<?xml version='1.0' encoding='UTF-8'?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:video="http://www.google.com/schemas/sitemap-video/1.1" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1"><url><loc>https://blog.reconinfosec.com/effective-threat-hunting</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/envelopes-002.jpg</image:loc><image:caption>envelopes002</image:caption><image:title>envelopes002</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Recon-Infosec_Threat-Hunt-Campaign_Social_v3.jpg</image:loc><image:caption>ReconInfosecThreatHuntCampaignSocialv3</image:caption><image:title>ReconInfosecThreatHuntCampaignSocialv3</image:title></image:image><lastmod>2024-09-27</lastmod></url><url><loc>https://blog.reconinfosec.com/small-business-big-target-why-hackers-love-your-email</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Recon-Infosec_Threat-Hunt-Campaign_Social_v3.jpg</image:loc><image:caption>ReconInfosecThreatHuntCampaignSocialv3</image:caption><image:title>ReconInfosecThreatHuntCampaignSocialv3</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/image.jpg</image:loc><image:caption>image</image:caption><image:title>image</image:title></image:image><lastmod>2024-09-16</lastmod></url><url><loc>https://blog.reconinfosec.com/microsoft-teams-social-engineering-a-ransomware-attack-vector</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Recon-Infosec_Threat-Hunt-Campaign_Social_v3.jpg</image:loc><image:caption>ReconInfosecThreatHuntCampaignSocialv3</image:caption><image:title>ReconInfosecThreatHuntCampaignSocialv3</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Alert%20Noise%20Reduction%20Banner.png</image:loc><image:caption>AlertNoiseReductionBanner</image:caption><image:title>AlertNoiseReductionBanner</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/banner-4-logo@2x.jpg</image:loc><image:caption>banner4logo2x</image:caption><image:title>banner4logo2x</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/image-png-Sep-18-2025-07-25-05-7662-PM.png</image:loc><image:caption>imagepngSep1820250725057662PM</image:caption><image:title>imagepngSep1820250725057662PM</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/MS%20teams.gif</image:loc><image:caption>MSteams</image:caption><image:title>MSteams</image:title></image:image><lastmod>2025-09-19</lastmod></url><url><loc>https://blog.reconinfosec.com/clawdhype-making-sense-of-recent-ai-cybersecurity-news</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/SSA_phish_email.png</image:loc><image:caption>SSAphishemail</image:caption><image:title>SSAphishemail</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/clawdhype-banner.jpg</image:loc><image:caption>clawdhypebanner</image:caption><image:title>clawdhypebanner</image:title></image:image><lastmod>2026-02-06</lastmod></url><url><loc>https://blog.reconinfosec.com/macro-security-for-enterprise-defenders</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-02-04</lastmod></url><url><loc>https://blog.reconinfosec.com/automating-graylog-pipelines</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/graylog-1.png.png</image:loc><image:caption>graylog1png</image:caption><image:title>graylog1png</image:title></image:image><lastmod>2022-02-04</lastmod></url><url><loc>https://blog.reconinfosec.com/megasync-analysis</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/image-11.png</image:loc><image:caption>image11</image:caption><image:title>image11</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/image-10.png</image:loc><image:caption>image10</image:caption><image:title>image10</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/undefined.png</image:loc><image:caption>undefined</image:caption><image:title>undefined</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/undefined-1.png</image:loc><image:caption>undefined1</image:caption><image:title>undefined1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/undefined-3.png</image:loc><image:caption>undefined3</image:caption><image:title>undefined3</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/undefined-2.png</image:loc><image:caption>undefined2</image:caption><image:title>undefined2</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/image-8-1.png</image:loc><image:caption>image81</image:caption><image:title>image81</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/slacking-at-security-operations</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/ifttt_recipe.png</image:loc><image:caption>iftttrecipe</image:caption><image:title>iftttrecipe</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/incoming_simple.png</image:loc><image:caption>incomingsimple</image:caption><image:title>incomingsimple</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/slack_rgb.png</image:loc><image:caption>slackrgb</image:caption><image:title>slackrgb</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/email_alert.png</image:loc><image:caption>emailalert</image:caption><image:title>emailalert</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/soc-x-2021-a-recap</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/2021-SOC-X-submissions.png</image:loc><image:caption>2021SOCXsubmissions</image:caption><image:title>2021SOCXsubmissions</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/2021-03-04-18-00-scoreboard.socx.io.png</image:loc><image:caption>202103041800scoreboardsocxio</image:caption><image:title>202103041800scoreboardsocxio</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/2021-SOC-X-tools.png</image:loc><image:caption>2021SOCXtools</image:caption><image:title>2021SOCXtools</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/9bb.png</image:loc><image:caption>9bb</image:caption><image:title>9bb</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/SOC-X-map-1.png</image:loc><image:caption>SOCXmap1</image:caption><image:title>SOCXmap1</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/recon-infosec-expands-reach-and-partner-program-with-channel-partner-portal-launch</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/banner-4-logo@2x.jpg</image:loc><image:caption>banner4logo2x</image:caption><image:title>banner4logo2x</image:title></image:image><lastmod>2022-06-14</lastmod></url><url><loc>https://blog.reconinfosec.com/opensoc-camp-covid</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/ETo8FQOXYAIXNsL-1.jpeg</image:loc><image