<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
  xmlns:xhtml="http://www.w3.org/1999/xhtml">
  <url>
    <loc>https://4n6beat.com/</loc>
    <lastmod>2025-12-06T23:07:21+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/</loc>
    <lastmod>2025-12-06T23:07:21+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/defensible-detection-tuning-with-kibana-cases-a-dfir-how-to/</loc>
    <lastmod>2025-12-06T23:07:21+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/detection-engineering/</loc>
    <lastmod>2025-12-06T23:07:21+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/digital-forensics/</loc>
    <lastmod>2025-12-06T23:07:21+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/elastic-security/</loc>
    <lastmod>2025-12-06T23:07:21+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/kibana-cases/</loc>
    <lastmod>2025-12-06T23:07:21+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/sigma/</loc>
    <lastmod>2025-12-06T23:07:21+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/</loc>
    <lastmod>2025-12-06T23:07:21+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/autoit/</loc>
    <lastmod>2025-12-05T17:05:18+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/autoit3-droppers-with-fileinstall-callwindowproc-an-ir-playbook/</loc>
    <lastmod>2025-12-05T17:05:18+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/incident-response/</loc>
    <lastmod>2025-12-05T17:05:18+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/shellcode-execution/</loc>
    <lastmod>2025-12-05T17:05:18+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/tradecraft/</loc>
    <lastmod>2025-12-05T17:05:18+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/windows/</loc>
    <lastmod>2025-12-05T17:05:18+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/acquisition-workflow/</loc>
    <lastmod>2025-12-04T10:06:12+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/disk-imaging/</loc>
    <lastmod>2025-12-04T10:06:12+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/mobile-forensics/</loc>
    <lastmod>2025-12-04T10:06:12+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/tooling/</loc>
    <lastmod>2025-12-04T10:06:12+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/tune-your-lab-sops-oxygen-detective-v18-1-chain-flows-and-atola-taskforce-2025-11-zfs-ldap-streamline-acquisition/</loc>
    <lastmod>2025-12-04T10:06:12+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/browser-extensions/</loc>
    <lastmod>2025-12-03T08:04:26+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/chromium/</loc>
    <lastmod>2025-12-03T08:04:26+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/dfir/</loc>
    <lastmod>2025-12-03T08:04:26+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/ir-playbook-hunting-and-evicting-the-sleeper-chrome-edge-extensions-shadypanda-4-3m-installs/</loc>
    <lastmod>2025-12-03T08:04:26+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/threat-hunting/</loc>
    <lastmod>2025-12-03T08:04:26+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/android-december-2025-security-bulletin-dfir-impact-and-fleet-actions/</loc>
    <lastmod>2025-12-02T05:07:20+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/android-security/</loc>
    <lastmod>2025-12-02T05:07:20+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/aosp/</loc>
    <lastmod>2025-12-02T05:07:20+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/patch-management/</loc>
    <lastmod>2025-12-02T05:07:20+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/ics-security/</loc>
    <lastmod>2025-12-01T01:04:35+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/openplc-scadabr-xss-cve-2021-26829-added-to-cisa-kev-what-dfir-teams-should-pull-first/</loc>
    <lastmod>2025-12-01T01:04:35+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/scadabr/</loc>
    <lastmod>2025-12-01T01:04:35+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/tomcat-logs/</loc>
    <lastmod>2025-12-01T01:04:35+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/xss/</loc>
    <lastmod>2025-12-01T01:04:35+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/ai-pentesting/</loc>
    <lastmod>2025-11-29T22:04:35+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/intune/</loc>
    <lastmod>2025-11-29T22:04:35+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/ir-ready-patching-and-ai-pentesting-what-november-s-product-updates-mean-for-responders/</loc>
    <lastmod>2025-11-29T22:04:35+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/vulnerability-prioritization/</loc>
    <lastmod>2025-11-29T22:04:35+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/bot-mitigation/</loc>
    <lastmod>2025-11-28T15:06:21+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/credential-stuffing/</loc>
    <lastmod>2025-11-28T15:06:21+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/holiday-ir-playbook-web-skimming-and-credential-stuffing-at-retail-scale/</loc>
