<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://dfir-lab.ch</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>weekly</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://dfir-lab.ch/phishing-check</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://dfir-lab.ch/exposure-scanner</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://dfir-lab.ch/domain-lookup</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/file-analyzer</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/privacy-check</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/free-tools</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/series</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/actors</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/about</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/privacy-policy</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://dfir-lab.ch/welcome-analyst</loc>
<lastmod>2026-04-13T14:39:31.684Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/how-to-analyze-phishing-email-headers-a-complete-guide-for-soc-analysts</loc>
<lastmod>2026-04-13T14:39:31.684Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/free-phishing-email-analysis-api-for-developers</loc>
<lastmod>2026-04-13T14:39:31.684Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/tags/dfir</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/tags/threat-intelligence</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/tags/detection-engineering</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/tags/honeypots</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/tags/welcome</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/tags/phishing</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/tags/email-security</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/tags/email-headers</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/tags/spf</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/tags/dkim</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/tags/dmarc</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/tags/arc</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/tags/incident-response</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/tags/soc</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/tags/threat-analysis</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/tags/api</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/tags/devsecops</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/tags/automation</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://dfir-lab.ch/actors/storm-1747</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/actors/rhysida</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/actors/bianlian</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/actors/qilin</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/actors/clop</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/actors/blackcat-alphv</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/actors/apt41-double-dragon</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/actors/lockbit-ransomware</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/actors/fin7-carbanak</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/actors/kimsuky</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/actors/sandworm-team</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/actors/volt-typhoon</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/actors/lazarus-group</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/actors/apt29-cozy-bear</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/actors/apt28-fancy-bear</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/weekly-briefing-2026-04-07</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-04-13</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-04-12</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-04-11</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-04-10</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-04-09</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-04-08</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-04-07</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/weekly-briefing-2026-03-31</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-04-06</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-04-05</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-04-04</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-04-03</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-04-01</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-04-01</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-22</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-31</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-30</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-29</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-28</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-24</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-23</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/weekly-briefing-2026-03-16</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-21</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-20</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-19</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-18</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-17</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-16</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/weekly-briefing-2026-03-09</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-15</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-14</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-13</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-12</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-11</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-07</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-08</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/weekly-briefing-2026-03-02</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-09</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-27</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-26</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/intel-briefings/daily-briefing-2026-03-25</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/spf</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/dkim</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/dmarc</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/ioc-enrichment</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/attack-surface-management</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/phishing-analysis</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/bec</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/qr-phishing</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/mitre-attack</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/sigma-rules</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/arc-authentication</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/email-header-analysis</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/homoglyph-domains</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/email-spoofing</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/link-display-mismatch</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/thread-hijacking</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/indicators-of-compromise</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/threat-intelligence</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/certificate-transparency</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/passive-dns</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/whois-lookup</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/domain-reputation</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/ip-reputation</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/threat-actor-profiling</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/dns-security</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/digital-forensics</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/incident-response</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/timeline-analysis</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/log-analysis</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/malware-analysis</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/spear-phishing</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/credential-harvesting</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/typosquatting</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/oauth-phishing</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/social-engineering</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/ransomware</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/supply-chain-attack</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/watering-hole-attack</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/brute-force-attack</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/insider-threat</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/yara-rules</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/threat-hunting</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/alert-triage</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/siem</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/soar</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/detection-as-code</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/ssl-tls-certificates</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/open-ports</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/vulnerability-scanning</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://dfir-lab.ch/wiki/api-security</loc>
<lastmod>2026-04-13T14:39:30.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
</urlset>