:caption>ETo8FQOXYAIXNsL1</image:caption><image:title>ETo8FQOXYAIXNsL1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-02-04</lastmod></url><url><loc>https://blog.reconinfosec.com/recon-ndr-for-military-cyber-protection-teams</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Recon-Infosec_Threat-Hunt-Campaign_Social_v3.jpg</image:loc><image:caption>ReconInfosecThreatHuntCampaignSocialv3</image:caption><image:title>ReconInfosecThreatHuntCampaignSocialv3</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/detecting-threats-with-graylog-pipelines</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/stages.png</image:loc><image:caption>stages</image:caption><image:title>stages</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/the-infrastructure-ii</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Screenshot-2019-09-23-22.34.04.png</image:loc><image:caption>Screenshot20190923223404</image:caption><image:title>Screenshot20190923223404</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/2c9b02bb1f25868b7ad6efebc9c1e4217a1f1401-34.jpg</image:loc><image:caption>2c9b02bb1f25868b7ad6efebc9c1e4217a1f140134</image:caption><image:title>2c9b02bb1f25868b7ad6efebc9c1e4217a1f140134</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/968f39115fd430ef7297a9aa099e912d623d7e26-34.jpg</image:loc><image:caption>968f39115fd430ef7297a9aa099e912d623d7e2634</image:caption><image:title>968f39115fd430ef7297a9aa099e912d623d7e2634</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/IMG_5007.jpeg</image:loc><image:caption>IMG5007</image:caption><image:title>IMG5007</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/BqWb4SvCQAAIc9O.jpg</image:loc><image:caption>BqWb4SvCQAAIc9O</image:caption><image:title>BqWb4SvCQAAIc9O</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Screenshot-2019-09-23-22.15.55.png</image:loc><image:caption>Screenshot20190923221555</image:caption><image:title>Screenshot20190923221555</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/blue-team-village-def-con-26</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/2018-08-12-00-00-scoreboard.opensoc.io_trim.png</image:loc><image:caption>201808120000scoreboardopensociotrim</image:caption><image:title>201808120000scoreboardopensociotrim</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2025-09-19</lastmod></url><url><loc>https://blog.reconinfosec.com/analysis-of-exploitation-of-cve-2019-3396</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/poc_observables.png</image:loc><image:caption>pocobservables</image:caption><image:title>pocobservables</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/getshell.png</image:loc><image:caption>getshell</image:caption><image:title>getshell</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/mft.png</image:loc><image:caption>mft</image:caption><image:title>mft</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/the-lockbit-ransomware-group-disruption-now-what</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2024-02-29</lastmod></url><url><loc>https://blog.reconinfosec.com/recon-infosec-receives-soc-2-type-ii-certification</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Social%20image.png</image:loc><image:caption>Socialimage</image:caption><image:title>Socialimage</image:title></image:image><lastmod>2022-03-09</lastmod></url><url><loc>https://blog.reconinfosec.com/sigmahq-essentials_-building-robust-detection-capabilities-part-2</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Screenshot%202024-10-01%20at%203.10.04%20PM.png</image:loc><image:caption>Screenshot20241001at31004PM</image:caption><image:title>Screenshot20241001at31004PM</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/sigma.jpg</image:loc><image:caption>sigma</image:caption><image:title>sigma</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2024-10-01</lastmod></url><url><loc>https://blog.reconinfosec.com/locking-down-zerotier</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Mesh-network-example.png</image:loc><image:caption>Meshnetworkexample</image:caption><image:title>Meshnetworkexample</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/auditing-gsuite-login-activity</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/recon-launches-soc-x</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Recon-Infosec_Threat-Hunt-Campaign_Social_v3.jpg</image:loc><image:caption>ReconInfosecThreatHuntCampaignSocialv3</image:caption><image:title>ReconInfosecThreatHuntCampaignSocialv3</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/zoom-events-phishing</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/SSA_phish_email.png</image:loc><image:caption>SSAphishemail</image:caption><image:title>SSAphishemail</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/phish_email_office_icons.png</image:loc><image:caption>phishemailofficeicons</image:caption><image:title>phishemailofficeicons</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/renamed_binary.png</image:loc><image:caption>renamedbinary</image:caption><image:title>renamedbinary</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/SSA_phish_page.png</image:loc><image:caption>SSAphishpage</image:caption><image:title>SSAphishpage</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/MS%20teams.gif</image:loc><image:caption>MSteams</image:caption><image:title>MSteams</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Screenshot%202025-06-20%20at%205.33.56%20PM.png</image:loc><image:caption>Screenshot20250620at53356PM</image:caption><image:title>Screenshot20250620at53356PM</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/abuseipdb.png</image:loc><image:caption>abuseipdb</image:caption><image:title>abuseipdb</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Screenshot%202025-06-20%20at%205.32.57%20PM.png</image:loc><image:caption>Screenshot20250620at53257PM</image:caption><image:title>Screenshot20250620at53257PM</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/detections.png</image:loc><image:caption>detections</image:caption><image:title>detections</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Screenshot%202025-06-20%20at%205.54.57%20PM.png</image:loc><image:caption>Screenshot20250620at55457PM</image:caption><image:title>Screenshot20250620at55457PM</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/spf_record.png</image:loc><image:caption>spfrecord</image