Appendix C: References and Further Reading¶
This appendix collects every external source cited across the handbook's parts, grouped by category for easier lookup.
Standards and Frameworks¶
- NIST Special Publication (SP) 800-61 Revision 3, Incident Response Recommendations and Considerations for Cybersecurity Risk Management
- NIST SP 800-61r3 (full PDF)
- NIST SP 800-86, Guide to Integrating Forensic Techniques into Incident Response
- NIST SP 800-92 Revision 1 (Initial Public Draft), Guide to Computer Security Log Management
- NIST SP 800-150, Guide to Cyber Threat Information Sharing
- NIST SP 800-184, Guide for Cybersecurity Event Recovery
- NIST Cybersecurity Framework (CSF) 2.0
- FIRST CVSS v4.0 Specification
- MITRE ATT&CK
- MITRE AADAPT
- RFC 3227, Guidelines for Evidence Collection and Archiving
- RFC 4880, OpenPGP Message Format
- RFC 9116, A File Format to Aid in Security Vulnerability Disclosure (security.txt)
- OpenID Connect Core 1.0
- CISA CIRCIA (Cyber Incident Reporting for Critical Infrastructure Act)
- SEC Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure Rule
- FinCEN SAR Filing Guidance
- OWASP Smart Contract Weakness Enumeration (SCWE)
- OWASP Web3 Attack Vectors Top 15
- Security Alliance Safe Harbor
Incidents and Case Studies¶
- Ronin Bridge Hack of March 2022, Rekt.news
- Ronin Network, Wikipedia
- Halborn, "Explained: The Ronin Hack (March 2022)"
- FBI Statement on Attribution of Malicious Cyber Activity Posed by the DPRK (Ronin), April 2022
- CISA Advisory AA21-048A
- FBI/CISA/State Department Advisory on DPRK IT Workers, 2024
- Poly Network Hack of August 2021, Rekt.news
- Poly Network Exploit, Wikipedia
- Nomad Bridge Hack of August 2, 2022, Rekt.news
- March 13, 2023 Euler Finance Hack, Rekt.news
- Euler Finance
- Vyper Security Advisory (GHSA-g2q6-65hc-h6hh)
- Uber Security Update
Tools and Documentation¶
- Foundry
- Cantina
- HackenProof
- Immunefi
- Matrix
- Matrix End-to-End Encryption Implementation Guide
- Signal
- Signal Protocol Documentation
- Prometheus
- Tenderly Alerts
- Forta Network
- OpenZeppelin Defender
- OpenZeppelin Contracts,
Pausable - Flashbots Protect
- Safe{Wallet}
- AWS S3 Object Lock
- PagerDuty
- Opsgenie
- Arkham Intelligence
- Chainalysis
- TRM Labs
- IC3 (FBI Internet Crime Complaint Center)
- Sigma
- Arbitrum DAO Governance Documentation
- Security Alliance (SEAL) / SEAL 911
- Security Alliance (SEAL) / Telegram Emergency Bot