Contribution to the systematic study of threat actor tools and techniques in real-world cyber incidents
(English) Cyber incident response and digital forensics (DFIR) research increas- ingly faces a tension between academic rigor and the operational re- alities of real-world investigations. While academic studies often rely on controlled datasets and synthetic scenarios, practitioners must oper- ate under time pressure,...