<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://blog.cdoherty.co.uk</loc>
    <lastmod>2026-08-24T18:22:54.649Z</lastmod>
    <changefreq>always</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/immich-deployment-on-windows-server-using-docker-wsl-and-smb-based-persistent-storage</loc>
    <lastmod>2026-02-22T11:41:41.358Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/clickfix-forensics-proving-execution-beyond-the-browser</loc>
    <lastmod>2025-12-21T19:47:16.104Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/laps-the-local-administrator-password-solution-for-windows-devices-in-entra-id</loc>
    <lastmod>2025-12-07T17:48:26.977Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/soc-casefile-microsoft-365-account-compromise-investigation</loc>
    <lastmod>2025-11-30T18:41:10.787Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/deploying-level-rmm-using-a-microsoft-intune-platform-script</loc>
    <lastmod>2025-12-07T19:22:25.700Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/attack-simulation-training-microsoft-defender-for-office-365-mdo</loc>
    <lastmod>2025-11-17T11:06:55.987Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/bypassing-microsoft-intune-compliant-device-conditional-access-requirements-using-tokensmith</loc>
    <lastmod>2025-10-18T23:15:21.920Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/how-adversaries-execute-aitm-phishing-campaigns-a-practical-demonstration-using-evilginx3</loc>
    <lastmod>2025-11-16T20:41:53.140Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/auditing-microsoft-entra-authentication-methods-with-microsoft-sentinel-and-azure-logic-apps</loc>
    <lastmod>2025-10-18T23:47:33.860Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/automating-azure-nsg-inbound-rules-for-dynamic-ips-using-ddns-and-powershell-runbooks</loc>
    <lastmod>2025-10-18T23:24:04.139Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/understanding-azure-permissions-a-practical-guide</loc>
    <lastmod>2025-07-31T21:42:04.081Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/monitoring-dns-record-changes-in-microsoft-sentinel</loc>
    <lastmod>2025-10-18T23:46:14.427Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/cisco-umbrella-entra-id-idp-federation-setup-and-azure-sentinel-siem-integration</loc>
    <lastmod>2025-07-10T20:40:37.268Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/understanding-mtta-and-mttr-in-cyber-security-operations</loc>
    <lastmod>2025-07-31T21:44:47.290Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/privileged-identity-management-securing-just-in-time-jit-access-for-privileged-roles</loc>
    <lastmod>2025-10-18T23:46:54.121Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/become-a-microsoft-ninja-all-the-free-microsoft-security-training-in-one-place</loc>
    <lastmod>2025-06-19T11:35:06.675Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/microsoft-azure-lighthouse-deploying-microsoft-sentinel-across-multi-tenant-environments</loc>
    <lastmod>2025-12-21T19:46:00.216Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/microsoft-sentinel-rule-not-saving-etag-error-heres-why</loc>
    <lastmod>2025-07-31T21:17:44.952Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/top-kusto-query-language-kql-queries-for-soc-investigation</loc>
    <lastmod>2025-10-18T23:47:52.935Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/interactive-microsoft-sentinel-incident-notifications-in-teams-via-an-azure-logic-app-using-adaptive-cards</loc>
    <lastmod>2025-10-18T23:44:32.728Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/restoring-microsoft-365-email-security-features-when-using-a-third-party-email-gateway</loc>
    <lastmod>2025-10-16T22:01:49.793Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/using-abuseipdb-in-microsoft-sentinel-for-ip-reputation-and-threat-enrichment</loc>
    <lastmod>2025-04-30T23:00:00.000Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/preventing-risky-oauth-consent-how-to-stop-users-granting-access-to-unverified-apps-in-microsoft-entra-id</loc>
    <lastmod>2025-06-19T11:35:52.557Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/the-role-of-spf-dkim-and-dmarc-in-email-authentication-security</loc>
    <lastmod>2025-10-18T23:48:16.690Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/page/about</loc>
    <lastmod>2026-08-24T18:22:54.649Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/page/msdefender</loc>
    <lastmod>2026-08-24T18:22:54.649Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/series/microsoft</loc>
    <lastmod>2026-08-24T18:22:54.649Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/series/homelab</loc>
    <lastmod>2026-08-24T18:22:54.649Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/series/soc</loc>
    <lastmod>2026-08-24T18:22:54.649Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/series/tm111</loc>
    <lastmod>2026-08-24T18:22:54.649Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/series/mde</loc>
    <lastmod>2026-08-24T18:22:54.649Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/series/mdo</loc>
    <lastmod>2026-08-24T18:22:54.649Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/series/xdr</loc>
    <lastmod>2026-08-24T18:22:54.649Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/series/casefiles</loc>
    <lastmod>2026-08-24T18:22:54.649Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/archive</loc>
    <lastmod>2026-08-24T18:22:54.649Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/recommendations</loc>
    <lastmod>2026-08-24T18:22:54.649Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.4</priority>
  </url>
</urlset>