    <lastmod>2025-11-28T15:06:21+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/pci-dss/</loc>
    <lastmod>2025-11-28T15:06:21+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/retail-security/</loc>
    <lastmod>2025-11-28T15:06:21+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/web-skimming/</loc>
    <lastmod>2025-11-28T15:06:21+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/devsecops/</loc>
    <lastmod>2025-11-27T11:06:15+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/malware/</loc>
    <lastmod>2025-11-27T11:06:15+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/npm/</loc>
    <lastmod>2025-11-27T11:06:15+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/shai-hulud-2-0-an-ir-playbook-for-the-npm-preinstall-worm/</loc>
    <lastmod>2025-11-27T11:06:15+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/supply-chain/</loc>
    <lastmod>2025-11-27T11:06:15+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/pcap-triage/</loc>
    <lastmod>2025-11-26T06:05:47+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/tooling-hardening/</loc>
    <lastmod>2025-11-26T06:05:47+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/vulnerability-management/</loc>
    <lastmod>2025-11-26T06:05:47+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/wireshark/</loc>
    <lastmod>2025-11-26T06:05:47+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/wireshark-4-6-1-patch-your-dfir-workstations-two-dissector-crash-bugs-fixed/</loc>
    <lastmod>2025-11-26T06:05:47+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/bitlocker/</loc>
    <lastmod>2025-11-24T23:05:43+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/evidence-containers/</loc>
    <lastmod>2025-11-24T23:05:43+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/ftk-imager-pro-adds-bitlocker-decrypted-imaging-and-ios-advanced-logical-a-dfir-how-to/</loc>
    <lastmod>2025-11-24T23:05:43+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/ftk-imager/</loc>
    <lastmod>2025-11-24T23:05:43+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/ios-acquisition/</loc>
    <lastmod>2025-11-24T23:05:43+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/cli-automation/</loc>
    <lastmod>2025-11-23T16:05:11+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/rule-hygiene/</loc>
    <lastmod>2025-11-23T16:05:11+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/yara-x/</loc>
    <lastmod>2025-11-23T16:05:11+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/yara-x-1-10-0-using-yr-fix-warnings-to-auto-correct-brittle-rules/</loc>
    <lastmod>2025-11-23T16:05:11+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/2fa/</loc>
    <lastmod>2025-11-20T00:11:12+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/access-tokens/</loc>
    <lastmod>2025-11-20T00:11:12+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/ci-cd/</loc>
    <lastmod>2025-11-20T00:11:12+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/npm-classic-tokens-are-over-ir-guidance-for-revocations-2fa-and-short-lived-credentials/</loc>
    <lastmod>2025-11-20T00:11:12+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/supply-chain-security/</loc>
    <lastmod>2025-11-20T00:11:12+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/ai-powered-scam-assembly-lines-what-dfir-teams-should-hunt-and-how-to-respond/</loc>
    <lastmod>2025-11-18T22:03:35+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/deepfakes/</loc>
    <lastmod>2025-11-18T22:03:35+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/generative-ai/</loc>
    <lastmod>2025-11-18T22:03:35+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/phishing/</loc>
    <lastmod>2025-11-18T22:03:35+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/short-lived-domains/</loc>
    <lastmod>2025-11-18T22:03:35+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/clickfix/</loc>
    <lastmod>2025-11-18T21:05:14+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/kongtuke/</loc>
    <lastmod>2025-11-18T21:05:14+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/kongtuke-tag-124-fake-captcha-clickfix-chain-drops-python-payload-via-powershell/</loc>
    <lastmod>2025-11-18T21:05:14+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/powershell/</loc>
    <lastmod>2025-11-18T21:05:14+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/scheduled-tasks/</loc>
    <lastmod>2025-11-18T21:05:14+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/authentication-bypass/</loc>
    <lastmod>2025-11-17T18:10:21+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/fortinet-fortiweb/</loc>
    <lastmod>2025-11-17T18:10:21+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/fortiweb-cve-2025-64446-is-being-mass-exploited-hunt-for-admin-impersonation-and-clickfix-over-finger-exe/</loc>
