1. Bundesamt für Sicherheit in der Informationstechnik: BSI-Standard 100-4 Notfallmanagement. Technical report, Bundesamt für Sicherheit in der Informationstechnik (2008). www.bsi.bund.de/gshb
2. Costa, G., Ribaudo, M.: Designing a serious game for cybersecurity education. In: Cooper, K.M.L., Bucchiarone, A. (eds.) Software Engineering for Games in Serious Contexts: Theories, Methods, Tools, and Experiences, pp. 265–290. Springer, Cham (2023). https://doi.org/10.1007/978-3-031-33338-5_12
3. Hack The Box: Enhance digital forensics and incident response (dfir) skills with sherlocks (2023). www.hackthebox.com/blog/sherlocks
4. Health Sector Cybersecurity Coordination Center (HC3): Threat profile: Black basta. Tech. rep., U.S. Department of Health & Human Services (2023). https://www.hhs.gov/sites/default/files/black-basta-threat-profile.pdf
5. Hevner, A., March, S., Park, J.: Design science in information systems research. MIS Q. 75–105 (2004). https://doi.org/10.2307/25148625