:caption><image:title>spfrecord</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-thumbnail.png</image:loc><image:caption>reconthumbnail</image:caption><image:title>reconthumbnail</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/phish_email_excel.png</image:loc><image:caption>phishemailexcel</image:caption><image:title>phishemailexcel</image:title></image:image><lastmod>2025-09-18</lastmod></url><url><loc>https://blog.reconinfosec.com/mastering-threat-hunting-operations</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Recon-Infosec_Threat-Hunt-Campaign_Social_v3.jpg</image:loc><image:caption>ReconInfosecThreatHuntCampaignSocialv3</image:caption><image:title>ReconInfosecThreatHuntCampaignSocialv3</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/banner-4-logo@2x.jpg</image:loc><image:caption>banner4logo2x</image:caption><image:title>banner4logo2x</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Alert%20Noise%20Reduction%20Banner.png</image:loc><image:caption>AlertNoiseReductionBanner</image:caption><image:title>AlertNoiseReductionBanner</image:title></image:image><lastmod>2025-09-18</lastmod></url><url><loc>https://blog.reconinfosec.com/detecting-threats-with-graylog-pipelines-part-3</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/image-4-1.png</image:loc><image:caption>image41</image:caption><image:title>image41</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Graylog-Pipeline-Methodology_r2.png</image:loc><image:caption>GraylogPipelineMethodologyr2</image:caption><image:title>GraylogPipelineMethodologyr2</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Graylog-Pipeline-Methodology-2.png</image:loc><image:caption>GraylogPipelineMethodology2</image:caption><image:title>GraylogPipelineMethodology2</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Windows_Threats.png</image:loc><image:caption>WindowsThreats</image:caption><image:title>WindowsThreats</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Threat-Score-Matrix.png</image:loc><image:caption>ThreatScoreMatrix</image:caption><image:title>ThreatScoreMatrix</image:title></image:image><lastmod>2022-02-02</lastmod></url><url><loc>https://blog.reconinfosec.com/iranian-government-affiliated-intrusions-documented-tradecraft</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-thumbnail.png</image:loc><image:caption>reconthumbnail</image:caption><image:title>reconthumbnail</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2026-03-03</lastmod></url><url><loc>https://blog.reconinfosec.com/detecting-threats-with-graylog-pipelines-part-2</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/image-Jan-25-2022-10-59-09-14-PM.png</image:loc><image:caption>imageJan25202210590914PM</image:caption><image:title>imageJan25202210590914PM</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/the-infrastructure</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/class1.jpeg</image:loc><image:caption>class1</image:caption><image:title>class1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/range_empty_1.png</image:loc><image:caption>rangeempty1</image:caption><image:title>rangeempty1</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/digital-age-the-power-of-canary-tokens-and-deception-technology-in-cybersecurity</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2024-03-08</lastmod></url><url><loc>https://blog.reconinfosec.com/sigmahq-essentials-building-robust-detection-capabilities</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/sigma.jpg</image:loc><image:caption>sigma</image:caption><image:title>sigma</image:title></image:image><lastmod>2024-09-09</lastmod></url><url><loc>https://blog.reconinfosec.com/analysis-of-exploitation-cve-2020-10189</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/powershell-download.png</image:loc><image:caption>powershelldownload</image:caption><image:title>powershelldownload</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/cobalt.png</image:loc><image:caption>cobalt</image:caption><image:title>cobalt</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/memforensics.png</image:loc><image:caption>memforensics</image:caption><image:title>memforensics</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/chart-forensics.png</image:loc><image:caption>chartforensics</image:caption><image:title>chartforensics</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/pstree-results.png</image:loc><image:caption>pstreeresults</image:caption><image:title>pstreeresults</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/certutilzoho.png</image:loc><image:caption>certutilzoho</image:caption><image:title>certutilzoho</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/svcinstall-event2.png</image:loc><image:caption>svcinstallevent2</image:caption><image:title>svcinstallevent2</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/chart-logger-zip.png</image:loc><image:caption>chartloggerzip</image:caption><image:title>chartloggerzip</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/shodan.png</image:loc><image:caption>shodan</image:caption><image:title>shodan</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/cred-dumping.png</image:loc><image:caption>creddumping</image:caption><image:title>creddumping</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/vkintel.png</image:loc><image:caption>vkintel</image:caption><image:title>vkintel</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/installbat.png</image:loc><image:caption>installbat</image:caption><image:title>installbat</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/image-png-May-10-2023-07-09-43-2952-AM.png</image:loc><image:caption>imagepngMay1020230709432952AM</image:caption><image:title>imagepngMay1020230709432952AM</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/bitsadmin.png</image:loc><image:caption>bitsadmin</image:caption><image:title>bitsadmin</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/yara-cobalt.png</image:loc><image:caption>yaracobalt</image:caption><image:title>yaracobalt</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/commandparent.png</image:loc><image:caption>commandparent</image:caption><image:title>commandparent</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/loggerzip.png</image:loc><image:caption>loggerzip</image:caption><image:title>loggerzip</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