<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd" xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>/markdown/2021/12/24/markdown-guide.html</loc>
<lastmod>2021-12-24T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/python/2021/12/25/my-second-post.html</loc>
<lastmod>2021-12-25T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/website/2025/09/02/My-First-Blog-Post.html</loc>
<lastmod>2025-09-02T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/soc/blue%20team/2026/01/21/soc-email-analysis.html</loc>
<lastmod>2026-01-21T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/networking/soc/traffic%20analysis/2026/01/23/network-packet-analysis.html</loc>
<lastmod>2026-01-23T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/networking/security%20fundamentals/traffic%20analysis/2026/01/26/http-plaintext-analysis.html</loc>
<lastmod>2026-01-26T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/network%20security/soc%20analysis/2026/01/26/malware-traffic-analysis.html</loc>
<lastmod>2026-01-26T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/network%20analysis/malware%20investigation/soc/2026/01/29/Wireshark-Qakbot-Malware-Analysis.html</loc>
<lastmod>2026-01-29T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/2026/02/11/Telecoms-Network-Bandwidth-Planning.html</loc>
<lastmod>2026-02-11T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/certifications/cybersecurity/2026/03/06/security-plus-certification.html</loc>
<lastmod>2026-03-06T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/2026/03/11/snort-custom-rule-detection-lab.html</loc>
<lastmod>2026-03-11T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/2026/05/07/splunk-soc-practice-and-detection.html</loc>
<lastmod>2026-05-07T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/2026/05/12/Splunk-Process-Tree-Detection-Lab.html</loc>
<lastmod>2026-05-12T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/2026/05/14/Splunk-Powershell-Network-Corellation.html</loc>
<lastmod>2026-05-14T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/2026/05/16/splunk-runkey-persistence-detection-lab.html</loc>
<lastmod>2026-05-16T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/2026/05/21/splunk-scheduled-task-persistence-lab.html</loc>
<lastmod>2026-05-21T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/2026/05/24/splunk-service-persistence-detection-lab-7045-investigation.html</loc>
<lastmod>2026-05-24T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/2026/05/28/splunk-powershell-scriptblock-logging-lab.html</loc>
<lastmod>2026-05-28T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/2026/05/29/splunk-powershell-event-correlation-lab.html</loc>
<lastmod>2026-05-29T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/soc%20case%20studies/2026/07/05/soc-case-study-01-the-silent-domain-admin.html</loc>
<lastmod>2026-07-05T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/2026/08/06/soc-investigation-case-study-helpdesk.html</loc>
<lastmod>2026-08-06T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/2026/08/08/SOC-Investigation-Case-Study-The-Administrator-and-the-Intruder.html</loc>
<lastmod>2026-08-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/2026/08/09/SOC-Investigation-Case-Study-The-Compromised-Administrator.html</loc>
<lastmod>2026-08-09T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/2026/08/10/SOC-Investigation-The-Missing-Beginning.html</loc>
<lastmod>2026-08-10T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/2026/08/12/SOC-Investigation-HelpDesk03-Legitimate-Administration-vs-Malicious-Activity.html</loc>
<lastmod>2026-08-12T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/2026/08/14/soc-investigation-legitimate-administration-to-confirmed-compromise.html</loc>
<lastmod>2026-08-14T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/2026/08/16/SOC-Investigation-Case-Study-Phishing-Email-Analysis.html</loc>
<lastmod>2026-08-16T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/soc/incident%20response/phishing/threat%20detection/2026/08/21/SOC-Case-005-Incident-Scoping-Patient-Zero.html</loc>
<lastmod>2026-08-21T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/soc/phishing/incident%20response/microsoft%20365/2026/08/21/SOC-Phishing-Case-003-Credential-Compromise.html</loc>
<lastmod>2026-08-21T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/about.html</loc>
</url>
<url>
<loc>/archives.html</loc>
</url>
<url>
<loc>/categories.html</loc>
</url>
<url>
<loc>/</loc>
</url>
<url>
<loc>/tags.html</loc>
</url>
<url>
<loc>/assets/reports/Splunk%20PowerShell%20Network%20Correlation%20Lab.pdf</loc>
<lastmod>2026-09-07T13:49:02+00:00</lastmod>
</url>
<url>
<loc>/assets/reports/Splunk%20Process%20Tree%20Detection%20Lab.pdf</loc>
<lastmod>2026-09-07T13:49:02+00:00</lastmod>
</url>
<url>
<loc>/assets/reports/Splunk%20Registry%20Run%20Key%20Persistence%20Detection%20Lab.pdf</loc>
<lastmod>2026-09-07T13:49:02+00:00</lastmod>
</url>
<url>
<loc>/assets/reports/Splunk%20SOC%20Lab%20%E2%80%94%20Windows%20Authentication%20Monitoring%20and%20Log%20Analysis.pdf</loc>
<lastmod>2026-09-07T13:49:02+00:00</lastmod>
</url>
<url>
<loc>/assets/reports/Splunk%20Scheduled%20Task%20Persistence%20Detection%20Lab.pdf</loc>
<lastmod>2026-09-07T13:49:02+00:00</lastmod>
</url>
<url>
<loc>/assets/reports/Splunk%20Windows%20Service%20Persistence%20Detection%20Lab.pdf</loc>
<lastmod>2026-09-07T13:49:02+00:00</lastmod>
</url>
<url>
<loc>/assets/reports/Wireshark-Qakbot-Malware-Analysis.pdf</loc>
<lastmod>2026-09-07T13:49:02+00:00</lastmod>
</url>
<url>
<loc>/assets/reports/malware-traffic-analysis-report.pdf</loc>
<lastmod>2026-09-07T13:49:02+00:00</lastmod>
</url>
<url>
<loc>/assets/reports/network-packet-analysis-report.pdf</loc>
<lastmod>2026-09-07T13:49:02+00:00</lastmod>
</url>
<url>
<loc>/assets/reports/plaintext-http-traffic-analysis-report.pdf</loc>
<lastmod>2026-09-07T13:49:02+00:00</lastmod>
</url>
<url>
<loc>/tcpdumplab.pdf</loc>
<lastmod>2026-09-07T13:49:02+00:00</lastmod>
</url>
</urlset>
