Anthropic. (n.d.). Claude [Large language model]. Retrieved August 30, 2026, from https://claude.ai/
Bartock, M., Cichonski, J., Souppaya, M., Smith, M., Witte, G., & Scarfone, K. (2016). Guide for cybersecurity event recovery (NIST Special Publication 800-184). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.SP.800-184
Chandramouli, R. (2022). Guide to a secure enterprise network landscape (NIST Special Publication 800-215). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.SP.800-215
Cichonski, P., Millar, T., Grance, T., & Scarfone, K. (2012). Computer security incident handling guide (NIST Special Publication 800-61, Rev. 2). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.SP.800-61r2
Cybersecurity and Infrastructure Security Agency. (n.d.). Known exploited vulnerabilities catalog. Retrieved August 31, 2026, from https://www.cisa.gov/known-exploited-vulnerabilities-catalog
EICAR. (n.d.). The anti-malware testfile. European Institute for Computer Antivirus Research. https://www.eicar.org/download-anti-malware-testfile/
Furstenberg, J. (2026). Forensic container approach (Version 5) [Course handout]. Kalos Cybersecurity LLC.
Gartner. (n.d.-a). Security orchestration, automation and response (SOAR). In Gartner glossary. Retrieved from https://www.gartner.com/en/information-technology/glossary/security-orchestration-automation-response-soar
Gartner. (n.d.-b). Security information and event management (SIEM). In Gartner glossary. Retrieved from https://www.gartner.com/en/information-technology/glossary/security-information-and-event-management-siem
Gartner. (n.d.-c). Extended detection and response (XDR). In Gartner glossary. Retrieved from https://www.gartner.com/en/information-technology/glossary/xdr-extended-detection-and-response
Central Intelligence Agency. (2009). A tradecraft primer: Structured analytic techniques for improving intelligence analysis. https://www.cia.gov/resources/csi/static/Tradecraft-Primer-apr09.pdf
Heuer, R. J. (1999). Psychology of intelligence analysis. Center for the Study of Intelligence, Central Intelligence Agency.
Joint Task Force. (2020). Security and privacy controls for information systems and organizations (NIST Special Publication 800-53, Rev. 5). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.SP.800-53r5
Johnson, C., Badger, L., Waltermire, D., Snyder, J., & Skorupka, C. (2016). Guide to cyber threat information sharing (NIST Special Publication 800-150). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.SP.800-150
Kent, K., Chevalier, S., Grance, T., & Dang, H. (2006). Guide to integrating forensic techniques into incident response (NIST Special Publication 800-86). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.SP.800-86
Kent, K., & Souppaya, M. (2006). Guide to computer security log management (NIST Special Publication 800-92). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.SP.800-92
Knerler, K., Parker, I., & Zimmerman, C. (2022). 11 strategies of a world-class cybersecurity operations center. MITRE Corporation.
Kral, P. (2011). The incident handler's handbook. SANS Institute.
Microsoft. (n.d.). Microsoft Defender Antivirus in Windows. Microsoft. https://learn.microsoft.com/en-us/defender-endpoint/microsoft-defender-antivirus-windows
MITRE Corporation. (n.d.-a). MITRE ATT&CK. https://attack.mitre.org/
MITRE Corporation. (n.d.-b). CALDERA. https://caldera.mitre.org/
MITRE Corporation. (n.d.-c). ATT&CK Navigator. https://mitre-attack.github.io/attack-navigator/
Moonshot AI. (n.d.). Kimi [Large language model]. Retrieved August 30, 2026, from https://www.kimi.com/
National Institute of Standards and Technology. (n.d.). Digital evidence. In Computer Security Resource Center glossary. Retrieved August 30, 2026, from https://csrc.nist.gov/glossary/term/digital_evidence
National Institute of Standards and Technology. (2024). The NIST Cybersecurity Framework (CSF) 2.0 (NIST Cybersecurity White Paper 29). https://doi.org/10.6028/NIST.CSWP.29
Nelson, A., Rekhi, S., Souppaya, M., & Scarfone, K. (2025). Incident response recommendations and considerations for cybersecurity risk management: A CSF 2.0 community profile (NIST Special Publication 800-61, Rev. 3). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.SP.800-61r3
Nelson, B., Phillips, A., & Steuart, C. (2025). Guide to computer forensics and investigations (7th ed.). Cengage.
Open Information Security Foundation. (n.d.). Suricata user guide. https://docs.suricata.io/
OpenAI. (n.d.). ChatGPT [Large language model]. Retrieved August 30, 2026, from https://chatgpt.com/
Orlando, M. (n.d.). SOC metrics cheat sheet. SANS Institute.
SANS Institute. (2026). Leveraging the SANS Security Awareness & Culture Maturity Model: Your roadmap to embedding a strong security culture.
Proofpoint. (n.d.). Emerging Threats Open ruleset. Proofpoint. https://rules.emergingthreats.net/
Red Canary. (n.d.). Atomic Red Team. https://github.com/redcanaryco/atomic-red-team
Russinovich, M., & Garnier, T. (n.d.). Sysmon (System Monitor). Microsoft. https://learn.microsoft.com/en-us/sysinternals/downloads/sysmon
Scarfone, K., & Mell, P. (2007). Guide to intrusion detection and prevention systems (IDPS) (NIST Special Publication 800-94). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.SP.800-94
Souppaya, M., & Scarfone, K. (2013). Guide to malware incident prevention and handling for desktops and laptops (NIST Special Publication 800-83, Rev. 1). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.SP.800-83r1
Security Onion Solutions. (n.d.). Security Onion documentation. https://docs.securityonion.net/
U.S. Senate Committee on Commerce, Science, and Transportation. (2014). A “kill chain” analysis of the 2013 Target data breach. https://www.commerce.senate.gov/wp-content/uploads/media/doc/2014%200325%20Target%20Kill%20Chain%20Analysis.pdf
Wazuh, Inc. (n.d.-a). Wazuh user manual. https://documentation.wazuh.com/current/user-manual/index.html
Wazuh, Inc. (n.d.-b). Wazuh installation guide. https://documentation.wazuh.com/current/installation-guide/index.html
xAI. (n.d.). Grok [Large language model]. Retrieved August 30, 2026, from https://grok.com/