<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://ridgelinecyber.com/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/short-courses/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/pricing/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/learning-paths/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/incident-lab/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/forensic-lab/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/tools/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/products/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/about/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/endpoint-security/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/m365-security-architecture/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/entra-id-security/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/identity-access-management/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/m365-security-operations/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/detection-engineering/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/mastering-kql/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/threat-hunting-m365/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/security-automation/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/incident-triage-first-response/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/practical-ir/</loc>
    <lastmod>2026-06-04</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/windows-forensic-artifacts/</loc>
    <lastmod>2026-06-04</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/soc-operations/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/admin-to-defender/</loc>
    <lastmod>2026-06-03</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/claude-essentials/</loc>
    <lastmod>2026-05-29</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/offensive-security-for-defenders/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/kape-ez-tools/</loc>
    <lastmod>2026-06-03</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/velociraptor-endpoint-investigation/</loc>
    <lastmod>2026-06-03</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/powershell-security-operations/</loc>
    <lastmod>2026-06-03</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/yara-rule-writing/</loc>
    <lastmod>2026-06-03</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/email-authentication/</loc>
    <lastmod>2026-05-29</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/sigma-rules/</loc>
    <lastmod>2026-06-02</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/malware-triage/</loc>
    <lastmod>2026-05-29</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/conditional-access-design/</loc>
    <lastmod>2026-05-29</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/git-for-security-teams/</loc>
    <lastmod>2026-05-29</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/wireshark-security-analysts/</loc>
    <lastmod>2026-05-29</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/log-analysis-regex/</loc>
    <lastmod>2026-05-29</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/courses/sysmon-configuration/</loc>
    <lastmod>2026-06-02</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/ad00-m365-security-landscape/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/ad01-securing-identities/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/ad02-protecting-email/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/ad03-managing-devices/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/ad04-data-protection/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/ad05-security-monitoring/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/ad06-basic-incident-response/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/ad07-security-governance/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/c00-course-introduction/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/c01-ai-security-landscape/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/ce00-claude-essentials/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/ce01-security-it-track/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/ce02-references/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/g00-course-introduction/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/g01-what-grc-is/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/lx00-linux-ir-landscape/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/lx01-evidence-collection/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/mf00-memory-forensics-landscape/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/mf01-memory-acquisition/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/nf00-network-evidence-landscape/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/nf01-building-your-nsm-sensor/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/free/sa00-the-automation-problem/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/04-defender-for-cloud/02-enabling-azure-resources/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/04-defender-for-cloud/03-hybrid-multi-cloud/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/04-defender-for-cloud/05-defender-for-servers/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/05-security-copilot/05-embedded-sentinel/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/07-sentinel-workspace/01-sentinel-siem-soar/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/de03-initial-access/02-phishing-beyond-safe-links/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/de03-initial-access/03-sender-reputation/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/de03-initial-access/05-token-theft-session-hijacking/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/de03-initial-access/08-valid-account-compromise/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/de04-credential-identity/05-token-replay-beyond-aitm/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/ei03-conditional-access-architecture/06-device-compliance/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/ei03-conditional-access-architecture/07-grant-controls/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/ei03-conditional-access-architecture/09-zero-trust-framework/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/ei03-conditional-access-architecture/12-ca-as-code/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/ei04-conditional-access-attacks/02-blocking-legacy-auth/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/es08-detection-engineering-for-endpoints/02-mde-advanced-hunting-tables/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/es08-detection-engineering-for-endpoints/03-building-effective-detection-kql/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/es09-kql-endpoint-hunting/02-deviceprocessevents-deep-dive/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/es09-kql-endpoint-hunting/05-devicelogonevents-deviceimageloadevents/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/es09-kql-endpoint-hunting/09-parent-child-process-anomalies/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/iam04-authentication-methods/01-authentication-landscape/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/iam04-authentication-methods/02-mfa-registration/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/iam04-authentication-methods/05-certificate-based-auth/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/iam04-authentication-methods/07-authentication-strength/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/iam05-conditional-access/04-guest-external-identities/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/ir06-containment-eradication/02-emergency-ca-token-revocation/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/ir06-containment-eradication/03-password-reset-auth-remediation/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