DecipherU
Sign in

The sourcing standard

Of our 311 research sources, 263 (84.6%) are peer-reviewed.

We report two numbers because they answer different questions. Of the 311 sources that make research claims (journal articles, conference papers, books, magazine pieces, preprints and industry reports), 263 are journal articles or conference papers that went through peer review. The other 48 are not, and each is labelled with what it is. Beside them sit 290 primary documents (laws, statistical releases, standards, exam outlines and vendor documentation) that no study replaces and that we do not count as research. The counts and the full list of exceptions are below.

What the 601 cited sources are

Counted from the same data that builds each course bibliography, the Principled Seller framework and the exam-skills guide, with duplicates removed. A source counts as peer-reviewed only if it is a journal article or a conference paper from a venue that reviews submissions, and only if it carries a DOI or a named journal or venue.

Cited sources by type, computed from the citation data
TypeSourcesSharePeer-reviewed
Peer-reviewed journal article22938.1%Yes
Peer-reviewed conference paper345.7%Yes
Book or book chapter264.3%No
Magazine article20.3%No
Preprint30.5%No
Government or legal document9115.1%No
Standard or framework8013.3%No
Industry report or white paper172.8%No
Vendor documentation or web page11919.8%No
All sources601100%263

A source that is not peer-reviewed can still be the right one to cite. The BLS publishes pay and employment data, NIST publishes the frameworks practitioners work against, and an exam owner is the only authority on what its exam covers. We cite those directly and label them as government documents or standards, not as research.

The exceptions, in full

Every source below is cited somewhere on DecipherU and is not a peer-reviewed article or conference paper. Open a group to read the entries.

