<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://dfir-lab.ch</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>weekly</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://dfir-lab.ch/phishing-check</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://dfir-lab.ch/exposure-scanner</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://dfir-lab.ch/domain-lookup</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/file-analyzer</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/privacy-check</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/series</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/actors</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/tags</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/about</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/privacy-policy</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://dfir-lab.ch/welcome-analyst</loc>
<lastmod>2026-04-11T16:24:18.773Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/how-to-analyze-phishing-email-headers-a-complete-guide-for-soc-analysts</loc>
<lastmod>2026-04-11T16:24:18.773Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/free-phishing-email-analysis-api-for-developers</loc>
<lastmod>2026-04-11T16:24:18.773Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/spf</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/dkim</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/dmarc</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/ioc-enrichment</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/attack-surface-management</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/phishing-analysis</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/bec</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/qr-phishing</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/mitre-attack</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/sigma-rules</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/arc-authentication</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/email-header-analysis</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/homoglyph-domains</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/email-spoofing</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/link-display-mismatch</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/thread-hijacking</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/indicators-of-compromise</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/threat-intelligence</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/certificate-transparency</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/passive-dns</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/whois-lookup</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/domain-reputation</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/ip-reputation</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/threat-actor-profiling</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/dns-security</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/digital-forensics</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/incident-response</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/timeline-analysis</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/log-analysis</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/malware-analysis</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/spear-phishing</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/credential-harvesting</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/typosquatting</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/oauth-phishing</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/social-engineering</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/ransomware</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/supply-chain-attack</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/watering-hole-attack</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/brute-force-attack</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/insider-threat</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/yara-rules</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/threat-hunting</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/alert-triage</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/siem</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/soar</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/detection-as-code</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/ssl-tls-certificates</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/open-ports</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/vulnerability-scanning</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/api-security</loc>
<lastmod>2026-04-11T16:24:17.724Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
</urlset>
