Threat intel, malware analysis, and field notes — written by two practitioners who do this work for a living.
Analyzing the TTPs, Malware Arsenal, and Recent Takedowns of a Persistent Adversary