 00d5f55d-5360-484d-843c-85637fa2f2d9 · outbound

This paper cites A markov multi- phase transferable belief model: An application for predicting data exfiltration apts,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures A markov multi- phase transferable belief model: An application for predicting data exfiltration apts,

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.754608Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c4862444-ee8f-4b4e-be5a-73f610d7e804 · outbound

This paper cites HOLMES: Real-time APT Detection through Correlation of Suspicious Information Flows.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures HOLMES: Real-time APT Detection through Correlation of Suspicious Information Flows

Reference 32

Resolution: verified exact; local_arxiv, observed 2026-08-07T23:35:23.262031Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation a2cc9170-4c33-457d-b7d6-746e6008df24 · outbound

This paper cites Situation awareness of multistage cyber attacks by semantic event fusion,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Situation awareness of multistage cyber attacks by semantic event fusion,

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.760498Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5c7227f8-b9f5-4956-b997-4d339ced4343 · outbound

This paper cites Dark matter: Uncovering the darkcomet rat ecosystem,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Dark matter: Uncovering the darkcomet rat ecosystem,

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.763445Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 088b0357-b5fb-463c-bcc9-8e04a8609b34 · outbound

This paper cites Schrödinger’s RAT: Profiling the stakeholders in the remote access trojan ecosystem,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Schrödinger’s RAT: Profiling the stakeholders in the remote access trojan ecosystem,

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.766228Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e9283908-d2d6-4fea-9648-5569fbdb7deb · outbound

This paper cites To catch a ratter: Monitoring the behavior of amateur darkcomet rat operators in the wild,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures To catch a ratter: Monitoring the behavior of amateur darkcomet rat operators in the wild,

Reference 36

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.769772Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b9c6c9eb-cd12-4c52-9248-fc2d6f6b9012 · outbound

This paper cites Fin7.5: the infamous cybercrime rig “fin7.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Fin7.5: the infamous cybercrime rig “fin7

Reference 37

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.773305Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6bef525e-c2bb-42aa-8b77-d86bda599683 · outbound

This paper cites The elderwood project,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures The elderwood project,

Reference 38

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.776681Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3d8e3262-c220-487b-a188-6db6bcbc8532 · outbound

This paper cites an unresolved cited work.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Unresolved cited work

Reference 39

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.779947Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 77f6cbda-f8c6-46e9-aa74-de57a6edfc9d · outbound

This paper cites APT 3 adversary emulation plan,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures APT 3 adversary emulation plan,

Reference 40

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.783373Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 49ed2836-8205-4338-95db-2011fb6f1163 · outbound

This paper cites Opera- tion double tap.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Opera- tion double tap

Reference 41

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.786811Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 96bfe9b6-781c-4f5a-bd9c-8c735eac2470 · outbound

This paper cites Yates, APT 3 Uncovered: The code evolution of Pirpi.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Yates, APT 3 Uncovered: The code evolution of Pirpi

Reference 42

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.790463Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c7963bd8-b53d-4a05-93a8-4311f68bc303 · outbound

This paper cites Operation cloud hopper,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Operation cloud hopper,

Reference 43

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.793979Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 88499f63-3d13-4034-8301-66d667d8d828 · outbound

This paper cites Operation cloud hopper technical annex,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Operation cloud hopper technical annex,

Reference 44

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.797392Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f7791d48-2da0-4b79-aec7-3e8ee3cd59f7 · outbound

This paper cites Darwin’s favorite APT group.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Darwin’s favorite APT group

Reference 45

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.800795Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 889bef84-fd73-444b-90c6-b848f82f9e60 · outbound

This paper cites Operation “ke3chang.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Operation “ke3chang

Reference 46

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.804162Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 96eac31c-9585-4fca-b411-6de730f30820 · outbound

This paper cites Apt15 is alive and strong: An analysis of royalcli and royaldns.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Apt15 is alive and strong: An analysis of royalcli and royaldns

Reference 47

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.807430Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation edda471e-64f2-44ff-a4d0-04db47b7f20d · outbound

This paper cites The eps awakens - part 2.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures The eps awakens - part 2

Reference 48

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.810781Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 089facba-2eed-4b2e-95b3-c7e5ab59c5da · outbound