26 books or book chapters
  • Brealey, R. A., Myers, S. C., & Allen, F.. (2020). Principles of Corporate Finance. McGraw-Hill Education (14th edition).
  • Chaiklin, S.. (2003). The Zone of Proximal Development in Vygotsky's Analysis of Learning and Instruction. Vygotsky's Educational Theory in Cultural Context (pp. 39-64), Cambridge University Press. https://doi.org/10.1017/CBO9780511840975.004
  • Follett, M. P.. (1924). Creative Experience. Longmans, Green.
  • Forsgren, N., Humble, J., & Kim, G.. (2018). Accelerate: The Science of Lean Software and DevOps: Building and Scaling High Performing Technology Organizations. IT Revolution Press. https://itrevolution.com/product/accelerate/
  • French, J. R. P. & Raven, B.. (1959). The Bases of Social Power. In Cartwright, D. (Ed.), Studies in Social Power. Institute for Social Research.
  • Freund, J. & Jones, J.. (2015). Measuring and Managing Information Risk: A FAIR Approach. Butterworth-Heinemann.
  • Gollwitzer, P. M., & Sheeran, P. (2006). Implementation intentions and goal achievement: A meta-analysis of effects and processes. Advances in Experimental Social Psychology, 38, 69-119. https://doi.org/10.1016/S0065-2601(06)38002-1
  • Greenleaf, R. K.. (1970). The Servant as Leader. Robert K. Greenleaf Center for Servant Leadership.
  • Hanan, M.. (1970). Consultative Selling: The Hanan Formula for High-Margin Sales at High Levels. AMACOM.
  • Heuer, R. J., Jr., & Pherson, R. H.. (2014). Structured Analytic Techniques for Intelligence Analysis (2nd ed.). CQ Press, Washington DC.
  • Kaplan, R. S. & Norton, D. P.. (1996). The Balanced Scorecard: Translating Strategy into Action. Harvard Business School Press.
  • Knowles, M. S., Holton, E. F., & Swanson, R. A.. (2015). The Adult Learner: The Definitive Classic in Adult Education and Human Resource Development (8th ed.). Routledge, New York. https://doi.org/10.4324/9781315816951
  • Knowles, M. S.. (1970). The Modern Practice of Adult Education: Andragogy Versus Pedagogy. Association Press, New York.
  • Kolb, D. A.. (1984). Experiential Learning: Experience as the Source of Learning and Development. Prentice-Hall, Englewood Cliffs, NJ.
  • Merriam, S. B.. (2001). Andragogy and Self-Directed Learning: Pillars of Adult Learning Theory. New Directions for Adult and Continuing Education, 2001(89), 3-14. https://doi.org/10.1002/ace.3
  • Mezirow, J.. (1991). Transformative Dimensions of Adult Learning. Jossey-Bass, San Francisco.
  • Nygard, M.. (2018). Release It! Design and Deploy Production-Ready Software (2nd ed.). Pragmatic Bookshelf. https://pragprog.com/titles/mnee2/release-it-second-edition/
  • Pherson, K. H., & Pherson, R. H.. (2020). Critical Thinking for Strategic Intelligence (3rd ed.). CQ Press, Washington DC.
  • Rackham, N.. (1988). SPIN Selling. McGraw-Hill.
  • Ries, A. & Trout, J.. (1981). Positioning: The Battle for Your Mind. McGraw-Hill.
  • Ritchhart, R., Church, M., & Morrison, K.. (2011). Making Thinking Visible: How to Promote Engagement, Understanding, and Independence for All Learners. Jossey-Bass, San Francisco.
  • Schein, E. H.. (2013). Humble Inquiry: The Gentle Art of Asking Instead of Telling. Berrett-Koehler Publishers.
  • Schön, D. A.. (1983). The Reflective Practitioner: How Professionals Think in Action. Basic Books. https://www.hachettebookgroup.com/titles/donald-a-schon/the-reflective-practitioner/9780465068784/
  • Schön, D. A.. (1987). Educating the Reflective Practitioner. Jossey-Bass. https://www.wiley.com/en-us/Educating+the+Reflective+Practitioner%3A+Toward+a+New+Design+for+Teaching+and+Learning+in+the+Professions-p-9781555422202
  • Vygotsky, L. S.. (1978). Mind in Society: The Development of Higher Psychological Processes. Harvard University Press, Cambridge, MA.
  • Walton, R. E., & McKersie, R. B.. (1965). A Behavioral Theory of Labor Negotiations. McGraw-Hill.
2 magazine articles
  • Porter, M. E.. (1979). How Competitive Forces Shape Strategy. Harvard Business Review.
  • Reichheld, F. F.. (2003). The One Number You Need to Grow. Harvard Business Review.
3 preprints
