AI Security Operations Mastery bibliography

peer-reviewed journal articles · 3

1. Dhami, M. K., Belton, I. K., & Mandel, D. R. (2019). The "analysis of competing hypotheses" in intelligence analysis. Applied Cognitive Psychology, 33(6), 1080-1090. doi:10.1002/acp.3550
2. Lehner, P. E., Adelman, L., Cheikes, B. A., & Brown, M. J. (2008). Confirmation Bias in Complex Analyses. IEEE Transactions on Systems, Man, and Cybernetics - Part A: Systems and Humans, 38(3), 584-592. doi:10.1109/TSMCA.2008.918634
3. Liang, P., Bommasani, R., Lee, T., Tsipras, D., Soylu, D., Yasunaga, M., et al. (2023). Holistic Evaluation of Language Models. Transactions on Machine Learning Research. https://openreview.net/forum?id=iO4LZibEqW

peer-reviewed conference papers · 5

1. Guo, C., Pleiss, G., Sun, Y., & Weinberger, K. Q. (2017). On Calibration of Modern Neural Networks. Proceedings of the 34th International Conference on Machine Learning. https://arxiv.org/abs/1706.04599
2. Lewis, P., Perez, E., Piktus, A., Petroni, F., Karpukhin, V., Goyal, N., et al. (2020). Retrieval-Augmented Generation for Knowledge-Intensive NLP Tasks. Advances in Neural Information Processing Systems (NeurIPS). https://arxiv.org/abs/2005.11401
3. Reimers, N., & Gurevych, I. (2019). Sentence-BERT: Sentence Embeddings using Siamese BERT-Networks. Proceedings of the 2019 Conference on Empirical Methods in Natural Language Processing (EMNLP). https://arxiv.org/abs/1908.10084
4. Sommer, R., & Paxson, V. (2010). Outside the Closed World: On Using Machine Learning for Network Intrusion Detection. Proceedings of the 2010 IEEE Symposium on Security and Privacy. https://www.icir.org/robin/papers/oakland10-ml.pdf
5. Wei, J., Wang, X., Schuurmans, D., Bosma, M., Ichter, B., Xia, F., Chi, E., Le, Q., & Zhou, D. (2022). Chain-of-Thought Prompting Elicits Reasoning in Large Language Models. Advances in Neural Information Processing Systems (NeurIPS). https://arxiv.org/abs/2201.11903

books or book chapters · 1

1. Heuer, R. J., Jr., & Pherson, R. H. (2014). Structured Analytic Techniques for Intelligence Analysis (2nd ed.). CQ Press, Washington DC.

government or legal documents · 9

1. Cybersecurity and Infrastructure Security Agency (CISA) (2024). Identifying and Mitigating Living off the Land Techniques. Joint Cybersecurity Advisory AA24-038A (CISA, NSA, FBI, ACSC, CCCS, NCSC-NZ, NCSC-UK). https://www.cisa.gov/resources-tools/resources/identifying-and-mitigating-living-land-techniques
2. Cichonski, P., Millar, T., Grance, T., & Scarfone, K. (2012). Computer Security Incident Handling Guide (NIST Special Publication 800-61 Revision 2). National Institute of Standards and Technology. doi:10.6028/NIST.SP.800-61r2
3. Heuer, R. J., Jr. (1999). Psychology of Intelligence Analysis. Center for the Study of Intelligence, Central Intelligence Agency. https://www.cia.gov/resources/csi/books-monographs/psychology-of-intelligence-analysis-2/Cited in 2 modules
4. Office of the Director of National Intelligence (2015). Intelligence Community Directive 203: Analytic Standards. ODNI. https://www.dni.gov/files/documents/ICD/ICD-203.pdf
5. U.S. Bureau of Labor Statistics (2024). Occupational Employment and Wage Statistics, May 2025: Information Security Analysts (15-1212). U.S. Department of Labor. https://www.bls.gov/oes/current/oes151212.htm
6. U.S. Bureau of Labor Statistics (2024). Occupational Employment and Wage Statistics, May 2025: Information Security Engineers and Architects. U.S. Department of Labor. https://www.bls.gov/oes/current/oes151212.htm
7. National Institute of Standards and Technology (2023). AI Risk Management Framework (NIST AI 100-1, Version 1.0). NIST. doi:10.6028/NIST.AI.100-1
8. National Institute of Standards and Technology (2024). NIST Cybersecurity Framework 2.0. NIST. doi:10.6028/NIST.CSWP.29
9. European Union (2024). Regulation (EU) 2024/1689 (Artificial Intelligence Act). Official Journal of the European Union. https://eur-lex.europa.eu/eli/reg/2024/1689/oj

standards or frameworks · 9

1. AICPA (2024). Trust Services Criteria (SOC 2). American Institute of CPAs. https://www.aicpa-cima.com/topic/audit-assurance/audit-and-assurance-greater-than-soc-2
2. Cloud Security Alliance (2024). Cloud Controls Matrix v4. Cloud Security Alliance. https://cloudsecurityalliance.org/research/cloud-controls-matrix/
3. MITRE Corporation (2024). MITRE ATT&CK Enterprise Matrix v15. MITRE Corporation. https://attack.mitre.org/matrices/enterprise/
4. MITRE Corporation (2024). MITRE ATLAS: Adversarial Threat Landscape for Artificial Intelligence Systems. MITRE Corporation. https://atlas.mitre.org/
5. MITRE Corporation (2024). MITRE ATLAS Tactics and Techniques. MITRE Corporation. https://atlas.mitre.org/matrices/ATLAS
6. MITRE Corporation (2024). MITRE D3FEND: A Knowledge Graph of Cybersecurity Countermeasures. MITRE Corporation. https://d3fend.mitre.org/
7. MITRE Corporation (2024). MITRE ATT&CK: Indicator of Compromise Patterns. MITRE Corporation. https://attack.mitre.org/
8. MITRE Corporation (2024). MITRE ATT&CK Threat Group and Software Profiles. MITRE Corporation. https://attack.mitre.org/groups/
9. OWASP Foundation (2024). OWASP Top 10 for Large Language Model Applications. OWASP Foundation. https://genai.owasp.org/llm-top-10/Cited in 3 modules