    <lastmod>2025-11-17T18:10:21+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/network-detection/</loc>
    <lastmod>2025-11-17T18:10:21+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/clickfix-pivots-to-finger-exe-how-to-spot-and-stop-tcp-79-script-fetches/</loc>
    <lastmod>2025-11-16T10:04:05+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/lolbins/</loc>
    <lastmod>2025-11-16T10:04:05+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/network-egress/</loc>
    <lastmod>2025-11-16T10:04:05+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/cve-2025-64446/</loc>
    <lastmod>2025-11-15T05:04:57+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/fortiweb/</loc>
    <lastmod>2025-11-15T05:04:57+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/fortiweb-cve-2025-64446-path-traversal-cgi-impersonation-yields-admin-on-box/</loc>
    <lastmod>2025-11-15T05:04:57+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/path-traversal/</loc>
    <lastmod>2025-11-15T05:04:57+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/esxi/</loc>
    <lastmod>2025-11-14T02:05:28+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/kraken-ransomware-adds-cpu-io-benchmarking-what-to-hunt-before-the-encryptor-runs/</loc>
    <lastmod>2025-11-14T02:05:28+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/linux-forensics/</loc>
    <lastmod>2025-11-14T02:05:28+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/ransomware/</loc>
    <lastmod>2025-11-14T02:05:28+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/windows-forensics/</loc>
    <lastmod>2025-11-14T02:05:28+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/cve-2025-62215-windows-kernel-lpe-zero-day-in-november-patch-tuesday-what-dfir-should-collect-and-detect/</loc>
    <lastmod>2025-11-12T21:06:45+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/patch-tuesday/</loc>
    <lastmod>2025-11-12T21:06:45+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/privilege-escalation/</loc>
    <lastmod>2025-11-12T21:06:45+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/windows-kernel/</loc>
    <lastmod>2025-11-12T21:06:45+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/android/</loc>
    <lastmod>2025-11-11T15:05:53+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/apt37/</loc>
    <lastmod>2025-11-11T15:05:53+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/apt37-konni-abuse-google-find-hub-to-factory-reset-androids-mid-intrusion/</loc>
    <lastmod>2025-11-11T15:05:53+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/find-hub/</loc>
    <lastmod>2025-11-11T15:05:53+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/cpu-side-channel/</loc>
    <lastmod>2025-11-10T13:07:44+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/linux-kernel/</loc>
    <lastmod>2025-11-10T13:07:44+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/ubuntu/</loc>
    <lastmod>2025-11-10T13:07:44+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/ubuntu-s-usn-7860-5-patches-vmscape-cve-2025-40300-in-hwe-kernels-dfir-response-notes/</loc>
    <lastmod>2025-11-10T13:07:44+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/virtualization/</loc>
    <lastmod>2025-11-10T13:07:44+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/cloud-security/</loc>
    <lastmod>2025-11-09T10:06:34+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/ir-playbook-hunting-automated-probes-for-exposed-repositories-and-cloud-paths/</loc>
    <lastmod>2025-11-09T10:06:34+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/repository-exposure/</loc>
    <lastmod>2025-11-09T10:06:34+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/web-logs/</loc>
    <lastmod>2025-11-09T10:06:34+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/browser-security/</loc>
    <lastmod>2025-11-08T08:06:29+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/chromeos/</loc>
    <lastmod>2025-11-08T08:06:29+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/chromeos-lts-138-0-7204-296-what-dfir-teams-should-pull-check-and-enforce/</loc>
    <lastmod>2025-11-08T08:06:29+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/patching/</loc>
    <lastmod>2025-11-08T08:06:29+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/info-stealers/</loc>
    <lastmod>2025-11-07T02:05:30+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/ir-playbook-triaging-google-s-november-2025-fraud-advisory-ai-impersonation-job-lure-malware-and-review-extortion/</loc>
    <lastmod>2025-11-07T02:05:30+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/job-lure-campaigns/</loc>
    <lastmod>2025-11-07T02:05:30+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/malvertising/</loc>
    <lastmod>2025-11-07T02:05:30+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/mshta-clickfix/</loc>