  • Bagdasaryan, E., Hsieh, T.-Y., Nassi, B., and Shmatikov, V.. (2023). Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs. arXiv preprint. https://arxiv.org/abs/2307.10490
  • Gao, Y., Xiong, Y., Gao, X., Jia, K., Pan, J., Bi, Y., Dai, Y., Sun, J., and Wang, H.. (2024). Retrieval-Augmented Generation for Large Language Models: A Survey. arXiv preprint. https://arxiv.org/abs/2312.10997
  • Hinton, G., Vinyals, O., and Dean, J.. (2015). Distilling the Knowledge in a Neural Network. arXiv preprint (presented at the NIPS 2014 Deep Learning Workshop; no proceedings volume or review process confirmed). https://arxiv.org/abs/1503.02531
17 industry reports or white papers
  • Caltagirone, S., Pendergast, A., & Betz, C.. (2013). The Diamond Model of Intrusion Analysis. Center for Cyber Intelligence Analysis and Threat Research, Technical Report ADA586960. https://apps.dtic.mil/sti/pdfs/ADA586960.pdf
  • Cloud Security Alliance. (2024). Top Threats to Cloud Computing 2024. Cloud Security Alliance. https://cloudsecurityalliance.org/artifacts/top-threats-to-cloud-computing-2024
  • Crowley, C., Filkins, B., & Pescatore, J.. (2023). SANS 2023 SOC Survey: Architecting and Operating SOCs During Asymmetric Times. SANS Institute. https://www.sans.org/white-papers/2023-sans-soc-survey
  • Crowley, C., Filkins, B., & Pescatore, J.. (2023). SANS 2023 SOC Survey. SANS Institute. https://www.sans.org/white-papers/2023-sans-soc-survey
  • CyberSeek. (2025). Cybersecurity Career Pathway Tool. NIST / U.S. Department of Commerce. https://www.cyberseek.org/pathway.html
  • Forsgren, N., Smith, D., Humble, J., & Frazelle, J.. (2019). 2019 Accelerate State of DevOps Report. DORA / Google Cloud. https://services.google.com/fh/files/misc/state-of-devops-2019.pdf
  • Gartner, Inc.. (2024). Gartner Forecasts Global Information Security Spending to Grow 15% in 2025. Gartner Press Release. https://www.gartner.com/en/newsroom/press-releases/2024-08-28-gartner-forecasts-global-information-security-spending-to-grow-15-percent-in-2025
  • Hutchins, E. M., Cloppert, M. J., & Amin, R. M.. (2011). Intelligence-Driven Computer Network Defense Informed by Analysis of Adversary Campaigns and Intrusion Kill Chains. Lockheed Martin white paper; also in Leading Issues in Information Warfare & Security Research, 1(1). https://www.lockheedmartin.com/content/dam/lockheed-martin/rms/documents/cyber/LM-White-Paper-Intel-Driven-Defense.pdf
  • IBM Security & Ponemon Institute. (2024). Cost of a Data Breach Report 2024. IBM Corporation (press release of July 30, 2024; research conducted by Ponemon Institute). https://newsroom.ibm.com/2024-07-30-ibm-report-escalating-data-breach-disruption-pushes-costs-to-new-highs
  • ISC2. (2024). 2024 ISC2 Cybersecurity Workforce Study: Global Cybersecurity Workforce Prepares for an AI-Driven World. International Information System Security Certification Consortium. https://www.isc2.org/Insights/2024/10/ISC2-2024-Cybersecurity-Workforce-Study
  • ISC2. (2024). A closer look at salaries for ISC2 certification holders. ISC2 Insights, May 7, 2024 (self-reported salaries from the ISC2 Cybersecurity Workforce Study). https://www.isc2.org/insights/2024/05/isc2-reveals-global-isc2-certification-salaries
  • ISC2. (2024). Cybersecurity Workforce Study 2024. International Information System Security Certification Consortium. https://www.isc2.org/research
  • ISC2. (2024). Cybersecurity Workforce Study. ISC2 Research. https://www.isc2.org/Research
  • Kral, P.. (2011). Incident Handler's Handbook. SANS Institute. https://www.sans.org/white-papers/33901/
  • Lee, R. M., & Bianco, D.. (2016). Generating Hypotheses for Successful Threat Hunting. SANS Institute Reading Room. https://www.sans.org/white-papers/37172/
  • Strom, B. E., Applebaum, A., Miller, D. P., Nickels, K. C., Pennington, A. G., & Thomas, C. B.. (2018). MITRE ATT&CK: Design and Philosophy. MITRE Corporation, Technical Report MP180360. https://attack.mitre.org/docs/ATTACK_Design_and_Philosophy_March_2020.pdf
  • Zimmerman, C.. (2014). Ten Strategies of a top-tier Cybersecurity Operations Center. MITRE Corporation. https://www.mitre.org/sites/default/files/publications/pr-13-1028-mitre-10-strategies-cyber-ops-center.pdf
