<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://inksec.io/</loc></url>
  <url><loc>https://inksec.io/blue-team/</loc></url>
  <url><loc>https://inksec.io/blue-team/alerts/</loc></url>
  <url><loc>https://inksec.io/blue-team/heatmap/</loc></url>
  <url><loc>https://inksec.io/blue-team/stats/</loc></url>
  <url><loc>https://inksec.io/blue-team/rankings/</loc></url>
  <url><loc>https://inksec.io/blue-team/commands/</loc></url>
  <url><loc>https://inksec.io/blue-team/dfir/</loc></url>
  <url><loc>https://inksec.io/blue-team/ir/</loc></url>
  <url><loc>https://inksec.io/blue-team/kc7/</loc></url>
  <url><loc>https://inksec.io/blue-team/detections/</loc></url>
  <url><loc>https://inksec.io/blue-team/sentinel/</loc></url>
  <url><loc>https://inksec.io/writing/</loc></url>
  <url><loc>https://inksec.io/bookmarks/</loc></url>
  <url><loc>https://inksec.io/resume/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/3cxsupplychain/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/abuseser-trufflenet/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/amadey/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/anakus/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/ancientland-breach-lockbit/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/androidbreach/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/andromeda-bot-unc4210/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/asyncrat/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/attack_btlo/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/attacks/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/awsraid/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/azurehunt/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/azurespray/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/backstage/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/bad-import/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/bada-breach/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/bec-ky/</loc><lastmod>2026-02-19</lastmod></url>
  <url><loc>https://inksec.io/blue-team/labs/blocker/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/breach/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/breakout-daedalus/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/brute/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/bruteforce/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/byovd-hive0163/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/callmeonthechain-etherrat/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/clickfix-vodkastealer/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/code-blue-apt29/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/codefreeze/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/consentstorm/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/containerbreak/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/crack/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/crossed-signals/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/cryptload/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/crypto/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/curiosity/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/cursorjack/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/d3fend/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/danabot/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/deepblue/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/deepphish/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/defender/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/domainnance/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/dumpster/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/dynamicescalate/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/eros/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/exxtensity/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/fail2shell/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/fake/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/fingerprint/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/firstweek/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/follina/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/fork-bomb-teampcp/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/formbook/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/forum-breach/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/foxy/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/frequency-noise/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/fungames/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/gh0stnet-intrusion/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/ghostconnect-ta583/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/giftedcrooks/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/goldenspray/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/googlecloudhunt/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/gothicpanda1/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/grabthephisher/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/hammer-in-the-vault/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/hidden-launch/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/hollow-chapter/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/hunt3r/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/icedid/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/iloveyou/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/indicators/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/injectionpart4/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/insider/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/insider-threat/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/insiderbrett/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/jetbrains/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/keykey/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/kioskexpo7/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/latent/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/lespion/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/lockdown/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/loganalysissysmon/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/macro-ni/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/macsync-from-clickfix-to-data-theft-threat-hunt/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/mailfail/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/malware_ransomwarescript/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/maranhao/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/marionette/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/markshell-ta577/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/marksman/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/maromafix-falldown-ransomhub/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/maromalix-nightmare/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/mbuchus/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/meta/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/meteorhit-indra/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/middlemayhem/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/minifast-unc1549/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/mitsu/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/multistages/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/nano/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/nerisbot/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/nightshade-c2-multi-stage-infection-malware-analysis/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/nightshade-c2-multi-stage-infection-threat-hunt/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/nokoyawa/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/npm_supply_chain_attack/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/openfire/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/openwire/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/operation-cronos-lockbit/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/oski/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/packetdetective/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/paranoid/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/parse-zilla/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/penumbra/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/phantom-installer/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/phantom-pixels/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/phishinganalysis/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/phishinganalysis2/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/photograph/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/piggy/</loc><lastmod>2026-02-13</lastmod></url>
  <url><loc>https://inksec.io/blue-team/labs/poisoned-aid/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/poisoned-pytorch/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/poisonedcredentials/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/print/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/psexechunt/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/qbot/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/qbot-ccd/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/raasunfold/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/ramnit/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/ransomedtrust-lynx/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/ransomware_abc/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/rdp/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/recruiter-hanoi-op/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/redishell/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/redline/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/redstealer/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/renegade/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/retailbreach/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/reveal/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/revengehotels/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/revil_gold/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/rhadamanthys/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/roasttoroot/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/rogueazure/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/satisfaction/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/secrets/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/secureshell/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/shadow-token-symphony-apt29/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/shadowroast/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/shattered-dream/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/shibainsider/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/sigmapredator/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/spider/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/spilledbucket/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/splunkit/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/spooler-apt28/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/squidgame/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/steam/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/stolen-time-hiddentear/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/strange-martketplace/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/supply-drop-1/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/supply-drop-2/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/suspended/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/tax-day-byovd/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/testa/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/the-recurring-impostor-threat-hunt/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/thecrime/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/thereport/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/thereport2/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/tomcat-takeover/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/toolate/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/trend/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/txdrop/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/ursnif-malware-targeting-italy-detection-engineering/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/ursnif-malware-targeting-italy-incident-response/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/ursnif-malware-targeting-italy-malware-analysis/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/ursnif-threat-hunt/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/vault/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/veriarty/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/volatilitytraces/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/vortex/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/waf-o-calypse/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/web-investigation/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/webstrike/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/winterstew/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/xlmrat/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/xmrig/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/xworm/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/xxeinfiltration/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/yellowrat/</loc></url>
  <url><loc>https://inksec.io/blue-team/labs/yourehired/</loc></url>
  <url><loc>https://inksec.io/blue-team/sherlocks/fortyseven-1/</loc><lastmod>2026-06-21</lastmod></url>
  <url><loc>https://inksec.io/blue-team/sherlocks/workfromhome/</loc><lastmod>2026-06-21</lastmod></url>
  <url><loc>https://inksec.io/blue-team/kc7/jojos-hospital/</loc><lastmod>2026-08-10</lastmod></url>
  <url><loc>https://inksec.io/blue-team/kc7/kql101/</loc></url>