    <lastmod>2025-11-07T02:05:30+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/review-extortion/</loc>
    <lastmod>2025-11-07T02:05:30+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/ir-playbook-rmm-abuse-in-trucking-logistics-plus-apple-and-android-patch-priorities-nov-2025/</loc>
    <lastmod>2025-11-05T21:06:52+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/rmm-abuse/</loc>
    <lastmod>2025-11-05T21:06:52+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/trucking-logistics/</loc>
    <lastmod>2025-11-05T21:06:52+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/apple-ecosystem/</loc>
    <lastmod>2025-11-04T16:04:42+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/apple-s-november-2025-patch-wave-110-fixes-across-ios-macos-watchos-tvos-visionos-safari-and-xcode/</loc>
    <lastmod>2025-11-04T16:04:42+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/ios/</loc>
    <lastmod>2025-11-04T16:04:42+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/macos/</loc>
    <lastmod>2025-11-04T16:04:42+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/tcc/</loc>
    <lastmod>2025-11-04T16:04:42+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/webkit/</loc>
    <lastmod>2025-11-04T16:04:42+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/developer-endpoints/</loc>
    <lastmod>2025-11-03T12:10:59+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/open-vsx-token-rotation-after-glassworm-an-ir-playbook-for-hunting-malicious-vs-code-compatible-extensions/</loc>
    <lastmod>2025-11-03T12:10:59+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/open-vsx/</loc>
    <lastmod>2025-11-03T12:10:59+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/vs-code/</loc>
    <lastmod>2025-11-03T12:10:59+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/anonymous-credentials-in-the-wild-how-to-collect-and-analyze-privacy-pass-arc-act-and-ohttp-evidence/</loc>
    <lastmod>2025-11-02T11:45:12+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/cloudflare/</loc>
    <lastmod>2025-11-02T11:45:12+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/oblivious-http/</loc>
    <lastmod>2025-11-02T11:45:12+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/privacy-pass/</loc>
    <lastmod>2025-11-02T11:45:12+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/copilot/</loc>
    <lastmod>2025-11-02T02:06:44+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/how-to/</loc>
    <lastmod>2025-11-02T02:06:44+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/jumplists/</loc>
    <lastmod>2025-11-02T02:06:44+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/userassist/</loc>
    <lastmod>2025-11-02T02:06:44+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/windows-11-insider-build-26220-7051-adds-ask-copilot-to-the-taskbar-what-to-baseline-for-dfir/</loc>
    <lastmod>2025-11-02T02:06:44+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/windows-11/</loc>
    <lastmod>2025-11-02T02:06:44+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/cloud-backup/</loc>
    <lastmod>2025-11-01T01:05:42+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/passkeys/</loc>
    <lastmod>2025-11-01T01:05:42+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/whatsapp/</loc>
    <lastmod>2025-11-01T01:05:42+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/whatsapp-moves-cloud-chat-backups-to-passkeys-here-s-what-changes-for-dfir/</loc>
    <lastmod>2025-11-01T01:05:42+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/airdata/</loc>
    <lastmod>2025-10-31T10:16:06+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/app-databases/</loc>
    <lastmod>2025-10-31T10:16:06+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/artifact-extraction/</loc>
    <lastmod>2025-10-31T10:16:06+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/dji-fly-app-forensics-extracting-and-analyzing-flight-logs-on-android-ios-and-dji-rc/</loc>
    <lastmod>2025-10-31T10:16:06+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/dji-assistant-2/</loc>
    <lastmod>2025-10-31T10:16:06+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/dji-fly/</loc>
    <lastmod>2025-10-31T10:16:06+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/event-logs/</loc>
    <lastmod>2025-10-31T10:16:06+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/flightreader/</loc>
    <lastmod>2025-10-31T10:16:06+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/geospatial-analysis/</loc>
    <lastmod>2025-10-31T10:16:06+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/phantomhelp/</loc>
    <lastmod>2025-10-31T10:16:06+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/timeline-analysis/</loc>
    <lastmod>2025-10-31T10:16:06+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/uav-forensics/</loc>
    <lastmod>2025-10-31T10:16:06+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/lockbit/</loc>