/ir07-threat-response-playbooks/01-m365-attacks-overview/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/ir07-threat-response-playbooks/02-initial-access-phishing-aitm/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/ir07-threat-response-playbooks/04-execution-persistence-privesc/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/k06-advanced-filtering-and-pattern-matching/01-mv-expand-mv-apply/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/k06-advanced-filtering-and-pattern-matching/02-advanced-regex/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/k06-advanced-filtering-and-pattern-matching/03-let-functions/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/k06-advanced-filtering-and-pattern-matching/05-ip-range-functions/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/k07-time-series-analysis-and-anomaly-detection/01-make-series-fundamentals/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/msa03-conditional-access-architecture/01-ca-policy-engine/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/msa03-conditional-access-architecture/02-policy-design-methodology/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/msa03-conditional-access-architecture/03-baseline-policy-set/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/msa03-conditional-access-architecture/05-device-policies/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/msa03-conditional-access-architecture/07-named-locations/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/od02-offensive-infrastructure/01-infrastructure-as-an-operational-system/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/od02-offensive-infrastructure/02-command-and-control-frameworks/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/od02-offensive-infrastructure/04-domain-and-certificate-tradecraft/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/od02-offensive-infrastructure/08-infrastructure-rotation/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/od02-offensive-infrastructure/10-exfiltration-channels/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/pt02-initial-access/01-t1566-002/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/pt02-initial-access/02-t1566-001/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/pt02-initial-access/05-t1133/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/pt03-execution/01-t1059-001/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/pt03-execution/02-t1059-003/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/s04-kql-detection-email-collaboration/02-detection-inbox-forwarding-external/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/s04-kql-detection-email-collaboration/03-detection-inbox-rule-hiding-activity/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/s04-kql-detection-email-collaboration/05-detection-bulk-mailbox-access/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/s05-kql-detection-endpoint-lateral/05-detection-persistence-mechanisms/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/s07-investigation-playbook-framework/01-playbook-architecture/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/sa03-evidence-auto-collection/02-cloud-evidence-auto-collection/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/sa03-evidence-auto-collection/03-endpoint-evidence-auto-collection/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/sa03-evidence-auto-collection/04-identity-evidence-auto-collection/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/sa03-evidence-auto-collection/08-collection-playbook-for-endpoint-incidents/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/sa04-notification-escalation-automation/04-on-call-escalation-automation/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/sa05-auto-containment-identity/02-session-revocation-automation/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/th04-hunting-identity-compromise/01-building-authentication-baseline/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/th04-hunting-identity-compromise/02-hunting-aitm-session-hijacking/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/th04-hunting-identity-compromise/03-hunting-credential-stuffing/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/th04-hunting-identity-compromise/04-hunting-password-spray/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/th04-hunting-identity-compromise/05-hunting-mfa-fatigue/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/tr03-windows-triage-endpoints-ad/03-active-directory-alert-triage/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/tr03-windows-triage-endpoints-ad/05-windows-persistence-mechanisms/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/tr06-multi-environment-attack-triage/01-when-attacks-cross-boundaries/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/tr06-multi-environment-attack-triage/03-cross-environment-timeline/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/tr07-severity-classification-escalation/02-escalation-decision-matrix/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/wf02-what-ran-on-this-system/02-prefetch/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/wf02-what-ran-on-this-system/03-amcache/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/wf02-what-ran-on-this-system/05-process-creation-events/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/wf03-who-was-here/01-account-forensics/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/training/modules/paid/wf03-who-was-here/02-authentication-session-analysis/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/kql-signinlogs-10-queries-soc-analyst/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/silent-detection-rules-validation/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/dbir-2026-vulnerability-exploitation-what-to-do/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/credential-access-detection-beyond-lsass/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/is-your-detection-program-effective/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/kql-sign-in-log-analysis-resulttype/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/native-windows-forensic-commands-incident-response/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/service-principal-ownership-attack-path/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/ridgeguard-launch-prove-security-program/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/soc-2-readiness-without-grc-platform/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/customer-asked-about-security-program/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/vanguard-open-source-dfir-toolkit/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/m365-identity-compromise-investigation/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/m365-kql-threat-hunts-soc/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/security-questionnaire-process-losing-deals/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/bec-investigation-first-15-minutes/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/ca-registered-device-bypass-investigation/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/security-operation-or-compliance-operation/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/ai-wont-take-your-security-job/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/detecting-lateral-movement-ssh-agent-forwarding/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/m365-detections-microsoft-doesnt-give-you/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/are-current-socs-adequate-for-threats-faced/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/five-auditd-rules-kernel-module-rootkits/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://ridgelinecyber.com/blog/is-m365-security-all-its-hyped-up-to-be/</loc>
    <lastmod>2026-06-05</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.7</priority>
  </url>
</urlset>