This paper cites The eps awakens.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures The eps awakens

Reference 49

Resolution: unresolved; no resolver link, observed 2026-08-07T23:35:22.813955Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0162fc42-0a6d-4dd1-b79e-2f505ae2ecda · outbound

This paper cites Hiding in plain sight: Fireeye and microsoft expose,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Hiding in plain sight: Fireeye and microsoft expose,

Reference 50

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:24.061542Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 500366d1-ec44-4bc3-8ebc-21f2342a6558 · outbound

This paper cites New attacks linked to c0d0so0 group.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures New attacks linked to c0d0so0 group

Reference 51

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:24.051434Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 46aa87c4-92af-4889-860c-c66bf966c382 · outbound

This paper cites Privileges and credentials: Phished at the request of counsel.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Privileges and credentials: Phished at the request of counsel

Reference 52

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:24.041928Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation aea56fbd-b22c-4460-a3b5-e49925e0af0f · outbound

This paper cites Threat group 3390 cyberespionage.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Threat group 3390 cyberespionage

Reference 53

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:24.032374Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation fd7412c8-96c1-41cd-ad2d-12edaedd2876 · outbound

This paper cites Bronze union cyberespionage persists despite dis- closures.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Bronze union cyberespionage persists despite dis- closures

Reference 54

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:24.022572Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 14f3f2e3-b2de-4a70-8385-fef0e3fcf423 · outbound

This paper cites Luckymouse hits national data center to organize country- level waterholing campaign.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Luckymouse hits national data center to organize country- level waterholing campaign

Reference 55

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:24.012610Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation b80f38af-a5c5-4f02-8a71-2d6c0d91256e · outbound

This paper cites APT 28: A window into russia’s cyber espionage operations and a special report,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures APT 28: A window into russia’s cyber espionage operations and a special report,

Reference 56

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:24.002647Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation bb1b8239-767e-4843-8643-4592ce52f6b1 · outbound

This paper cites Anthe, P.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Anthe, P

Reference 57

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.992106Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 8b194009-b595-480b-97d3-77819e8de76d · outbound

This paper cites APT 28: New espionage operations target mili- tary and government organizations.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures APT 28: New espionage operations target mili- tary and government organizations

Reference 58

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.982385Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 1eed2df5-ef85-45b2-aef1-5299c4cf42a6 · outbound

This paper cites Lab, En Route with Sednit Part 2: Observing the Comings and Goings, vol.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Lab, En Route with Sednit Part 2: Observing the Comings and Goings, vol

Reference 59

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.972106Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation e72371ff-25c7-471d-91bd-08deacfa8704 · outbound

This paper cites Grizzly steppe – russian malicious cyber activity,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Grizzly steppe – russian malicious cyber activity,

Reference 60

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.962776Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 11758e14-513e-4f5e-915f-e4de340eb31a · outbound

This paper cites Not so cozy: An uncomfortable examination of a suspected apt29 phishing campaign.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Not so cozy: An uncomfortable examination of a suspected apt29 phishing campaign

Reference 61

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.953303Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 2fa29983-8a0a-41e3-967a-676bdc3d8609 · outbound

This paper cites Labs, APT 30 and the mechanics of a long-running cyber espionage operation.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Labs, APT 30 and the mechanics of a long-running cyber espionage operation

Reference 62

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.943399Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation e6a66b9e-d591-4415-8621-6d2c6b4b5cfe · outbound

This paper cites Fake or fake: Keeping up with oceanlotus decoys.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Fake or fake: Keeping up with oceanlotus decoys

Reference 63

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.933158Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation b7f330ac-5d55-4299-a455-80e37500703c · outbound

This paper cites Cyber espionage is alive and well: APT 32 and the threat to global corporations.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Cyber espionage is alive and well: APT 32 and the threat to global corporations

Reference 64

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.922770Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation a0ae1323-cb1c-4dbc-b5fe-425fd6ef6b24 · outbound

This paper cites Insights into iranian cyber espionage: APT 33 targets aerospace and energy sectors and has ties to destructive malware.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Insights into iranian cyber espionage: APT 33 targets aerospace and energy sectors and has ties to destructive malware

