Notes from the collections.

Questions

Common questions

What does Attack Nemesis Research publish?

Field notes on adversary tradecraft and intelligence operations, written for analysts who have to ship a ticket this week. Recent notes cover indicator-only detection, Volt Typhoon, FIN7, and TAXII 2.1. Attack Nemesis Research writes for the analyst who ships the ticket.

How is an Attack Nemesis research note different from a whitepaper?

A note is a short field report you can read before a stand-up. A whitepaper is the longer argument, requested as a PDF brief. Attack Nemesis notes argue a point; whitepapers show the full method.

Can I use Attack Nemesis research notes directly in my SOC?

Use them to decide what to build. Notes argue for the behavior or the binding; the ticket and the detection still get signed in your stack by someone who owns them. Attack Nemesis research is meant to end in a signed action, not a bookmark.

Who writes the Attack Nemesis research notes?

Named authors, with the date on every card: Elena Cho, Julian Okoye, Mira Shah, and Attack Nemesis Research. Attack Nemesis puts a name and a date on every note.