119 vendor documentation or web pages
  • Amazon Web Services. (2024). AWS CloudTrail Documentation. AWS Documentation. https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html
  • Amazon Web Services. (2024). AWS IAM Access Analyzer Documentation. AWS Documentation. https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
  • Amazon Web Services. (2024). AWS Security Hub. AWS Documentation. https://docs.aws.amazon.com/securityhub/
  • Amazon Web Services. (2024). AWS Shared Responsibility Model. AWS Documentation. https://aws.amazon.com/compliance/shared-responsibility-model/
  • Amazon Web Services. (2024). IAM JSON Policy Reference (Action, NotAction, Resource, Condition). AWS Documentation. https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies.html
  • Amazon Web Services. (2024). Logging IAM and AWS STS API Calls with CloudTrail. AWS Documentation. https://docs.aws.amazon.com/IAM/latest/UserGuide/cloudtrail-integration.html
  • Anthropic. (2024). Anthropic Careers. Anthropic. https://www.anthropic.com/careers
  • Anthropic. (2024). Anthropic Engineering Blog: Production AI. Anthropic. https://www.anthropic.com/research
  • Anthropic. (2024). Anthropic Product Documentation: Claude Use Cases. Anthropic. https://docs.anthropic.com/
  • Anthropic. (2024). Anthropic Service Terms and Pricing Policies. Anthropic. https://www.anthropic.com/legal
  • Anthropic. (2024). Be Clear, Direct, and Detailed. Anthropic. https://docs.anthropic.com/en/docs/build-with-claude/prompt-engineering/be-clear-and-direct
  • Anthropic. (2024). Building Effective Agents. Anthropic. https://www.anthropic.com/research/building-effective-agents
  • Anthropic. (2024). Building with Claude: Engineering Documentation. Anthropic. https://docs.anthropic.com/
  • Anthropic. (2024). Citations. Anthropic. https://docs.anthropic.com/en/docs/build-with-claude/citations
  • Anthropic. (2024). Claude API Best Practices. Anthropic Developer Documentation. https://docs.anthropic.com/en/docs/build-with-claude/overview
  • Anthropic. (2024). Claude API Documentation. Anthropic Developer Documentation. https://docs.anthropic.com/
  • Anthropic. (2024). Claude API Pricing and Usage Documentation. Anthropic. https://www.anthropic.com/pricing
  • Anthropic. (2024). Claude API Pricing detailed by model. Anthropic. https://www.anthropic.com/pricing
  • Anthropic. (2024). Claude API Pricing. Anthropic. https://www.anthropic.com/pricing
  • Anthropic. (2024). Claude Capabilities Documentation. Anthropic. https://docs.anthropic.com/en/docs/about-claude/models
  • Anthropic. (2024). Claude Model Card. Anthropic. https://www.anthropic.com/system-cards
  • Anthropic. (2024). Claude Pricing and Performance. Anthropic. https://www.anthropic.com/pricing
  • Anthropic. (2024). Claude Pro and Team Pricing. Anthropic. https://www.anthropic.com/pricing
  • Anthropic. (2024). Constitutional AI: Harmlessness from AI Feedback. Anthropic Research. https://www.anthropic.com/research
  • Anthropic. (2024). Evaluation Tool. Anthropic. https://docs.anthropic.com/en/docs/test-and-evaluate/eval-tool
  • Anthropic. (2024). Introducing Contextual Retrieval. Anthropic. https://www.anthropic.com/news/contextual-retrieval
  • Anthropic. (2024). Message Batches API. Anthropic. https://docs.anthropic.com/en/docs/build-with-claude/batch-processing
  • Anthropic. (2024). Mitigating Jailbreaks and Prompt Injections. Anthropic. https://docs.anthropic.com/en/docs/test-and-evaluate/strengthen-guardrails/mitigate-jailbreaks
  • Anthropic. (2024). Models Overview. Anthropic. https://docs.anthropic.com/en/docs/about-claude/models
  • Anthropic. (2024). Pricing. Anthropic. https://www.anthropic.com/pricing
  • Anthropic. (2024). Prompt Caching. Anthropic. https://docs.anthropic.com/en/docs/build-with-claude/prompt-caching
  • Anthropic. (2024). Prompt Engineering Overview. Anthropic. https://docs.anthropic.com/en/docs/build-with-claude/prompt-engineering/overview
  • Anthropic. (2024). Streaming Messages. Anthropic. https://docs.anthropic.com/en/api/messages-streaming
