The use of playbooks in the incident response process
Andreas Seiler
The Dukes: 7 years of Russian cyberespionage
F-Secure Labs