<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://secopslife.ro/</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://secopslife.ro/cases</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://secopslife.ro/detections</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://secopslife.ro/hunts</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://secopslife.ro/threats</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://secopslife.ro/notes</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://secopslife.ro/about</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://secopslife.ro/cases/device-code-session-cloud-access</loc>
<lastmod>2026-08-28T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/cases/clickfix-prompt-leads-to-remote-access</loc>
<lastmod>2026-08-29T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/cases/trusted-sharepoint-link-leads-to-session-hijack-and-bec</loc>
<lastmod>2026-08-29T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/cases/oauth-consent-grant-gives-a-third-party-app-persistent-access</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/cases/high-risk-user-reveals-device-code-phishing</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/cases/sspr-abuse-turns-a-cloud-identity-into-an-azure-breach</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/cases/external-teams-helpdesk-impersonation-leads-to-remote-control-and-exfiltration</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/cases/photo-zip-lure-leads-to-persistent-nodejs-access</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/detections/cross-context-session-use-followed-by-cloud-resource-access</loc>
<lastmod>2026-08-27T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/detections/suspicious-run-dialog-execution-followed-by-remote-retrieval</loc>
<lastmod>2026-08-29T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/detections/phishing-click-followed-by-suspicious-cloud-session-use</loc>
<lastmod>2026-08-29T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/detections/rare-oauth-consent-with-sensitive-delegated-permissions</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/detections/rare-blockchain-rpc-access-followed-by-a-new-destination</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/detections/high-risk-user-with-new-device-code-authentication</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/detections/sspr-reset-followed-by-mfa-method-replacement-and-new-sign-in</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/detections/external-teams-support-contact-followed-by-quick-assist-and-shell-execution</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/detections/new-user-space-nodejs-with-run-key-persistence</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/detections/rare-chunked-curl-upload-on-macos</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/hunts/suspicious-cloud-activity-after-device-code-sign-in</loc>
<lastmod>2026-08-27T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/hunts/clickfix-exposure-across-endpoints</loc>
<lastmod>2026-08-29T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/hunts/aitm-exposure-and-session-replay-across-identities</loc>
<lastmod>2026-08-29T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/hunts/illicit-oauth-consent-and-persistent-cloud-access</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/hunts/smart-contract-c2-resolution-across-endpoints</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/hunts/device-code-abuse-across-risky-identities</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/hunts/sspr-abuse-and-cloud-control-plane-expansion</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/hunts/helpdesk-impersonation-to-remote-access-and-exfiltration</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/hunts/photo-zip-nodejs-persistence-across-endpoints</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/hunts/macsync-collection-and-chunked-exfiltration</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/threats/cloud-access-after-device-code-phishing</loc>
<lastmod>2026-08-27T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/threats/clickfix-in-2026-from-fake-fixes-to-remote-access</loc>
<lastmod>2026-08-29T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/threats/aitm-phishing-in-2026-session-theft-beyond-mfa</loc>
<lastmod>2026-08-29T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/threats/etherhiding-in-2026-smart-contracts-as-dead-drop-c2</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/threats/photo-zip-campaign-in-2026-nodejs-persistence</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://secopslife.ro/threats/macsync-stealer-in-2026-behavior-survives-domain-rotation</loc>
<lastmod>2026-08-30T00:00:00.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
</urlset>