Reference 65

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.912076Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 61e45b20-2335-43a6-8af8-3bba8a6314d9 · outbound

This paper cites Elfin: Relentless espionage group targets multiple organizations in saudi arabia and u.s.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Elfin: Relentless espionage group targets multiple organizations in saudi arabia and u.s

Reference 66

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.901734Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 0a8f6610-9129-441f-9996-f2c81d277cbc · outbound

This paper cites Overruled: Containing a potentially destructive adversary.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Overruled: Containing a potentially destructive adversary

Reference 67

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.891613Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation b4bb269f-b664-4df3-a1fd-2d6697f220c8 · outbound

This paper cites New targeted attack in the middle east by apt34, a suspected iranian threat group, using cve-2017-11882 ex- ploit.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures New targeted attack in the middle east by apt34, a suspected iranian threat group, using cve-2017-11882 ex- ploit

Reference 68

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.881723Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 8e3fe395-ecda-46bc-8daa-2b70cc747902 · outbound

This paper cites Oilrig uses ismdoor variant; possibly linked to greenbug threat group.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Oilrig uses ismdoor variant; possibly linked to greenbug threat group

Reference 69

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.871471Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 9b6c96bb-146b-4133-ae9d-b5fdaa4c0409 · outbound

This paper cites Rocket kitten: A campaign with 9 lives,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Rocket kitten: A campaign with 9 lives,

Reference 70

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.861016Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 5772b97e-7a4f-4946-94b5-84d52341687a · outbound

This paper cites China-based cyber threat group uses drop- box for malware communications and targets hong kong media outlets.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures China-based cyber threat group uses drop- box for malware communications and targets hong kong media outlets

Reference 71

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.850743Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 87db63c7-14e6-495d-baa7-f2634fef91f1 · outbound

This paper cites Operation blockbuster: Unraveling the long thread of the sony attack,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Operation blockbuster: Unraveling the long thread of the sony attack,

Reference 72

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.840073Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 6da56f66-73b6-431e-acbe-0412ec9bb551 · outbound

This paper cites Operation blockbuster: Remote administration tools and content staging malware report,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Operation blockbuster: Remote administration tools and content staging malware report,

Reference 73

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.828861Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation c8b69a9a-06f0-4ab4-818e-953b481e1133 · outbound

This paper cites Colbat snatch,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Colbat snatch,

Reference 74

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.818659Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 2489ca3f-ae9b-453c-a730-ff681d7a3a09 · outbound

This paper cites Multiple cobalt personality disorder.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Multiple cobalt personality disorder

Reference 75

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.808745Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 26d72547-846e-4908-af9b-09d501c1d25a · outbound

This paper cites an unresolved cited work.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Unresolved cited work

Reference 76

Resolution: unresolved; raw_fallback, observed 2026-08-07T23:35:23.798555Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 5d7598b6-5354-4284-aa3e-1e0391a0efc2 · outbound

This paper cites Lab, The Duqu 2.0 technical details.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Lab, The Duqu 2.0 technical details

Reference 77

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.788767Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 7435171a-e55f-4d9a-b87b-54c77b0cf040 · outbound

This paper cites On the hunt for fin7: Pursuing an enigmatic and evasive global crimi- nal operation.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures On the hunt for fin7: Pursuing an enigmatic and evasive global crimi- nal operation

Reference 78

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.778828Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 57b1a906-7079-4bbb-baa5-2667201d5cf3 · outbound

This paper cites Apt40: Examining a china-nexus espionage actor.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Apt40: Examining a china-nexus espionage actor

Reference 79

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.768727Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation f5f5250c-67e9-49f2-a93d-184cb4bab181 · outbound

This paper cites Suspected chinese cyber espionage group (temp.periscope) targeting u.s. engineering and maritime industries.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Suspected chinese cyber espionage group (temp.periscope) targeting u.s. engineering and maritime industries

Reference 80

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.758543Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation edea8532-ed1a-468b-a6ac-cd8beaef5996 · outbound

This paper cites The msnmm campaigns the earliest naikon APT campaigns,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures The msnmm campaigns the earliest naikon APT campaigns,

Reference 81

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.747946Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 0204b5d1-df61-4757-89b0-f545db9a2f10 · outbound