  <url><loc>https://inksec.io/blue-team/kc7/valdoria/</loc><lastmod>2026-07-12</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-08-soc137-malicious-file-or-script-download-attempt/</loc><lastmod>2026-02-08</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-11-soc127-sql-injection-detected/</loc><lastmod>2026-02-08</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-11-soc176-rdp-brute-force-detected/</loc><lastmod>2026-02-08</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-12-soc138-detected-suspicious-xls-file/</loc><lastmod>2026-02-12</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-12-soc141-phishing-url-detected/</loc><lastmod>2026-02-12</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-12-soc145-ransomware-detected/</loc><lastmod>2026-01-26</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-12-soc170-passwd-found-in-requested-url-possible-lfi-attack/</loc><lastmod>2026-02-12</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-12-soc257-vpn-connection-detected-from-unauthorized-country/</loc><lastmod>2026-02-12</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-12-soc274-palo-alto-networks-pan-os-command-injection-vulnerability-exploitation-cve-2024-3400/</loc><lastmod>2026-02-08</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-12-soc326-impersonating-domain-mx-record-change-detected/</loc><lastmod>2026-02-12</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-12-soc335-cve-2024-49138-exploitation-detected/</loc><lastmod>2026-02-12</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-12-soc338-lumma-stealer-dll-side-loading-via-click-fix-phishing/</loc><lastmod>2026-02-12</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-12-soc342-cve202553770-sharepoint-toolshell-auth-bypass-and-rce/</loc><lastmod>2026-02-12</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-13-soc251-quishing-detected-qr-code-phishing/</loc><lastmod>2026-02-13</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-17-soc336-windows-ole-zero-click-rce-exploitation-detected-cve-2025-21298/</loc><lastmod>2026-02-08</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-18-soc250-apt35-hyperscrape-data-exfiltration-tool-detected/</loc><lastmod>2026-02-08</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-18-soc275-application-token-steal-attempt-detected/</loc><lastmod>2026-02-08</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-19-soc210-possible-brute-force-detected-on-vpn/</loc><lastmod>2026-02-08</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-20-soc104-malware-detected-event-14/</loc><lastmod>2026-01-22</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-20-soc104-malware-detected-event-36/</loc><lastmod>2026-01-22</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-20-soc104-malware-detected-event-84/</loc><lastmod>2026-01-23</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-20-soc105-requested-ti-url-address/</loc><lastmod>2026-02-07</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-20-soc109-emotet-malware-detected/</loc><lastmod>2026-01-22</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-20-soc114-malicious-attachment-detected-phishing/</loc><lastmod>2026-01-22</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-20-soc119-proxy-malicious-executable-file-detected/</loc><lastmod>2026-01-22</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-20-soc140-phishing-mail-detected-suspicious-task-scheduler/</loc><lastmod>2026-01-21</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-20-soc169-possible-idor-attack-detected/</loc><lastmod>2026-01-20</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-20-soc211-utilmanexe-winlogon-exploit-attempt/</loc><lastmod>2026-02-08</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-20-soc227-microsoft-sharepoint-server-elevation-of-privilege-possible-cve-2023-29357-exploitation/</loc><lastmod>2026-02-20</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-20-soc282-phishing-alert-deceptive-mail-detected/</loc><lastmod>2026-01-21</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-21-soc164-suspicious-mshta-behavior/</loc><lastmod>2026-02-21</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-22-soc173-follina-0-day-detected/</loc><lastmod>2026-02-22</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-23-soc175-powershell-found-in-requested-url-possible-cve-2022-41082-exploitation/</loc><lastmod>2026-02-23</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-24-soc144-new-scheduled-task-created/</loc><lastmod>2026-02-24</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-25-soc287-arbitrary-file-read-on-checkpoint-security-gateway-cve-2024-24919/</loc><lastmod>2026-02-25</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-26-soc239-remote-code-execution-detected-in-splunk-enterprise/</loc><lastmod>2026-02-26</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-27-soc143-password-stealer-detected/</loc><lastmod>2026-02-27</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-28-soc134-suspicious-wmi-activity/</loc><lastmod>2026-02-28</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-02-28-soc205-malicious-macro-has-been-executed/</loc><lastmod>2026-02-28</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-01-soc163-suspicious-certutilexe-usage/</loc><lastmod>2026-03-01</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-02-soc142-multiple-http-500-response/</loc><lastmod>2026-03-02</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-03-soc202-fakegpt-malicious-chrome-extension/</loc><lastmod>2026-03-03</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-04-soc134-suspicious-wmi-activity-event-id-71/</loc><lastmod>2026-03-04</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-05-soc246-forced-authentication-detected/</loc><lastmod>2026-03-05</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-05-soc246-forced-authentication-detected-event-208/</loc><lastmod>2026-03-05</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-06-soc131-reverse-tcp-backdoor-detected/</loc><lastmod>2026-03-06</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-08-soc102-proxy-suspicious-url-detected/</loc><lastmod>2026-03-08</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-08-soc139-meterpreter-or-empire-activity/</loc><lastmod>2026-03-08</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-10-soc147-ssh-scan-activity/</loc><lastmod>2026-03-10</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-11-soc130-event-log-cleared/</loc><lastmod>2026-03-11</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-12-soc129-successful-local-file-inclusion/</loc><lastmod>2026-03-12</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-13-soc128-malicious-file-upload-attempt/</loc><lastmod>2026-03-13</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-14-soc136-data-leak-via-mailbox-forwarding-detected/</loc><lastmod>2026-03-14</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-15-soc126-suspicious-new-autorun-value-detected/</loc><lastmod>2026-03-15</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-16-soc153-suspicious-powershell-script-executed/</loc><lastmod>2026-03-16</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-17-soc125-suspicious-rundll32-activity/</loc><lastmod>2026-03-17</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-18-soc235-atlassian-confluence-broken-access-control-0-day-cve-2023-22515/</loc><lastmod>2026-03-18</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-19-soc127-sql-injection-detected-event-60/</loc><lastmod>2026-03-19</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-20-soc101-phishing-mail-detected/</loc><lastmod>2026-03-20</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-21-soc108-malicious-remote-access-software-detected/</loc><lastmod>2026-03-21</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-22-soc124-scheduled-task-created/</loc><lastmod>2026-03-22</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-23-soc116-dns-hijacking-detected/</loc><lastmod>2026-03-23</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-25-soc119-proxy-malicious-executable-file-detected-event-79/</loc><lastmod>2026-03-25</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-26-soc135-multiple-ftp-connection-attempt/</loc><lastmod>2026-03-26</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-27-soc107-privilege-escalation-detected/</loc><lastmod>2026-03-27</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-28-soc111-traffic-to-malware-domain/</loc><lastmod>2026-03-28</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