    <lastmod>2025-10-30T23:06:46+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/lockbit-5-0-and-magento-sessionreaper-dfir-notes-on-two-active-intrusion-patterns/</loc>
    <lastmod>2025-10-30T23:06:46+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/magento/</loc>
    <lastmod>2025-10-30T23:06:46+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/webshell/</loc>
    <lastmod>2025-10-30T23:06:46+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/android-artifacts/</loc>
    <lastmod>2025-10-30T12:33:57+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/database-analysis/</loc>
    <lastmod>2025-10-30T12:33:57+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/deconstructing-encrypted-communication-protocol-artifacts-signal-whatsapp/</loc>
    <lastmod>2025-10-30T12:33:57+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/ios-artifacts/</loc>
    <lastmod>2025-10-30T12:33:57+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/messaging-apps/</loc>
    <lastmod>2025-10-30T12:33:57+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/disk-cluster-analysis/</loc>
    <lastmod>2025-10-29T21:47:32+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/file-system-fragmentation-mapping-and-time-lining-non-traditional/</loc>
    <lastmod>2025-10-29T21:47:32+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/file-carving/</loc>
    <lastmod>2025-10-29T21:47:32+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/ntfs-forensics/</loc>
    <lastmod>2025-10-29T21:47:32+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/device-mapper/</loc>
    <lastmod>2025-10-29T21:08:45+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/hidden-filesystems/</loc>
    <lastmod>2025-10-29T21:08:45+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/plausible-deniability/</loc>
    <lastmod>2025-10-29T21:08:45+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/shufflecake-on-linux-what-deniable-multi-layer-volumes-mean-for-dfir/</loc>
    <lastmod>2025-10-29T21:08:45+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/authorization-bypass/</loc>
    <lastmod>2025-10-29T16:20:15+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/cisa-adds-two-more-delmia-apriso-flaws-to-kev-what-to-hunt-and-how-to-fix-fast/</loc>
    <lastmod>2025-10-29T16:20:15+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/code-injection/</loc>
    <lastmod>2025-10-29T16:20:15+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/delmia-apriso/</loc>
    <lastmod>2025-10-29T16:20:15+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/iis/</loc>
    <lastmod>2025-10-29T16:20:15+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/email-headers/</loc>
    <lastmod>2025-10-28T20:05:42+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/exchange-online/</loc>
    <lastmod>2025-10-28T20:05:42+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/phishing-subjects-with-invisible-characters-rfc-2047-soft-hyphen-evasion-and-how-to-hunt-it/</loc>
    <lastmod>2025-10-28T20:05:42+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/unicode-evasion/</loc>
    <lastmod>2025-10-28T20:05:42+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/agentic-ai/</loc>
    <lastmod>2025-10-27T20:24:52+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/c2pa/</loc>
    <lastmod>2025-10-27T20:24:52+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/deepfake-detection/</loc>
    <lastmod>2025-10-27T20:24:52+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/e-discovery/</loc>
    <lastmod>2025-10-27T20:24:52+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/genai-discovery-at-techno-west-2025-dfir-collection-artifacts-and-authenticity-workflows/</loc>
    <lastmod>2025-10-27T20:24:52+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/ollama/</loc>
    <lastmod>2025-10-27T20:24:52+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/msab-q3-2025-what-brutestorm-surge-and-suite-upgrades-mean-for-your-dfir-playbook/</loc>
    <lastmod>2025-10-27T19:54:15+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/rbac/</loc>
    <lastmod>2025-10-27T19:54:15+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/ufdr/</loc>
    <lastmod>2025-10-27T19:54:15+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/xamn/</loc>
    <lastmod>2025-10-27T19:54:15+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/xry/</loc>
    <lastmod>2025-10-27T19:54:15+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/active-directory/</loc>
    <lastmod>2025-10-27T13:42:53+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/automatic-attack-disruption/</loc>
    <lastmod>2025-10-27T13:42:53+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/defender-for-identity/</loc>
    <lastmod>2025-10-27T13:42:53+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/itdr/</loc>
