Whitepapers

Longer arguments, still short enough to use.

Working papers for CTI leads, detection engineering, and the occasional board appendix.

Research notes

Questions

Common questions

What whitepapers does Attack Nemesis offer?
Three working papers: The state of adversary infrastructure, 2026; Detection engineering from threat intelligence; and Board-level threat metrics that matter. They are written for CTI leads, detection engineers, and the occasional board appendix. Attack Nemesis whitepapers are longer arguments, still short enough to use.
How do I get an Attack Nemesis whitepaper?
Open the brief and request it. It is sent to the work email on the form, without a marketing sequence. Attack Nemesis sends the brief you asked for and nothing else.
Which Attack Nemesis whitepaper fits my role?
Detection engineers: the infrastructure brief (42 pages) or the detection engineering paper (31 pages). CTI leads reporting upward: board-level threat metrics (18 pages), including a one-page board appendix. Attack Nemesis writes each brief for a specific team.
Why do Attack Nemesis indicator tables expire?
Because stale indicators turn into noisy, ownerless watchlists. The infrastructure brief’s indicator tables expire 14 days after publication, on purpose. Attack Nemesis puts an expiry on every indicator it publishes.

Next step

See the platform against your environment.

A forty-minute briefing: your sources, your stack, and the tickets that should already exist.