-29-soc112-traffic-to-blacklisted-ip/</loc><lastmod>2026-03-29</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-30-soc111-traffic-to-malware-domain-event42/</loc><lastmod>2026-03-30</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-30-soc113-wscriptexe-usage-as-dropper/</loc><lastmod>2026-03-30</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-03-31-soc110-proxy-cryptojacking-detected/</loc><lastmod>2026-03-31</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-01-soc133-suspicious-request-to-new-registered-domain/</loc><lastmod>2026-04-01</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-02-soc109-emotet-malware-detected/</loc><lastmod>2026-04-02</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-03-soc102-proxy-suspicious-url-detected/</loc><lastmod>2026-04-02</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-04-soc102-proxy-suspicious-url-detected-event-32/</loc><lastmod>2026-04-04</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-04-soc123-enumeration-tool-detected/</loc><lastmod>2026-04-04</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-05-soc104-malware-detected/</loc><lastmod>2026-04-05</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-05-soc132-same-malicious-file-found-on-multiple-sources/</loc><lastmod>2026-04-05</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-06-soc121-proxy-malicious-executable-file-detected/</loc><lastmod>2026-04-06</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-07-soc102-proxy-suspicious-url-detected/</loc><lastmod>2026-04-07</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-08-soc101-phishing-mail-detected/</loc><lastmod>2026-04-08</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-09-soc101-phishing-mail-detected/</loc><lastmod>2026-04-09</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-10-soc113-suspicious-hhexe-usage/</loc><lastmod>2026-04-10</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-11-soc104-malware-detected/</loc><lastmod>2026-04-11</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-12-soc107-privilege-escalation-detected/</loc><lastmod>2026-04-12</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-13-soc101-phishing-mail-detected/</loc><lastmod>2026-04-13</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-14-soc106-found-suspicious-file-ti-data/</loc><lastmod>2026-04-14</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-15-soc101-phishing-mail-detected/</loc><lastmod>2026-04-15</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-17-soc343-winrar-zero-day-path-traversal-vulnerability-cve20258088/</loc><lastmod>2026-04-17</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-18-soc341-local-privilege-escalation-via-chroot-cve-2025-32463/</loc><lastmod>2026-04-18</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-19-soc108-malicious-remote-access-software-detected/</loc><lastmod>2026-04-19</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-21-soc189-vbscript-suspicious-behavior-detected/</loc><lastmod>2025-04-21</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-23-soc337-lazarus-phishing-campaign-detected-apt38/</loc><lastmod>2026-04-23</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-25-soc118-internal-port-scan-activity/</loc><lastmod>2026-04-25</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-25-soc153-suspicious-powershell-script-executed/</loc><lastmod>2026-04-25</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-26-soc330-htran-network-tunneling-potentially-associated-with-apt10-menupass-was-detected/</loc><lastmod>2026-04-26</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-27-soc117-suspicious-reg-file/</loc><lastmod>2026-04-27</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-28-soc321-windows-defender-evasion-attempt/</loc><lastmod>2026-04-29</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-04-28-soc339-zdi-can-25373-windows-shortcut-exploit-detected/</loc><lastmod>2026-04-28</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-05-03-soc310-xsl-script-execution-via-wmicexe/</loc><lastmod>2026-03-05</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-05-04-soc302-suspicious-base64-encoding-decoding-commands-detected/</loc><lastmod>2026-04-05</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-05-04-soc308-suspicious-rundll32-execution-detected/</loc><lastmod>2026-04-05</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-05-06-soc314-unauthorized-access-to-ntdsdit-file-detected/</loc><lastmod>2026-06-05</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-05-08-soc306-critical-system-file-deletion/</loc><lastmod>2026-08-05</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-05-13-soc315-suspicious-certificate-management-activity-detected/</loc><lastmod>2026-05-13</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-05-18-soc340-apache-tomcat-serialized-payload-rce-cve-2025-24813/</loc><lastmod>2026-05-18</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-05-21-soc130-event-log-cleared/</loc><lastmod>2026-05-21</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-05-30-soc312-unauthorized-template-modification-detected/</loc><lastmod>2026-05-30</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-05-31-soc305-execution-with-hidden-window-detected/</loc><lastmod>2026-05-31</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-06-01-soc303-indirect-command-execution-via-forfiles-and-powershell/</loc><lastmod>2026-01-06</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-06-07-soc322-named-pipe-token-impersonation-detected/</loc><lastmod>2026-07-06</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-06-15-soc302-suspicious-base64-encoding-decoding-commands-detected-event-278/</loc><lastmod>2026-06-15</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-06-15-soc317-possible-vm-detection-attempt/</loc><lastmod>2026-06-15</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-06-18-soc324-sudoers-file-modification-detected/</loc><lastmod>2026-06-18</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-06-19-soc319-suspicious-dll-execution-detected/</loc><lastmod>2026-06-19</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-06-21-soc344-edr-tampering-attempt-via-edr-freeze/</loc><lastmod>2026-06-21</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-07-11-soc300-right-to-left-override-detected/</loc><lastmod>2026-11-07</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-07-12-soc316-syncappvpublishingserver-execution-to-bypass-powershell-restriction/</loc><lastmod>2026-12-07</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-07-12-soc325-unauthorized-cloud-region-access-attempt-detected/</loc><lastmod>2026-12-07</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-07-27-soc318-reflective-code-loading-attempt-via-powershell/</loc><lastmod>2026-07-27</lastmod></url>
  <url><loc>https://inksec.io/investigations/2026-08-09-soc328-akira-ransomware-iocs-detected/</loc><lastmod>2026-09-08</lastmod></url>
  <url><loc>https://inksec.io/writing/100-days/</loc><lastmod>2026-04-13</lastmod></url>
  <url><loc>https://inksec.io/writing/13cubed-review/</loc><lastmod>2026-08-21</lastmod></url>
  <url><loc>https://inksec.io/writing/btl1/</loc><lastmod>2026-04-10</lastmod></url>
  <url><loc>https://inksec.io/writing/cdsa/</loc><lastmod>2026-01-10</lastmod></url>
  <url><loc>https://inksec.io/writing/lock-encryption/</loc><lastmod>2026-06-05</lastmod></url>
  <url><loc>https://inksec.io/writing/SAL1/</loc><lastmod>2026-04-27</lastmod></url>
</urlset>