/integrating-graylog-with-thehive</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Screenshot-2020-01-31-13.41.48.png</image:loc><image:caption>Screenshot20200131134148</image:caption><image:title>Screenshot20200131134148</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Screenshot-2020-01-31-13.29.41.png</image:loc><image:caption>Screenshot20200131132941</image:caption><image:title>Screenshot20200131132941</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/recon-at-cactuscon-11</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/IMG_8567-jpg.jpeg</image:loc><image:caption>IMG8567jpg</image:caption><image:title>IMG8567jpg</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/IMG_8571-jpg.jpeg</image:loc><image:caption>IMG8571jpg</image:caption><image:title>IMG8571jpg</image:title></image:image><lastmod>2023-02-09</lastmod></url><url><loc>https://blog.reconinfosec.com/adversary-emulation-mapping</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/calculated-layers-1.png</image:loc><image:caption>calculatedlayers1</image:caption><image:title>calculatedlayers1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/fin6-map.png</image:loc><image:caption>fin6map</image:caption><image:title>fin6map</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/a-tribute-to-opensoc</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/IMG_8985.jpg</image:loc><image:caption>IMG8985</image:caption><image:title>IMG8985</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/IMG_7210.jpg</image:loc><image:caption>IMG7210</image:caption><image:title>IMG7210</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/20181011_180227.jpg</image:loc><image:caption>20181011180227</image:caption><image:title>20181011180227</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Recon-BTV-4.jpg</image:loc><image:caption>ReconBTV4</image:caption><image:title>ReconBTV4</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/btv-afterdark.png</image:loc><image:caption>btvafterdark</image:caption><image:title>btvafterdark</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/image-png-Feb-19-2023-03-35-36-5045-AM.png</image:loc><image:caption>imagepngFeb1920230335365045AM</image:caption><image:title>imagepngFeb1920230335365045AM</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/IMG_8994.jpg</image:loc><image:caption>IMG8994</image:caption><image:title>IMG8994</image:title></image:image><lastmod>2023-03-08</lastmod></url><url><loc>https://blog.reconinfosec.com/brokering-other-cloud-resources-behind-aws-services</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Generic-Network-Diagram.png</image:loc><image:caption>GenericNetworkDiagram</image:caption><image:title>GenericNetworkDiagram</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/a-tribute-to-devnull</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/testing-applications-for-log4j-vulnerability-cve-2021-44228</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/log4j-4.png</image:loc><image:caption>log4j4</image:caption><image:title>log4j4</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Social%20image.png</image:loc><image:caption>Socialimage</image:caption><image:title>Socialimage</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/log4j-3.png</image:loc><image:caption>log4j3</image:caption><image:title>log4j3</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/log4j-1.png</image:loc><image:caption>log4j1</image:caption><image:title>log4j1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/log4j-2.png</image:loc><image:caption>log4j2</image:caption><image:title>log4j2</image:title></image:image><lastmod>2025-09-19</lastmod></url><url><loc>https://blog.reconinfosec.com/opensoc-def-con-28-safe-mode</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/were-watching-always-watching.jpg</image:loc><image:caption>werewatchingalwayswatching</image:caption><image:title>werewatchingalwayswatching</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/joinus.jpg</image:loc><image:caption>joinus</image:caption><image:title>joinus</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/friends_forever-1.jpg</image:loc><image:caption>friendsforever1</image:caption><image:title>friendsforever1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Screen-Shot-2020-08-13-at-9.29.21-AM-1.png</image:loc><image:caption>ScreenShot20200813at92921AM1</image:caption><image:title>ScreenShot20200813at92921AM1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/brace-yourself-tickets-5cb354.jpg</image:loc><image:caption>braceyourselftickets5cb354</image:caption><image:title>braceyourselftickets5cb354</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/congrats.jpeg</image:loc><image:caption>congrats</image:caption><image:title>congrats</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/defcon_28_team_winners.png</image:loc><image:caption>defcon28teamwinners</image:caption><image:title>defcon28teamwinners</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/a-pragmatic-approach-to-vulnerability-management</loc><lastmod>2025-11-10</lastmod></url><url><loc>https://blog.reconinfosec.com/free-threat-hunting-for-critical-infrastructure-entities</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Recon-Infosec_Threat-Hunt-Campaign_Social_v3.jpg</image:loc><image:caption>ReconInfosecThreatHuntCampaignSocialv3</image:caption><image:title>ReconInfosecThreatHuntCampaignSocialv3</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Alert%20Noise%20Reduction%20Banner.png</image:loc><image:caption>AlertNoiseReductionBanner</image:caption><image:title>AlertNoiseReductionBanner</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/banner-4-logo@2x.jpg</image:loc><image:caption>banner4logo2x</image:caption><image:title>banner4logo2x</image:title></image:image><lastmod>2022-05-17</lastmod></url><url><loc>https://blog.reconinfosec.com/introducing-recon-labs</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/SSA_phish_email.png</image:loc><image:caption>SSAphishemail</image:caption><image:title>SSAphishemail</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/MS%20teams.gif</image:loc><image:caption>MSteams</image:caption><image:title>MSteams</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Alert%20Noise%20Reduction%20Banner.png</image:loc><image:caption>AlertNoiseReductionBanner</image:caption><image:title>AlertNoiseReductionBanner</image:title></image:image><lastmod>2025-09-22</lastmod></url><url><loc>https://blog.reconinfosec.com/ta18-106a</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-02-04</lastmod></url><url><loc>https://blog.reconinfosec.com/remote-access-done-right</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-10-14</lastmod></url><url><loc>https://blog.reconinfosec.com/debunking-3-common-myths-about-ransomware-protection-in-education-insights-from-cossba-conference</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Recon-Infosec_Threat-Hunt-Campaign_Social_v3.jpg</image:loc><image:caption>ReconInfosecThreatHuntCampaignSocialv3</image:caption><image:title>ReconInfosecThreatHuntCampaignSocialv3</image:title></image:image><lastmod>2024-03-01</lastmod></url><url><loc>https://blog.reconinfosec.com/plan-for-when</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2024-05-01</lastmod></url><url><loc>https://blog.reconinfosec.com/securing-g-suite</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/an-encounter-with-ta551-shathak</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/image-1.png</image:loc><image:caption>image1</image:caption><image:title>image1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/photo-1564148204877-9bf116988675.jpeg</image:loc><image:caption>photo15641482048779bf116988675</image:caption><image:title>photo15641482048779bf116988675</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/image-Jan-25-2022-07-58-33-29-PM.png</image:loc><image:caption>imageJan25202207583329PM</image:caption><image:title>imageJan25202207583329PM</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/the-training-secrets-of-great-security-operations-teams</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/graphic-w-text-1.png</image:loc><image:caption>graphicwtext1</image:caption><image:title>graphicwtext1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/graphic.png</image:loc><image:caption>graphic</image:caption><image:title>graphic</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/another-lastpass-breach-and-what-you-should-know</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-12-23</lastmod></url><url><loc>https://blog.reconinfosec.com/build-a-private-mesh-network-for-free</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Mesh-network-example.png</image:loc><image:caption>Meshnetworkexample</image:caption><image:title>Meshnetworkexample</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/zt_client_list.png</image:loc><image:caption>ztclientlist</image:caption><image:title>ztclientlist</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Hub-and-spoke-example_x.png</image:loc><image:caption>Hubandspokeexamplex</image:caption><image:title>Hubandspokeexamplex</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/zt_network_settings.png</image:loc><image:caption>ztnetworksettings</image:caption><image:title>ztnetworksettings</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/securing-your-velociraptor-deployment</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/velociraptor-4.png</image:loc><image:caption>velociraptor4</image:caption><image:title>velociraptor4</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Screen-Shot-2020-09-22-at-4.34.53-PM.png</image:loc><image:caption>ScreenShot20200922at43453PM</image:caption><image:title>ScreenShot20200922at43453PM</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/onions-have-layers-security-has-layers.jpg</image:loc><image:caption>onionshavelayerssecurityhaslayers</image:caption><image:title>onionshavelayerssecurityhaslayers</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/graylog-and-cylance-integration</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/closing-the-loop-how-recon-infosec-uses-pentests</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Alert%20Noise%20Reduction%20Banner.png</image:loc><image:caption>AlertNoiseReductionBanner</image:caption><image:title>AlertNoiseReductionBanner</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/banner-4-logo@2x.jpg</image:loc><image:caption>banner4logo2x</image:caption><image:title>banner4logo2x</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/join-the-network-exclude-a-participant-from-acces-2025-03-18-18-37-44-utc.jpg</image:loc><image:caption>jointhenetworkexcludeaparticipantfromacces20250318183744utc</image:caption><image:title>jointhenetworkexcludeaparticipantfromacces20250318183744utc</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Recon-Infosec_Threat-Hunt-Campaign_Social_v3.jpg</image:loc><image:caption>ReconInfosecThreatHuntCampaignSocialv3</image:caption><image:title>ReconInfosecThreatHuntCampaignSocialv3</image:title></image:image><lastmod>2025-10-08</lastmod></url><url><loc>https://blog.reconinfosec.com/recon-ndr-at-black-hat-2019</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/ndr.png</image:loc><image:caption>ndr</image:caption><image:title>ndr</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/automating-coverage-analysis-with-att-ck-navigator</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/example-technique-detection-1.png</image:loc><image:caption>exampletechniquedetection1</image:caption><image:title>exampletechniquedetection1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/example-data-source-heatmap-1.png</image:loc><image:caption>exampledatasourceheatmap1</image:caption><image:title>exampledatasourceheatmap1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/camp-covid-a-recap</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/map.png</image:loc><image:caption>map</image:caption><image:title>map</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/2020-04-13-10-49-osquery.networkdefenserange.io.png</image:loc><image:caption>202004131049osquerynetworkdefenserangeio</image:caption><image:title>202004131049osquerynetworkdefenserangeio</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/ETo8FQOXYAIXNsL-1.jpeg</image:loc><image:caption>ETo8FQOXYAIXNsL1</image:caption><image:title>ETo8FQOXYAIXNsL1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-02-04</lastmod></url><url><loc>https://blog.reconinfosec.com/opensoc-def-con-29</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/DC29-results.jpeg</image:loc><image:caption>DC29results</image:caption><image:title>DC29results</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/DC29-dashboard-