    <lastmod>2025-10-27T13:42:53+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/microsoft-s-unified-defender-for-identity-sensor-is-ga-what-dfir-teams-should-change-today/</loc>
    <lastmod>2025-10-27T13:42:53+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/okta/</loc>
    <lastmod>2025-10-27T13:42:53+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/entra-id/</loc>
    <lastmod>2025-10-26T16:31:47+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/identity-first-intrusions-dominate-dfir-takeaways-from-microsoft-s-2025-digital-defense-report-and-the-oct-22-dfir-round-up/</loc>
    <lastmod>2025-10-26T16:31:47+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/microsoft-365-audit-log/</loc>
    <lastmod>2025-10-26T16:31:47+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/password-spray/</loc>
    <lastmod>2025-10-26T16:31:47+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/ransomware-pre-stage/</loc>
    <lastmod>2025-10-26T16:31:47+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/video-forensics/</loc>
    <lastmod>2025-10-26T16:31:47+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/dll-sideloading/</loc>
    <lastmod>2025-10-26T16:19:30+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/microsoft-graph/</loc>
    <lastmod>2025-10-26T16:19:30+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/operation-dreamjob-hits-europe-s-uav-supply-chain-what-dfir-teams-need-to-collect-hunt-and-block/</loc>
    <lastmod>2025-10-26T16:19:30+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/operation-dreamjob/</loc>
    <lastmod>2025-10-26T16:19:30+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/scoringmathtea/</loc>
    <lastmod>2025-10-26T16:19:30+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/uav/</loc>
    <lastmod>2025-10-26T16:19:30+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/dns-cache-poisoning/</loc>
    <lastmod>2025-10-25T16:27:49+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/stormcast-week-of-oct-24-2025-wsus-rce-magento-sessionreaper-exploitation-dns-cache-poisoning-fixes-and-an-android-termux-infostealer/</loc>
    <lastmod>2025-10-25T16:27:49+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/termux/</loc>
    <lastmod>2025-10-25T16:27:49+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/wsus/</loc>
    <lastmod>2025-10-25T16:27:49+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/dfir-field-guide-investigating-toolshell-driven-sharepoint-intrusions-talos-ir-q3-2025/</loc>
    <lastmod>2025-10-25T16:15:23+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/forensic-artifacts/</loc>
    <lastmod>2025-10-25T16:15:23+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/sharepoint/</loc>
    <lastmod>2025-10-25T16:15:23+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/toolshell/</loc>
    <lastmod>2025-10-25T16:15:23+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/mailbox-rules/</loc>
    <lastmod>2025-10-24T13:37:16+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/network-segmentation/</loc>
    <lastmod>2025-10-24T13:37:16+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/toolshell-led-sharepoint-intrusions-in-q3-2025-a-practitioner-s-playbook-for-forensics-detection-and-rapid-eviction/</loc>
    <lastmod>2025-10-24T13:37:16+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/gotohttp/</loc>
    <lastmod>2025-10-23T13:59:47+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/iis-module/</loc>
    <lastmod>2025-10-23T13:59:47+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/tollbooth-ref3927-leaked-asp-net-machine-keys-to-iis-code-exec-seo-cloaking-and-persistence/</loc>
    <lastmod>2025-10-23T13:59:47+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/viewstate/</loc>
    <lastmod>2025-10-23T13:59:47+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/bling-libra-s-eaas-pivot-and-the-slsh-playbook-shift-what-dfir-teams-should-do-now/</loc>
    <lastmod>2025-10-22T14:05:29+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/extortion-as-a-service/</loc>
    <lastmod>2025-10-22T14:05:29+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/insider-recruitment/</loc>
    <lastmod>2025-10-22T14:05:29+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/salesforce/</loc>
    <lastmod>2025-10-22T14:05:29+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/vmware-esxi/</loc>
    <lastmod>2025-10-22T14:05:29+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/adaptixc2/</loc>
    <lastmod>2025-10-20T16:23:45+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/posts/adaptixc2-via-npm-typosquat-dfir-playbook-for-https-proxy-utils/</loc>
    <lastmod>2025-10-20T16:23:45+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/tags/postinstall-scripts/</loc>
    <lastmod>2025-10-20T16:23:45+00:00</lastmod>
  </url><url>
    <loc>https://4n6beat.com/categories/</loc>
  </url><url>
    <loc>https://4n6beat.com/privacy-policy/</loc>
  </url>
</urlset>
