<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://blog.cdoherty.co.uk</loc>
    <lastmod>2026-04-10T14:08:24.188Z</lastmod>
    <changefreq>always</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/immich-deployment-on-windows-server-using-docker-wsl-and-smb-based-persistent-storage</loc>
    <lastmod>2026-02-22T11:38:45.452Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/clickfix-forensics-proving-execution-beyond-the-browser</loc>
    <lastmod>2025-12-21T19:44:02.922Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/laps-the-local-administrator-password-solution-for-windows-devices-in-entra-id</loc>
    <lastmod>2025-11-30T18:40:25.080Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/soc-casefile-microsoft-365-account-compromise-investigation</loc>
    <lastmod>2025-11-30T18:37:33.132Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/deploying-level-rmm-using-a-microsoft-intune-platform-script</loc>
    <lastmod>2025-11-30T16:20:00.321Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/attack-simulation-training-microsoft-defender-for-office-365-mdo</loc>
    <lastmod>2025-11-16T20:12:58.472Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/bypassing-microsoft-intune-compliant-device-conditional-access-requirements-using-tokensmith</loc>
    <lastmod>2025-10-18T23:14:40.519Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/how-adversaries-execute-aitm-phishing-campaigns-a-practical-demonstration-using-evilginx3</loc>
    <lastmod>2025-10-18T23:10:27.145Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/auditing-microsoft-entra-authentication-methods-with-microsoft-sentinel-and-azure-logic-apps</loc>
    <lastmod>2025-10-16T21:58:51.319Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/automating-azure-nsg-inbound-rules-for-dynamic-ips-using-ddns-and-powershell-runbooks</loc>
    <lastmod>2025-10-16T17:51:36.504Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/understanding-azure-permissions-a-practical-guide</loc>
    <lastmod>2025-07-31T21:40:02.016Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/monitoring-dns-record-changes-in-microsoft-sentinel</loc>
    <lastmod>2025-07-11T12:48:18.276Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/cisco-umbrella-entra-id-idp-federation-setup-and-azure-sentinel-siem-integration</loc>
    <lastmod>2025-07-10T20:36:37.984Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/understanding-mtta-and-mttr-in-cyber-security-operations</loc>
    <lastmod>2025-06-23T09:44:07.278Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/privileged-identity-management-securing-just-in-time-jit-access-for-privileged-roles</loc>
    <lastmod>2025-06-19T11:31:10.214Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/become-a-microsoft-ninja-all-the-free-microsoft-security-training-in-one-place</loc>
    <lastmod>2025-06-17T19:10:07.761Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/microsoft-azure-lighthouse-deploying-microsoft-sentinel-across-multi-tenant-environments</loc>
    <lastmod>2025-06-16T11:00:37.675Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/microsoft-sentinel-rule-not-saving-etag-error-heres-why</loc>
    <lastmod>2025-06-13T19:53:18.582Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/top-kusto-query-language-kql-queries-for-soc-investigation</loc>
    <lastmod>2025-06-12T13:50:37.415Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/interactive-microsoft-sentinel-incident-notifications-in-teams-via-an-azure-logic-app-using-adaptive-cards</loc>
    <lastmod>2025-06-12T12:16:40.695Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/restoring-microsoft-365-email-security-features-when-using-a-third-party-email-gateway</loc>
    <lastmod>2025-06-10T23:00:00.000Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/using-abuseipdb-in-microsoft-sentinel-for-ip-reputation-and-threat-enrichment</loc>
    <lastmod>2025-04-30T23:00:00.000Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/preventing-risky-oauth-consent-how-to-stop-users-granting-access-to-unverified-apps-in-microsoft-entra-id</loc>
    <lastmod>2025-04-17T23:00:00.000Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/the-role-of-spf-dkim-and-dmarc-in-email-authentication-security</loc>
    <lastmod>2024-03-27T00:00:00.000Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/page/about</loc>
    <lastmod>2026-04-10T14:08:24.188Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/page/msdefender</loc>
    <lastmod>2026-04-10T14:08:24.188Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/series/microsoft</loc>
    <lastmod>2026-04-10T14:08:24.188Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/series/homelab</loc>
    <lastmod>2026-04-10T14:08:24.188Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/series/soc</loc>
    <lastmod>2026-04-10T14:08:24.188Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/series/tm111</loc>
    <lastmod>2026-04-10T14:08:24.188Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/series/mde</loc>
    <lastmod>2026-04-10T14:08:24.188Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/series/mdo</loc>
    <lastmod>2026-04-10T14:08:24.188Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/series/xdr</loc>
    <lastmod>2026-04-10T14:08:24.188Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/series/casefiles</loc>
    <lastmod>2026-04-10T14:08:24.188Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/archive</loc>
    <lastmod>2026-04-10T14:08:24.188Z</lastmod>
    <changefreq>daily</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://blog.cdoherty.co.uk/recommendations</loc>
    <lastmod>2026-04-10T14:08:24.188Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.4</priority>
  </url>
</urlset>