industry reports or white papers · 4

1. Cloud Security Alliance (2024). Top Threats to Cloud Computing 2024. Cloud Security Alliance. https://cloudsecurityalliance.org/artifacts/top-threats-to-cloud-computing-2024
2. Caltagirone, S., Pendergast, A., & Betz, C. (2013). The Diamond Model of Intrusion Analysis. Center for Cyber Intelligence Analysis and Threat Research, Technical Report ADA586960. https://apps.dtic.mil/sti/pdfs/ADA586960.pdf
3. ISC2 (2024). 2024 ISC2 Cybersecurity Workforce Study: Global Cybersecurity Workforce Prepares for an AI-Driven World. International Information System Security Certification Consortium. https://www.isc2.org/Insights/2024/10/ISC2-2024-Cybersecurity-Workforce-Study
4. Lee, R. M., & Bianco, D. (2016). Generating Hypotheses for Successful Threat Hunting. SANS Institute Reading Room. https://www.sans.org/white-papers/37172/

vendor documentation or web pages · 24

1. Anthropic (2024). Claude API Documentation. Anthropic Developer Documentation. https://docs.anthropic.com/
2. Anthropic (2024). Tool Use and Structured Output with Claude. Anthropic API Documentation. https://docs.anthropic.com/en/docs/agents-and-tools/tool-use/overview
3. Anthropic (2024). Claude API Pricing. Anthropic. https://www.anthropic.com/pricing
4. Microsoft Corporation (2024). Microsoft Security Copilot Documentation. Microsoft Learn. https://learn.microsoft.com/en-us/copilot/security/Cited in 2 modules
5. Microsoft Corporation (2024). Microsoft Security Copilot: Incident Summarization Patterns. Microsoft Learn. https://learn.microsoft.com/en-us/copilot/security/
6. Microsoft Corporation (2024). KQL Reference and Microsoft Sentinel Hunting Queries. Microsoft Learn. https://learn.microsoft.com/en-us/azure/data-explorer/kusto/query/
7. Microsoft Corporation (2024). Microsoft Sentinel: Detection Rule Health and Continuous Evaluation. Microsoft Learn. https://learn.microsoft.com/en-us/azure/sentinel/
8. Microsoft Corporation (2024). Microsoft Sentinel Automation Rules and Playbooks. Microsoft Learn. https://learn.microsoft.com/en-us/azure/sentinel/automate-incident-handling-with-automation-rules
9. Microsoft Corporation (2024). Azure Privileged Identity Management Documentation. Microsoft Learn. https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure
10. Microsoft Corporation (2024). Microsoft Defender for Cloud. Microsoft Learn. https://learn.microsoft.com/en-us/azure/defender-for-cloud/
11. HashiCorp (2024). Terraform Security Best Practices. HashiCorp Documentation. https://developer.hashicorp.com/terraform/cloud-docs
12. CrowdStrike Holdings (2024). Charlotte AI: Generative AI Security Analyst. CrowdStrike Documentation. https://www.crowdstrike.com/platform/charlotte-ai/Cited in 2 modules
13. Splunk Inc. (2024). Splunk AI and SOC Copilot Documentation. Splunk Docs. https://docs.splunk.com/Documentation
14. Splunk Inc. (2024). Splunk Search Reference. Splunk Docs. https://docs.splunk.com/Documentation/Splunk/latest/SearchReference
15. Splunk Inc. (2024). Splunk SOAR (Phantom) Documentation. Splunk Docs. https://docs.splunk.com/Documentation/SOAR
16. Splunk Inc. (2024). Splunk SOC Copilot. Splunk Docs. https://docs.splunk.com/Documentation
17. Google LLC (2024). Google Cloud IAM Recommender. Google Cloud Documentation. https://cloud.google.com/iam/docs/recommender-overview
18. Google LLC (2024). Google Security Command Center. Google Cloud Documentation. https://cloud.google.com/security-command-center/docs
19. OpenAI (2024). Structured Outputs Guide. OpenAI API Documentation. https://platform.openai.com/docs/guides/structured-outputs
20. OpenAI (2024). OpenAI API Pricing. OpenAI. https://openai.com/api/pricing/
21. Roth, F., & SigmaHQ contributors (2024). Sigma: Generic Signature Format for SIEM Systems. SigmaHQ project (github.com/SigmaHQ/sigma). https://github.com/SigmaHQ/sigma
22. Amazon Web Services (2024). AWS IAM Access Analyzer Documentation. AWS Documentation. https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
23. Amazon Web Services (2024). AWS CloudTrail Documentation. AWS Documentation. https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html
24. Amazon Web Services (2024). AWS Security Hub. AWS Documentation. https://docs.aws.amazon.com/securityhub/