stats.jpeg</image:loc><image:caption>DC29dashboardstats</image:caption><image:title>DC29dashboardstats</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/image--1-.png</image:loc><image:caption>image1</image:caption><image:title>image1</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/integrating-thinkst-canaries-with-thehive</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Screenshot-2020-01-31-13.29.41-1.png</image:loc><image:caption>Screenshot202001311329411</image:caption><image:title>Screenshot202001311329411</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Screen-Shot-2020-09-16-at-12.01.01-AM-2.png</image:loc><image:caption>ScreenShot20200916at120101AM2</image:caption><image:title>ScreenShot20200916at120101AM2</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Screen-Shot-2020-09-11-at-12.18.38-PM-1.png</image:loc><image:caption>ScreenShot20200911at121838PM1</image:caption><image:title>ScreenShot20200911at121838PM1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Screen-Shot-2020-09-11-at-12.16.43-PM-1.png</image:loc><image:caption>ScreenShot20200911at121643PM1</image:caption><image:title>ScreenShot20200911at121643PM1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Screen-Shot-2020-09-16-at-12.13.17-AM-1.png</image:loc><image:caption>ScreenShot20200916at121317AM1</image:caption><image:title>ScreenShot20200916at121317AM1</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/opensoc-dc27-black-badge-edition</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/audit-active-directory-attack-paths-with-bloodhound</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/image-png-Apr-18-2023-08-45-24-9495-PM.png</image:loc><image:caption>imagepngApr1820230845249495PM</image:caption><image:title>imagepngApr1820230845249495PM</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/image-png-Apr-18-2023-08-59-11-8280-PM.png</image:loc><image:caption>imagepngApr1820230859118280PM</image:caption><image:title>imagepngApr1820230859118280PM</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/BH_Import.gif</image:loc><image:caption>BHImport</image:caption><image:title>BHImport</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/image-png-Apr-18-2023-08-44-38-3505-PM.png</image:loc><image:caption>imagepngApr1820230844383505PM</image:caption><image:title>imagepngApr1820230844383505PM</image:title></image:image><lastmod>2023-04-18</lastmod></url><url><loc>https://blog.reconinfosec.com/case-study-from-running-blind-to-active-defense</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/oil-gas-drill-1.jpg</image:loc><image:caption>oilgasdrill1</image:caption><image:title>oilgasdrill1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Social%20image.png</image:loc><image:caption>Socialimage</image:caption><image:title>Socialimage</image:title></image:image><lastmod>2025-12-04</lastmod></url><url><loc>https://blog.reconinfosec.com/detecting-fake-captcha-campaigns</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/verification.png</image:loc><image:caption>verification</image:caption><image:title>verification</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/homoglyphs2.png</image:loc><image:caption>homoglyphs2</image:caption><image:title>homoglyphs2</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/obfuscated.png</image:loc><image:caption>obfuscated</image:caption><image:title>obfuscated</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/runonce1.png</image:loc><image:caption>runonce1</image:caption><image:title>runonce1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/sigma.jpg</image:loc><image:caption>sigma</image:caption><image:title>sigma</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/homoglphys3.png</image:loc><image:caption>homoglphys3</image:caption><image:title>homoglphys3</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/edge.png</image:loc><image:caption>edge</image:caption><image:title>edge</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/like-variant.png</image:loc><image:caption>likevariant</image:caption><image:title>likevariant</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/chrome.png</image:loc><image:caption>chrome</image:caption><image:title>chrome</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/homoglyphs1.png</image:loc><image:caption>homoglyphs1</image:caption><image:title>homoglyphs1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/runonce2.png</image:loc><image:caption>runonce2</image:caption><image:title>runonce2</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/domain.png</image:loc><image:caption>domain</image:caption><image:title>domain</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/get-member.png</image:loc><image:caption>getmember</image:caption><image:title>getmember</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/amsi.png</image:loc><image:caption>amsi</image:caption><image:title>amsi</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/invokescript.png</image:loc><image:caption>invokescript</image:caption><image:title>invokescript</image:title></image:image><lastmod>2025-04-22</lastmod></url><url><loc>https://blog.reconinfosec.com/endpoint-logging-for-the-win</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/800---part-1.png</image:loc><image:caption>800part1</image:caption><image:title>800part1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Event-ID-10.png</image:loc><image:caption>EventID10</image:caption><image:title>EventID10</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/transcript-logs.png</image:loc><image:caption>transcriptlogs</image:caption><image:title>transcriptlogs</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Event-ID-1---whoami.png</image:loc><image:caption>EventID1whoami</image:caption><image:title>EventID1whoami</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/4688-.png</image:loc><image:caption>4688</image:caption><image:title>4688</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Event-ID-1---powershell.png</image:loc><image:caption>EventID1powershell</image:caption><image:title>EventID1powershell</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Encrypted-Traffic-1.png</image:loc><image:caption>EncryptedTraffic1</image:caption><image:title>EncryptedTraffic1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Encrypted-Traffic.png</image:loc><image:caption>EncryptedTraffic</image