> Do public reports like this one often go deep enough into the weeds to name names, list specific tools and techniques, URLs?

Yes, it is very standard. Anthropic did none of that. Case in point:

- https://cloud.google.com/blog/topics/threat-intelligence/apt...

- https://www.crowdstrike.com/en-us/blog/two-birds-one-stone-p...

- https://media.defense.gov/2021/Apr/15/2002621240/-1/-1/0/CSA...