  • Anthropic. (2024). Tool Use and Structured Output with Claude. Anthropic API Documentation. https://docs.anthropic.com/en/docs/agents-and-tools/tool-use/overview
  • Anthropic. (2024). Tool Use with Claude. Anthropic. https://docs.anthropic.com/en/docs/build-with-claude/tool-use
  • Anthropic. (2024). Vision. Anthropic. https://docs.anthropic.com/en/docs/build-with-claude/vision
  • Anthropic. (2024). When to Fine-Tune Claude. Anthropic. https://docs.anthropic.com/en/docs/build-with-claude/fine-tuning
  • Apple. (2024). Apple Intelligence Foundation Language Models. Apple. https://machinelearning.apple.com/research/apple-intelligence-foundation-language-models
  • Atomic Red Team. (2025). Library of Tests Mapped to MITRE ATT&CK. Red Canary. https://atomicredteam.io/
  • Bianco, D. J.. (2015). A Simple Hunting Maturity Model. Enterprise Detection and Response (author's blog). https://detect-respond.blogspot.com/2015/10/a-simple-hunting-maturity-model.html
  • Bianco, D.. (2014). The Pyramid of Pain. Enterprise Detection and Response (Bianco's Personal Blog, widely cited in CTI tradecraft). https://detect-respond.blogspot.com/2013/03/the-pyramid-of-pain.html
  • Cloud Native Computing Foundation. (2024). Pod Security Standards (Restricted, Baseline, Privileged). Kubernetes Documentation. https://kubernetes.io/docs/concepts/security/pod-security-standards/
  • Cloudflare. (2024). AI Gateway Documentation. Cloudflare. https://developers.cloudflare.com/ai-gateway/
  • Cohere. (2024). Rerank Documentation. Cohere. https://docs.cohere.com/docs/rerank
  • CrowdStrike Holdings. (2024). Charlotte AI: Generative AI Security Analyst. CrowdStrike Documentation. https://www.crowdstrike.com/platform/charlotte-ai/
  • CyberDefenders. (2025). Blue Team Labs. CyberDefenders. https://cyberdefenders.org/blue-team-labs/
  • DecipherU. (2026). AI Engineering Mastery Capstone Rubric. DecipherU. https://decipheru.com/courses/ai-engineering-mastery
  • GitHub. (2024). About Security Hardening with OpenID Connect. GitHub Documentation. https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect
  • Google Cloud. (2024). Document AI. Google. https://cloud.google.com/document-ai/docs
  • Google DeepMind. (2024). Gemini API: Models. Google. https://ai.google.dev/gemini-api/docs/models/gemini
  • Google DeepMind. (2024). Google DeepMind Careers. Google DeepMind. https://deepmind.google/about/careers/
  • Google LLC. (2024). Cloud Audit Logs Overview (Admin Activity, System Event, Data Access, Policy Denied). Google Cloud Documentation. https://cloud.google.com/logging/docs/audit
  • Google LLC. (2024). Google Cloud IAM Recommender. Google Cloud Documentation. https://cloud.google.com/iam/docs/recommender-overview
  • Google LLC. (2024). Google Cloud Shared Responsibility and Shared Fate Models. Google Cloud Documentation. https://cloud.google.com/architecture/framework/security/shared-responsibility-shared-fate
  • Google LLC. (2024). Google Security Command Center. Google Cloud Documentation. https://cloud.google.com/security-command-center/docs
  • Google. (2024). Gemini API Pricing. Google AI. https://ai.google.dev/pricing
  • Google. (2024). Google AI Platform Pricing. Google. https://ai.google.dev/pricing
  • HashiCorp. (2024). Terraform Security Best Practices. HashiCorp Documentation. https://developer.hashicorp.com/terraform/cloud-docs
  • Hodgson, P.. (2017). Feature Toggles (aka Feature Flags). martinfowler.com. https://martinfowler.com/articles/feature-toggles.html
  • Hugging Face. (2024). Spaces Overview. Hugging Face Hub documentation. https://huggingface.co/docs/hub/spaces-overview
  • International Association of Privacy Professionals. (2024). AIGP body of knowledge and program design references. IAPP. https://iapp.org/certify/aigp/
  • International Association of Privacy Professionals. (2024). AIGP body of knowledge. IAPP. https://iapp.org/certify/aigp/
  • International Association of Privacy Professionals. (2024). Artificial Intelligence Governance Professional (AIGP) body of knowledge. IAPP. https://iapp.org/certify/aigp/