:caption><image:title>EncryptedTraffic</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/4104.png</image:loc><image:caption>4104</image:caption><image:title>4104</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/ClearText---Part-1.png</image:loc><image:caption>ClearTextPart1</image:caption><image:title>ClearTextPart1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Event-ID-1---whoami--1-.png</image:loc><image:caption>EventID1whoami1</image:caption><image:title>EventID1whoami1</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Event-ID-3.png</image:loc><image:caption>EventID3</image:caption><image:title>EventID3</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/ClearTest-But-Encoded.png</image:loc><image:caption>ClearTestButEncoded</image:caption><image:title>ClearTestButEncoded</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Encoded-Result.png</image:loc><image:caption>EncodedResult</image:caption><image:title>EncodedResult</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/400.png</image:loc><image:caption>400</image:caption><image:title>400</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/4103.png</image:loc><image:caption>4103</image:caption><image:title>4103</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/AndrewCook.png</image:loc><image:caption>AndrewCook</image:caption><image:title>AndrewCook</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/MacieThompson%20Toon%20(no%20border).png</image:loc><image:caption>MacieThompsonToonnoborder</image:caption><image:title>MacieThompsonToonnoborder</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-shield-on-white-2.png</image:loc><image:caption>reconshieldonwhite2</image:caption><image:title>reconshieldonwhite2</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20images/LukeRusten.png</image:loc><image:caption>LukeRusten</image:caption><image:title>LukeRusten</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/MichaelRobertson.png</image:loc><image:caption>MichaelRobertson</image:caption><image:title>MichaelRobertson</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/watson-brown.png</image:loc><image:caption>watsonbrown</image:caption><image:title>watsonbrown</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/ben-webb.png</image:loc><image:caption>benwebb</image:caption><image:title>benwebb</image:title></image:image><lastmod>2023-08-25</lastmod></url><url><loc>https://blog.reconinfosec.com/wire-transfer-fraud</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-08-03</lastmod></url><url><loc>https://blog.reconinfosec.com/gsuite-dfir-part-1</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/image-png-May-10-2023-07-09-43-2952-AM.png</image:loc><image:caption>imagepngMay1020230709432952AM</image:caption><image:title>imagepngMay1020230709432952AM</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/NIST-incident-response-lifecycle.jpg</image:loc><image:caption>NISTincidentresponselifecycle</image:caption><image:title>NISTincidentresponselifecycle</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/okta-lapsus-security-incident</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/image-png-May-10-2023-07-09-43-2952-AM.png</image:loc><image:caption>imagepngMay1020230709432952AM</image:caption><image:title>imagepngMay1020230709432952AM</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/image-png-2.png</image:loc><image:caption>imagepng2</image:caption><image:title>imagepng2</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/image-png-3.png</image:loc><image:caption>imagepng3</image:caption><image:title>imagepng3</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/image-png.png</image:loc><image:caption>imagepng</image:caption><image:title>imagepng</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/image-png-1.png</image:loc><image:caption>imagepng1</image:caption><image:title>imagepng1</image:title></image:image><lastmod>2022-03-23</lastmod></url><url><loc>https://blog.reconinfosec.com/every-organization-needs-centralized-logging</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/banner-4-logo@2x.jpg</image:loc><image:caption>banner4logo2x</image:caption><image:title>banner4logo2x</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/volodymyr-hryshchenko-inI8GnmS190-unsplash.jpeg</image:loc><image:caption>volodymyrhryshchenkoinI8GnmS190unsplash</image:caption><image:title>volodymyrhryshchenkoinI8GnmS190unsplash</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2023-07-25</lastmod></url><url><loc>https://blog.reconinfosec.com/advanced-email-protection-to-be-thrilled-about</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/envelopes-002.jpg</image:loc><image:caption>envelopes002</image:caption><image:title>envelopes002</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Recon-Infosec_Threat-Hunt-Campaign_Social_v3.jpg</image:loc><image:caption>ReconInfosecThreatHuntCampaignSocialv3</image:caption><image:title>ReconInfosecThreatHuntCampaignSocialv3</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2024-06-22</lastmod></url><url><loc>https://blog.reconinfosec.com/your-ransomware-incident-is-predictable</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/DALL%C2%B7E%202024-08-23%2013.29.58%20-%20A%20dramatic%20and%20intense%20scene%20capturing%20the%20concept%20of%20ransomware%20in%20the%20digital%20age.%20The%20image%20should%20feature%20a%20dark%2c%20foreboding%20background%20with%20hints.webp</image:loc><image:caption>DALLE20240823132958AdramaticandintensescenecapturingtheconceptofransomwareinthedigitalageTheimageshouldfeatureadarkforebodingbackgroundwithhints</image:caption><image:title>DALLE20240823132958AdramaticandintensescenecapturingtheconceptofransomwareinthedigitalageTheimageshouldfeatureadarkforebodingbackgroundwithhints</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2024-09-06</lastmod></url><url><loc>https://blog.reconinfosec.com/threat-hunting-a-critical-component-of-high-performing-socs</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/visualizing-geo-ip-information-in-python</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/map-output.png</image:loc><image:caption>mapoutput</image:caption><image:title>mapoutput</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/network-defense-range-ndr-returning-to-blackhat-2020</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/IMG_4972.jpg</image