<?xml version="1.0" encoding="utf-8" standalone="yes"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml"><url><loc>https://cyberfoo.ch/dfir/malware/hide_malware/</loc><lastmod>2020-10-13T15:21:01+02:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/dfir/ir/introduction/</loc><lastmod>2020-10-13T15:21:01+02:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/tools/attacker_tools/metasploit/</loc><lastmod>2020-10-13T15:21:01+02:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/dfir/evtx/cheat_sheet/</loc><lastmod>2020-10-13T15:21:01+02:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/dfir/malware/code_signing/</loc><lastmod>2020-10-13T15:21:01+02:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/dfir/ir/risks/</loc><lastmod>2020-10-13T15:21:01+02:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/tools/attacker_tools/shellter/</loc><lastmod>2020-10-13T15:21:01+02:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/dfir/evtx/user_tracking_successful_logins/</loc><lastmod>2020-10-13T15:21:01+02:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/dfir/evtx/user_tracking_unsuccessful_logins/</loc><lastmod>2020-10-13T15:21:01+02:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/dfir/guides/ad_lab/</loc><lastmod>2020-10-13T15:21:01+02:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/dfir/evtx/resources/</loc><lastmod>2020-10-13T15:21:01+02:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/dfir/guides/email_security/</loc><lastmod>2020-10-13T15:21:01+02:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/tools/dfir_tools/aurora/</loc><lastmod>2020-10-13T15:21:01+02:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/tools/dfir_tools/cyberchef/</loc><lastmod>2020-10-13T15:21:01+02:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/tools/hardening_mitigation_tools/microsoft_sct/</loc><lastmod>2020-10-13T15:21:01+02:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/tools/dfir_tools/osquery/</loc><lastmod>2020-10-13T15:21:01+02:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/tools/hardening_mitigation_tools/pingcastle/</loc><lastmod>2020-10-13T15:21:01+02:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/tools/dfir_tools/sysmon/</loc><lastmod>2020-10-13T15:21:01+02:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/tools/dfir_tools/unfurl/</loc><lastmod>2020-10-13T15:21:01+02:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/tools/dfir_tools/velociraptor/</loc><lastmod>2020-10-13T15:21:01+02:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/tools/attacker_tools/</loc><lastmod>2020-10-06T08:48:45+00:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/tools/dfir_tools/</loc><lastmod>2020-10-06T08:48:45+00:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/dfir/guides/</loc><lastmod>2020-10-06T08:48:45+00:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/tools/hardening_mitigation_tools/</loc><lastmod>2020-10-06T08:48:45+00:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/dfir/ir/</loc><lastmod>2020-10-06T08:48:45+00:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/dfir/malware/</loc><lastmod>2020-10-06T08:48:45+00:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/dfir/evtx/</loc><lastmod>2020-10-06T08:48:45+00:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/dfir/</loc><lastmod>2020-10-06T08:48:23+00:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/tools/</loc><lastmod>2020-10-06T08:48:23+00:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/</loc><lastmod>2020-10-06T08:47:36+00:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url><loc>https://cyberfoo.ch/contributors/</loc><changefreq>weekly</changefreq><priority>0.5</priority></url></urlset>