This paper cites Camerashy closing the aperture on china’s unit 78020,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Camerashy closing the aperture on china’s unit 78020,

Reference 82

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.736936Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 39772987-f61e-46dc-8670-e4f75e83ab75 · outbound

This paper cites Untangling the patchwork cyberespionage group,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Untangling the patchwork cyberespionage group,

Reference 83

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.726252Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 34281caf-502a-4748-948e-060c7698e179 · outbound

This paper cites Patchwork APT group targets us think tanks.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Patchwork APT group targets us think tanks

Reference 84

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.715621Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 107b30b3-282e-4ea5-a2b7-a504a43abaec · outbound

This paper cites an unresolved cited work.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Unresolved cited work

Reference 85

Resolution: unresolved; raw_fallback, observed 2026-08-07T23:35:23.705455Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 9fc688c2-64c1-4cd2-9f81-8d02d02b44de · outbound

This paper cites an unresolved cited work.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Unresolved cited work

Reference 86

Resolution: unresolved; raw_fallback, observed 2026-08-07T23:35:23.695515Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation f74b8225-dd93-4d68-b3e7-deaa48ffe059 · outbound

This paper cites Research and A.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Research and A

Reference 87

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.685534Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation ab481c5b-e7b6-434a-adfd-ff3b7d4b4a94 · outbound

This paper cites Backdoor.remsec indicators of compromise,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Backdoor.remsec indicators of compromise,

Reference 88

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.675798Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 2700a7fd-5650-404a-a591-dddfc8a18edc · outbound

This paper cites an unresolved cited work.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Unresolved cited work

Reference 89

Resolution: unresolved; raw_fallback, observed 2026-08-07T23:35:23.665293Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 727c4c86-f6fd-4c8b-8623-b9f66d615f91 · outbound

This paper cites Research and A.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Research and A

Reference 90

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.655165Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 59e892a6-cb81-4d24-802e-6542aaad63dc · outbound

This paper cites Research and A.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Research and A

Reference 91

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.645208Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation c198da4d-9740-4cb4-b4ff-3aa91ff8b993 · outbound

This paper cites Research and A.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Research and A

Reference 92

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.635008Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation cdc5bc10-b304-4028-9bfc-2fba28dc5687 · outbound

This paper cites Puttering into the future.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Puttering into the future

Reference 93

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.625336Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 168c5707-e4a1-4271-b00a-13b51e48ac63 · outbound

This paper cites Decoding network data from a gh0st rat variant.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Decoding network data from a gh0st rat variant

Reference 94

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.615417Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation f8a14192-bc5e-4ae9-8746-77381b450aec · outbound

This paper cites New wekby attacks use dns requests as command and control mechanism.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures New wekby attacks use dns requests as command and control mechanism

Reference 95

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.596492Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 62d26c5a-632e-4f66-b3d4-b0027902170a · outbound

This paper cites Emissary panda – a potential new malicious tool.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Emissary panda – a potential new malicious tool

Reference 96

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.586135Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 628574dd-e1e9-4da6-8ed7-23e747313a5a · outbound

This paper cites Apt29 domain fronting with tor.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Apt29 domain fronting with tor

Reference 97

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.575360Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 84fa5327-eb9c-439d-a787-7fa95ea8672a · outbound

This paper cites Oceanlotus blossoms: Mass digital surveillance and attacks targeting asean, asian nations, the me- dia, human rights groups, and civil society.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Oceanlotus blossoms: Mass digital surveillance and attacks targeting asean, asian nations, the me- dia, human rights groups, and civil society

Reference 98

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.563790Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation 6e7442a8-efa1-495b-975c-ee41c91c7012 · outbound

This paper cites Oceanlotus old techniques, new backdoor,.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Oceanlotus old techniques, new backdoor,

Reference 99

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T23:35:23.552338Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

Observation cb642fd1-b3dc-49e6-a666-061a9c921127 · outbound

This paper cites an unresolved cited work.

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures Unresolved cited work

Reference 100

Resolution: parse uncertain; no resolver link, observed 2026-08-07T23:35:22.975872Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Coverage vector

Reference resolution

Outbound references

Pith citing papers