AI Security Operations Mastery bibliography

Peer-reviewed journals · 4

1. Lewis, P., Perez, E., Piktus, A., Petroni, F., Karpukhin, V., Goyal, N., et al. (2020). Retrieval-Augmented Generation for Knowledge-Intensive NLP Tasks. Advances in Neural Information Processing Systems (NeurIPS). https://arxiv.org/abs/2005.11401
2. Reimers, N., & Gurevych, I. (2019). Sentence-BERT: Sentence Embeddings using Siamese BERT-Networks. Proceedings of the 2019 Conference on Empirical Methods in Natural Language Processing (EMNLP). https://arxiv.org/abs/1908.10084
3. European Union (2024). Regulation (EU) 2024/1689 (Artificial Intelligence Act). Official Journal of the European Union. https://eur-lex.europa.eu/eli/reg/2024/1689/oj
4. Wei, J., Wang, X., Schuurmans, D., Bosma, M., Ichter, B., Xia, F., Chi, E., Le, Q., & Zhou, D. (2022). Chain-of-Thought Prompting Elicits Reasoning in Large Language Models. Advances in Neural Information Processing Systems (NeurIPS). https://arxiv.org/abs/2201.11903

Standards-body + government · 11

1. MITRE Corporation (2024). MITRE ATT&CK Enterprise Matrix v15. MITRE Corporation. https://attack.mitre.org/matrices/enterprise/
2. MITRE Corporation (2024). MITRE ATLAS: Adversarial Threat Landscape for Artificial Intelligence Systems. MITRE Corporation. https://atlas.mitre.org/
3. MITRE Corporation (2024). MITRE ATLAS Tactics and Techniques. MITRE Corporation. https://atlas.mitre.org/matrices/ATLAS
4. MITRE Corporation (2024). MITRE D3FEND: A Knowledge Graph of Cybersecurity Countermeasures. MITRE Corporation. https://d3fend.mitre.org/
5. MITRE Corporation (2024). MITRE ATT&CK: Indicator of Compromise Patterns. MITRE Corporation. https://attack.mitre.org/
6. MITRE Corporation (2024). MITRE ATT&CK Threat Group and Software Profiles. MITRE Corporation. https://attack.mitre.org/groups/
7. Crowley, C., & Pescatore, J. (2023). SANS 2023 SOC Survey. SANS Institute. https://www.sans.org/white-papers/sans-2023-soc-survey/
8. OWASP Foundation (2024). OWASP Top 10 for Large Language Model Applications. OWASP Foundation. https://genai.owasp.org/llm-top-10/Cited in 3 modules
9. Lee, R. M., Lee, R. M., & Bianco, D. (2017). Generating Hypotheses for Successful Threat Hunting. SANS Institute Reading Room. https://www.sans.org/white-papers/37172/
10. National Institute of Standards and Technology (2023). AI Risk Management Framework (NIST AI 100-1, Version 1.0). NIST. doi:10.6028/NIST.AI.100-1
11. National Institute of Standards and Technology (2024). NIST Cybersecurity Framework 2.0. NIST. doi:10.6028/NIST.CSWP.29

Books + monographs · 2

1. Heuer, R. J., Jr., & Pherson, R. H. (2014). Structured Analytic Techniques for Intelligence Analysis (2nd ed.). CQ Press, Washington DC.
2. Liang, P., Bommasani, R., Lee, T., Tsipras, D., Soylu, D., Yasunaga, M., et al. (2022). Holistic Evaluation of Language Models (HELM). Stanford Center for Research on Foundation Models. https://crfm.stanford.edu/helm/