  • International Association of Privacy Professionals. (2024). Privacy Program Management body of knowledge. IAPP. https://iapp.org/certify/cipm/
  • ISACA. (2024). Advanced in AI Audit (AAIA) body of knowledge. ISACA. https://www.isaca.org/credentialing/aaia
  • ISACA. (2024). Advanced in AI Audit (AAIA) credential. ISACA. https://www.isaca.org/credentialing/aaia
  • ISACA. (2024). Advanced in AI Audit (AAIA) program design references. ISACA. https://www.isaca.org/credentialing/aaia
  • ISACA. (2024). Audit planning practice guidance. ISACA. https://www.isaca.org/resources
  • ISACA. (2024). Information Systems Audit and Control Association: AI audit practice guidance. ISACA. https://www.isaca.org/resources/artificial-intelligence
  • ISACA. (2026). CISA: Certified Information Systems Auditor. ISACA. https://www.isaca.org/credentialing/cisa
  • ISACA. (2026). CISM: Certified Information Security Manager. ISACA. https://www.isaca.org/credentialing/cism
  • ISACA. (2026). CRISC: Certified in Risk and Information Systems Control. ISACA. https://www.isaca.org/credentialing/crisc
  • Isovalent / Tetragon Authors. (2024). Tetragon: Security Observability and Runtime Enforcement. CNCF / Isovalent. https://tetragon.io/
  • Meta AI. (2024). Llama Model Card. Meta Platforms. https://llama.meta.com/
  • Meta. (2024). Llama Models Documentation. Meta. https://llama.meta.com/
  • Microsoft Corporation. (2024). Azure Activity Log and Microsoft Entra Audit Logs. Microsoft Learn Documentation. https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/activity-log
  • Microsoft Corporation. (2024). Azure Privileged Identity Management Documentation. Microsoft Learn. https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure
  • Microsoft Corporation. (2024). KQL Reference and Microsoft Sentinel Hunting Queries. Microsoft Learn. https://learn.microsoft.com/en-us/azure/data-explorer/kusto/query/
  • Microsoft Corporation. (2024). Microsoft Certified: Identity and Access Administrator Associate (SC-300). Microsoft Learn. https://learn.microsoft.com/en-us/certifications/identity-and-access-administrator/
  • Microsoft Corporation. (2024). Microsoft Defender for Cloud. Microsoft Learn. https://learn.microsoft.com/en-us/azure/defender-for-cloud/
  • Microsoft Corporation. (2024). Microsoft Entra Privileged Identity Management Documentation. Microsoft Learn. https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure
  • Microsoft Corporation. (2024). Microsoft Security Copilot Documentation. Microsoft Learn. https://learn.microsoft.com/en-us/copilot/security/
  • Microsoft Corporation. (2024). Microsoft Security Copilot: Incident Summarization Patterns. Microsoft Learn. https://learn.microsoft.com/en-us/copilot/security/
  • Microsoft Corporation. (2024). Microsoft Sentinel Automation Rules and Playbooks. Microsoft Learn. https://learn.microsoft.com/en-us/azure/sentinel/automate-incident-handling-with-automation-rules
  • Microsoft Corporation. (2024). Microsoft Sentinel: Detection Rule Health and Continuous Evaluation. Microsoft Learn. https://learn.microsoft.com/en-us/azure/sentinel/
  • Microsoft Corporation. (2024). PowerShell Logging and Auditing. Microsoft Learn Documentation. https://learn.microsoft.com/en-us/powershell/scripting/windows-powershell/wmf/whats-new/script-logging
  • Microsoft Corporation. (2024). Shared Responsibility in the Cloud. Microsoft Learn Documentation. https://learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility
  • Microsoft. (2024). PyRIT: Python Risk Identification Tool for generative AI. Microsoft. https://github.com/Azure/PyRIT
  • Mistral AI. (2024). Mistral Models. Mistral AI. https://docs.mistral.ai/
  • Northeastern University. (2025). Master of Science in Applied AI specializing in Cybersecurity, program description. Northeastern University. https://graduate.northeastern.edu/programs/mps-applied-ai/
  • OpenAI. (2024). Batch API. OpenAI. https://platform.openai.com/docs/guides/batch
  • OpenAI. (2024). ChatGPT Free and Plus Tiers. OpenAI. https://openai.com/chatgpt/pricing/
