advanced-persistent-threat

Guides advanced persistent threat (APT) analysis—nation-state and sophisticated criminal campaigns, long-dwell intrusions, campaign lifecycle tracking, MITRE ATT&CK TTP mapping, infrastructure and malware correlation, attribution with explicit confidence levels, intel fusion for hunts and IR, detection-engineering handoffs, and executive strategic briefings. Use for APT, advanced persistent threat, nation-state threat, state-sponsored campaign, long-dwell intrusion, APT attribution, campaign tracking, APT infrastructure, strategic threat briefing, sophisticated intrusion analysis—not routine SOC alert triage (soc-analyst), generic proactive hunt playbooks only (threat-hunter), CTI feed and source management only (cti-analyst), incident command (incident-responder), penetration testing (penetration-tester), or AI/LLM red team (ai-redteam).