Other primary sources · 38

1. Cybersecurity and Infrastructure Security Agency (CISA) (2024). Identifying and Mitigating Living off the Land Techniques. Joint Cybersecurity Advisory AA24-038A (CISA, NSA, FBI, ACSC, CCCS, NCSC-NZ, NCSC-UK). https://www.cisa.gov/sites/default/files/2024-02/Joint-Guidance-Identifying-and-Mitigating-LOTL_V3508c.pdf
2. AICPA (2024). Trust Services Criteria (SOC 2). American Institute of CPAs. https://www.aicpa-cima.com/topic/audit-assurance/audit-and-assurance-greater-than-soc-2
3. Cloud Security Alliance (2024). Cloud Controls Matrix v4. Cloud Security Alliance. https://cloudsecurityalliance.org/research/cloud-controls-matrix/
4. Cloud Security Alliance (2024). CSA Top Threats to Cloud Computing. Cloud Security Alliance. https://cloudsecurityalliance.org/artifacts/top-threats-to-cloud-computing-pandemic-eleven/
5. Anthropic (2024). Claude API Documentation. Anthropic Developer Documentation. https://docs.anthropic.com/
6. Anthropic (2024). Tool Use and Structured Output with Claude. Anthropic API Documentation. https://docs.anthropic.com/en/docs/agents-and-tools/tool-use/overview
7. Anthropic (2024). Claude API Pricing. Anthropic. https://www.anthropic.com/pricing
8. Caltagirone, S., Pendergast, A., & Betz, C. (2013). The Diamond Model of Intrusion Analysis. Center for Cyber Intelligence Analysis and Threat Research, Technical Report. https://www.activeresponse.org/wp-content/uploads/2013/07/diamond.pdf
9. Cichonski, P., Millar, T., Grance, T., & Scarfone, K. (2012). Computer Security Incident Handling Guide (NIST Special Publication 800-61 Revision 2). National Institute of Standards and Technology. doi:10.6028/NIST.SP.800-61r2
10. Microsoft Corporation (2024). Microsoft Security Copilot Documentation. Microsoft Learn. https://learn.microsoft.com/en-us/copilot/security/Cited in 2 modules
11. Microsoft Corporation (2024). Microsoft Security Copilot: Incident Summarization Patterns. Microsoft Learn. https://learn.microsoft.com/en-us/copilot/security/
12. Microsoft Corporation (2024). KQL Reference and Microsoft Sentinel Hunting Queries. Microsoft Learn. https://learn.microsoft.com/en-us/azure/data-explorer/kusto/query/
13. Microsoft Corporation (2024). Microsoft Sentinel: Detection Rule Health and Continuous Evaluation. Microsoft Learn. https://learn.microsoft.com/en-us/azure/sentinel/
14. Microsoft Corporation (2024). Microsoft Sentinel Automation Rules and Playbooks. Microsoft Learn. https://learn.microsoft.com/en-us/azure/sentinel/automate-incident-handling-with-automation-rules
15. Microsoft Corporation (2024). Azure Privileged Identity Management Documentation. Microsoft Learn. https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure
16. Microsoft Corporation (2024). Microsoft Defender for Cloud. Microsoft Learn. https://learn.microsoft.com/en-us/azure/defender-for-cloud/
17. Guo, C., Pleiss, G., Sun, Y., & Weinberger, K. Q. (2017). On Calibration of Modern Neural Networks. Proceedings of the 34th International Conference on Machine Learning. https://arxiv.org/abs/1706.04599
18. HashiCorp (2024). Terraform Security Best Practices. HashiCorp Documentation. https://developer.hashicorp.com/terraform/cloud-docs
19. Heuer, R. J., Jr. (1999). Psychology of Intelligence Analysis. Center for the Study of Intelligence, Central Intelligence Agency. https://www.cia.gov/static/9a5f1162fd0932c29bfed1c030edf4ae/Pyschology-of-Intelligence-Analysis.pdfCited in 2 modules
20. CrowdStrike Holdings (2024). Charlotte AI: Generative AI Security Analyst. CrowdStrike Documentation. https://www.crowdstrike.com/platform/charlotte-ai/Cited in 2 modules
21. Splunk Inc. (2024). Splunk AI and SOC Copilot Documentation. Splunk Docs. https://docs.splunk.com/Documentation
22. Splunk Inc. (2024). Splunk Search Reference. Splunk Docs. https://docs.splunk.com/Documentation/Splunk/latest/SearchReference
23. Splunk Inc. (2024). Splunk SOAR (Phantom) Documentation. Splunk Docs. https://docs.splunk.com/Documentation/SOAR
24. Splunk Inc. (2024). Splunk SOC Copilot. Splunk Docs. https://docs.splunk.com/Documentation
25. Office of the Director of National Intelligence (2015). Intelligence Community Directive 203: Analytic Standards. ODNI. https://www.dni.gov/files/documents/ICD/ICD%20203%20Analytic%20Standards.pdf
26. ISC2 (2024). Cybersecurity Workforce Study 2024: AI Skills and the Workforce. International Information System Security Certification Consortium. https://www.isc2.org/research
27. Google LLC (2024). Google Cloud IAM Recommender. Google Cloud Documentation. https://cloud.google.com/iam/docs/recommender-overview
28. Google LLC (2024). Google Security Command Center. Google Cloud Documentation. https://cloud.google.com/security-command-center/docs
29. OpenAI (2024). Structured Outputs Guide. OpenAI API Documentation. https://platform.openai.com/docs/guides/structured-outputs
30. OpenAI (2024). OpenAI API Pricing. OpenAI. https://openai.com/api/pricing/
31. Forrester Research (2024). Forrester Research Topic Pages on AI Security Tools (cite the existence, not the analyst data). Forrester Research. https://www.forrester.com/
32. Roth, F., & SigmaHQ contributors (2024). Sigma: Generic Signature Format for SIEM Systems. SigmaHQ project (github.com/SigmaHQ/sigma). https://github.com/SigmaHQ/sigma
33. Amazon Web Services (2024). AWS IAM Access Analyzer Documentation. AWS Documentation. https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
34. Amazon Web Services (2024). AWS CloudTrail Documentation. AWS Documentation. https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html
35. Amazon Web Services (2024). AWS Security Hub. AWS Documentation. https://docs.aws.amazon.com/securityhub/
36. Sommer, R., & Paxson, V. (2010). Outside the Closed World: On Using Machine Learning for Network Intrusion Detection. Proceedings of the 2010 IEEE Symposium on Security and Privacy. https://www.icir.org/robin/papers/oakland10-ml.pdf
37. U.S. Bureau of Labor Statistics (2024). Occupational Employment and Wage Statistics, May 2024: Information Security Analysts (15-1212). U.S. Department of Labor. https://www.bls.gov/oes/current/oes151212.htm
38. U.S. Bureau of Labor Statistics (2024). Occupational Employment and Wage Statistics, May 2024: Information Security Engineers and Architects. U.S. Department of Labor. https://www.bls.gov/oes/current/oes151212.htm