  • OpenAI. (2024). Embeddings Guide. OpenAI. https://platform.openai.com/docs/guides/embeddings
  • OpenAI. (2024). Evals Framework Guide. OpenAI Cookbook. https://cookbook.openai.com/
  • OpenAI. (2024). Fine-Tuning Guide. OpenAI. https://platform.openai.com/docs/guides/fine-tuning
  • OpenAI. (2024). Models and Pricing. OpenAI. https://openai.com/api/pricing/
  • OpenAI. (2024). Models Reference. OpenAI. https://platform.openai.com/docs/models
  • OpenAI. (2024). Moderation Guide. OpenAI. https://platform.openai.com/docs/guides/moderation
  • OpenAI. (2024). OpenAI API Pricing. OpenAI. https://openai.com/api/pricing/
  • OpenAI. (2024). OpenAI Platform Documentation. OpenAI. https://platform.openai.com/docs
  • OpenAI. (2024). OpenAI Pricing. OpenAI. https://openai.com/api/pricing/
  • OpenAI. (2024). Pricing. OpenAI. https://openai.com/api/pricing/
  • OpenAI. (2024). Prompt Caching. OpenAI. https://platform.openai.com/docs/guides/prompt-caching
  • OpenAI. (2024). Prompt Engineering Guide. OpenAI. https://platform.openai.com/docs/guides/prompt-engineering
  • OpenAI. (2024). Realtime API. OpenAI. https://platform.openai.com/docs/guides/realtime
  • OpenAI. (2024). Structured Outputs Guide. OpenAI API Documentation. https://platform.openai.com/docs/guides/structured-outputs
  • OpenAI. (2024). Structured Outputs. OpenAI. https://platform.openai.com/docs/guides/structured-outputs
  • OpenAI. (2024). Vision. OpenAI. https://platform.openai.com/docs/guides/vision
  • OWASP Foundation. (2025). Local Chapter Directory. OWASP Chapters. https://owasp.org/chapters/
  • Pinecone. (2024). Pinecone Documentation. Pinecone Systems. https://docs.pinecone.io/
  • Qdrant. (2024). Qdrant Documentation. Qdrant. https://qdrant.tech/documentation/
  • Roth, F., & SigmaHQ contributors. (2024). Sigma: Generic Signature Format for SIEM Systems. SigmaHQ project (github.com/SigmaHQ/sigma). https://github.com/SigmaHQ/sigma
  • SANS Institute. (2024). GIAC Certified Cyber Threat Intelligence (GCTI) Certification. GIAC. https://www.giac.org/certifications/cyber-threat-intelligence-gcti/
  • Splunk Inc.. (2024). Splunk AI and SOC Copilot Documentation. Splunk Docs. https://docs.splunk.com/Documentation
  • Splunk Inc.. (2024). Splunk Search Reference. Splunk Docs. https://docs.splunk.com/Documentation/Splunk/latest/SearchReference
  • Splunk Inc.. (2024). Splunk SOAR (Phantom) Documentation. Splunk Docs. https://docs.splunk.com/Documentation/SOAR
  • Splunk Inc.. (2024). Splunk SOC Copilot. Splunk Docs. https://docs.splunk.com/Documentation
  • The Falco Authors. (2024). Falco: Kubernetes-Native Threat Detection. CNCF Sandbox / Sysdig. https://falco.org/
  • Vercel. (2024). Vercel AI Gateway. Vercel. https://vercel.com/docs/ai-gateway

Government documents (91) and standards or frameworks (80) are not listed here because they are primary documents from their owners; each course bibliography lists them with links. The 26 books are the group most often mistaken for research, so check that list first.

How a source gets in

The aim is that every citation is real, says what the sentence attached to it says, and comes from the original publisher rather than a summary of it. When a source supports only a weaker version of a claim, the sentence is rewritten to the weaker version.

We do not always meet that aim. An audit on 2 November 2026 found sources labelled peer-reviewed that were books, and DOIs, years and venues that were wrong in the course data. They were corrected in the same pass, and every source now carries a type that the build checks. Report anything else at the corrections log.

What this page does not cover

The count covers the structured citation library only. Career guides, glossary entries and lesson text also cite sources in running prose, and those are not in the 601. A source being peer-reviewed does not make the DecipherU page that cites it peer-reviewed, and no licensed professional has reviewed our question banks.

Check any page

Each course has its own bibliography, grouped by source type. The methodology page explains how we collect and refresh data.