This is an analysis of APT1 that was inspired by the original work from Mandiant.
You can download it from the following link: https://packetstormsecurity.com/files/download/121178/RAP002_APT1_Technical_backstage.1.0.pdf
Source: https://packetstormsecurity.com/files/121178/APT1-Technical-Backstage.html