<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://securityartifacts.com/</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>daily</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://securityartifacts.com/start</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.95</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://securityartifacts.com/threat-wire</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>hourly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://securityartifacts.com/labs</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://securityartifacts.com/labs/tools</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://securityartifacts.com/techniques</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/library</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://securityartifacts.com/feed</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://securityartifacts.com/search</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://securityartifacts.com/observations</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://securityartifacts.com/reference</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/artifacts</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.85</priority>
</url>
<url>
<loc>https://securityartifacts.com/resources</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/learn/tabletop</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/case-studies</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/corrections</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://securityartifacts.com/desk</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/desk/playbooks</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/desk/collect</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/desk/hardening</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/desk/event-ids</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/desk/metrics</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.75</priority>
</url>
<url>
<loc>https://securityartifacts.com/desk/framework</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.75</priority>
</url>
<url>
<loc>https://securityartifacts.com/community</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://securityartifacts.com/community/guidelines</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://securityartifacts.com/about</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://securityartifacts.com/masthead</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://securityartifacts.com/submissions</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://securityartifacts.com/pricing</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://securityartifacts.com/teams</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://securityartifacts.com/legal/privacy</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://securityartifacts.com/legal/terms</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://securityartifacts.com/learn/tabletop/impossible-travel-inbox-rule</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://securityartifacts.com/learn/tabletop/domain-admin-from-a-workstation</loc>
<lastmod>2026-09-04T17:30:53.707Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts/cloud-identity-token-theft-pack</loc>
<lastmod>2026-09-04T12:33:31.052Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts/lab-evtx-no-vm</loc>
<lastmod>2026-09-04T12:48:05.682Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts/lab-bec-oauth-consent</loc>
<lastmod>2026-09-04T06:44:06.795Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts/lab-build-and-break-a-disk-image</loc>
<lastmod>2026-09-04T06:41:50.975Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts/report-kesterline-ransomware</loc>
<lastmod>2026-09-04T06:16:41.165Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts/observations-001</loc>
<lastmod>2026-09-04T12:52:53.816Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts/lab-service-persistence</loc>
<lastmod>2026-09-04T09:26:58.554Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts/lab-constructed-northwind-intrusion</loc>
<lastmod>2026-09-04T09:27:01.336Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts/lab-run-key-persistence</loc>
<lastmod>2026-09-04T08:18:29.795Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts/lab-wmi-subscription-persistence</loc>
<lastmod>2026-09-04T12:22:25.652Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts/what-is-mitre-attack</loc>
<lastmod>2026-09-04T09:27:41.523Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts/lab-scheduled-task-persistence</loc>
<lastmod>2026-09-04T17:20:09.968Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts/zimbra-smtp-command-injection</loc>
<lastmod>2026-09-04T09:35:25.151Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts/kev-batch-of-old-local-privesc</loc>
<lastmod>2026-09-04T10:29:16.418Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts/gitea-diffpatch-git-hook-rce</loc>
<lastmod>2026-09-04T09:27:49.551Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts/q3-detection-rule-pack</loc>
<lastmod>2026-09-04T06:39:56.441Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts/run-key-persistence-triage</loc>
<lastmod>2026-09-04T13:18:25.881Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts/emulating-powershell-execution</loc>
<lastmod>2026-09-04T09:29:20.266Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts/dns-tunnelling-pcap-walkthrough</loc>
<lastmod>2026-09-04T17:16:21.638Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://securityartifacts.com/posts/lab-rebuild-detection-loop</loc>
<lastmod>2026-09-04T12:34:48.278Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
</urlset>
