Threat Intel

Interesting view of Initial Access Brokers

https://github.com/curated-intel/Initial-Access-Broker-Landscape/blob/main/InitialAccessBrokers.png


Library of reporting on APT groups

https://github.com/CyberMonitor/APT_CyberCriminal_Campagin_Collections


Always a time lag but still interesting to see the volume and variety of publicly disclosed attacks

https://www.hackmageddon.com/category/security/cyber-attacks-timeline/


The DFIR report gives incredible detail of specific incidents (typically ransomware). Well worth reading and thinking about how you would detect these actions.

https://thedfirreport.com/