:loc><image:caption>IMG4972</image:caption><image:title>IMG4972</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/15759_BHUS20-Web-Ads-All-Groups_trainer_970x90.png</image:loc><image:caption>15759BHUS20WebAdsAllGroupstrainer970x90</image:caption><image:title>15759BHUS20WebAdsAllGroupstrainer970x90</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/emergence-of-akira-ransomware-group</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/image-png-May-10-2023-07-10-21-1612-AM.png</image:loc><image:caption>imagepngMay1020230710211612AM</image:caption><image:title>imagepngMay1020230710211612AM</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/image-png-May-10-2023-07-06-59-4993-AM.png</image:loc><image:caption>imagepngMay1020230706594993AM</image:caption><image:title>imagepngMay1020230706594993AM</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/image-png-May-10-2023-07-10-06-3671-AM.png</image:loc><image:caption>imagepngMay1020230710063671AM</image:caption><image:title>imagepngMay1020230710063671AM</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/image-png-May-10-2023-07-09-43-2952-AM.png</image:loc><image:caption>imagepngMay1020230709432952AM</image:caption><image:title>imagepngMay1020230709432952AM</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/image-png-May-10-2023-05-17-36-1788-PM.png</image:loc><image:caption>imagepngMay1020230517361788PM</image:caption><image:title>imagepngMay1020230517361788PM</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/image-png-May-10-2023-05-17-09-9567-PM.png</image:loc><image:caption>imagepngMay1020230517099567PM</image:caption><image:title>imagepngMay1020230517099567PM</image:title></image:image><lastmod>2023-05-10</lastmod></url><url><loc>https://blog.reconinfosec.com/geolocation-in-graylog</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Screen-Shot-2018-08-19-at-6.59.26-PM.png</image:loc><image:caption>ScreenShot20180819at65926PM</image:caption><image:title>ScreenShot20180819at65926PM</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Screen-Shot-2018-08-17-at-7.05.50-PM.png</image:loc><image:caption>ScreenShot20180817at70550PM</image:caption><image:title>ScreenShot20180817at70550PM</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/phishing-campaign</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/image%20(29)-png.png</image:loc><image:caption>image29png</image:caption><image:title>image29png</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-02-24</lastmod></url><url><loc>https://blog.reconinfosec.com/planning-for-the-worst-making-ir-bc-and-dr-plans-work</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-break-glass-002.jpg</image:loc><image:caption>reconbreakglass002</image:caption><image:title>reconbreakglass002</image:title></image:image><lastmod>2026-01-09</lastmod></url><url><loc>https://blog.reconinfosec.com/spectre-meltdown</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/advanced-email-protection-detection-techniques-in-action</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/5.jpg</image:loc><image:caption>5</image:caption><image:title>5</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-thumbnail.png</image:loc><image:caption>reconthumbnail</image:caption><image:title>reconthumbnail</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/2.jpg</image:loc><image:caption>2</image:caption><image:title>2</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/3.jpg</image:loc><image:caption>3</image:caption><image:title>3</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/4.jpg</image:loc><image:caption>4</image:caption><image:title>4</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/1.png</image:loc><image:caption>1</image:caption><image:title>1</image:title></image:image><lastmod>2024-06-25</lastmod></url><url><loc>https://blog.reconinfosec.com/scaling-enterprise-forensic-timelining</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2025-09-19</lastmod></url><url><loc>https://blog.reconinfosec.com/recon-launches-network-defense-range-ndr-live-online</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/a-secdevops-perspective-on-sunburst</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Recon-Infosec_Threat-Hunt-Campaign_Social_v3.jpg</image:loc><image:caption>ReconInfosecThreatHuntCampaignSocialv3</image:caption><image:title>ReconInfosecThreatHuntCampaignSocialv3</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Social%20image.png</image:loc><image:caption>Socialimage</image:caption><image:title>Socialimage</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/Screen-Shot-2020-12-15-at-9.31.27-AM.png</image:loc><image:caption>ScreenShot20201215at93127AM</image:caption><image:title>ScreenShot20201215at93127AM</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/recons-soar-playbook-to-detect-the-log4j-exploit</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/image-6.png</image:loc><image:caption>image6</image:caption><image:title>image6</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/image-2.png</image:loc><image:caption>image2</image:caption><image:title>image2</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/image-8.png</image:loc><image:caption>image8</image:caption><image:title>image8</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Social%20image.png</image:loc><image:caption>Socialimage</image:caption><image:title>Socialimage</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/image-7.png</image:loc><image:caption>image7</image:caption><image:title>image7</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/image-5.png</image:loc><image:caption>image5</image:caption><image:title>image5</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/image-4.png</image:loc><image:caption>image4</image:caption><image:title>image4</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/Imported%20sitepage%20images/image-3.png</image:loc><image:caption>image3</image:caption><image:title>image3</image:title></image:image><lastmod>2022-01-31</lastmod></url><url><loc>https://blog.reconinfosec.com/when-browser-extensions-go-rogue</loc><image:image><image:loc>https://7101814.fs1.hubspotusercontent-na1.net/hubfs/7101814/recon-logo-full-on-white.png</image:loc><image:caption>reconlogofullonwhite</image:caption><image:title>reconlogofullonwhite</image:title></image:image><lastmod>2022-01-31</lastmod></url></urlset>