<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://threatintelligencelab.com/</loc>
    <changefreq>daily</changefreq>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/resources</loc>
    <lastmod>2026-08-17</lastmod>
    <changefreq>weekly</changefreq>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-analysis-tradecraft</loc>
    <lastmod>2026-08-16</lastmod>
    <changefreq>weekly</changefreq>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-careers-industry</loc>
    <lastmod>2026-08-16</lastmod>
    <changefreq>weekly</changefreq>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-collection-sources</loc>
    <lastmod>2026-08-16</lastmod>
    <changefreq>weekly</changefreq>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-fundamentals</loc>
    <lastmod>2026-08-16</lastmod>
    <changefreq>weekly</changefreq>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-program-management</loc>
    <lastmod>2026-08-16</lastmod>
    <changefreq>weekly</changefreq>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-sharing-standards</loc>
    <lastmod>2026-08-16</lastmod>
    <changefreq>weekly</changefreq>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-technology-platforms</loc>
    <lastmod>2026-08-16</lastmod>
    <changefreq>weekly</changefreq>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/microsoft-purview</loc>
    <lastmod>2026-08-17</lastmod>
    <changefreq>weekly</changefreq>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/strategic-cti</loc>
    <lastmod>2026-08-16</lastmod>
    <changefreq>weekly</changefreq>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/vulnerability-intelligence</loc>
    <lastmod>2026-08-16</lastmod>
    <changefreq>weekly</changefreq>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-program-management/how-to-build-a-cyber-threat-intelligence-program-team-process-technology-and-metrics</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-careers-industry/how-to-get-your-first-cyber-threat-intelligence-job-a-practical-roadmap</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-collection-sources/how-to-verify-a-cyber-threat-claim-before-you-act-or-share-it</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-careers-industry/cyber-threat-intelligence-career-paths-from-analyst-to-cti-leadership</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-analysis-tradecraft/threat-infrastructure-analysis-how-far-should-you-pivot</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-analysis-tradecraft/cyber-threat-attribution-evidence-confidence-and-common-pitfalls</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-collection-sources/how-to-evaluate-a-commercial-threat-intelligence-feed-before-you-buy</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-careers-industry/cyber-threat-intelligence-interview-guide-how-to-prepare-and-evaluate-the-role</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-fundamentals/is-this-threat-relevant-to-us-a-practical-cti-relevance-test</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-sharing-standards/stix-vs-taxii-what-each-standard-does-and-when-you-need-it</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/strategic-cti/geopolitical-cyber-risk-how-to-decide-what-matters-to-your-organization</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-fundamentals/threat-intelligence-vs-threat-hunting-which-capability-solves-which-problem</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-program-management/cti-metrics-that-show-whether-intelligence-changed-a-decision</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-analysis-tradecraft/how-to-reconstruct-a-cyber-campaign-timeline-from-fragmented-evidence</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/strategic-cti/how-to-build-cyber-threat-scenarios-and-warning-indicators</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-technology-platforms/cti-integration-architecture-connecting-tip-siem-soar-and-edr</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-sharing-standards/threat-intelligence-sharing-what-to-share-with-whom-and-how</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-technology-platforms/threat-intelligence-platforms-what-they-do-when-you-need-one-and-how-to-choose</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-analysis-tradecraft/how-to-use-analysis-of-competing-hypotheses-in-cyber-threat-intelligence</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-careers-industry/how-to-evaluate-a-cti-job-offer-and-the-team-behind-it</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/vulnerability-intelligence/vulnerability-intelligence-how-to-prioritize-what-to-fix-first</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-analysis-tradecraft/victimology-in-cti-how-to-decide-who-is-most-likely-to-be-targeted</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-analysis-tradecraft/diamond-model-vs-cyber-kill-chain-vs-mitre-attck-which-framework-fits</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-technology-platforms/how-to-build-a-cti-data-pipeline-with-provenance-and-quality-controls</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-careers-industry/how-to-build-a-cti-portfolio-project-that-demonstrates-real-skill</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-program-management/how-to-build-a-business-case-and-budget-for-cyber-threat-intelligence</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/strategic-cti/strategic-cyber-threat-intelligence-how-to-brief-leaders-and-support-business-decisions</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/vulnerability-intelligence/cvss-vs-epss-vs-kev-which-signal-should-drive-vulnerability-priority</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/strategic-cti/how-to-build-a-threat-landscape-assessment-for-a-business-decision</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-program-management/managed-cti-services-when-to-outsource-and-how-to-choose</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-collection-sources/dark-web-monitoring-when-it-helps-what-it-misses-and-how-to-decide</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-technology-platforms/threat-intelligence-knowledge-graphs-when-they-help-and-how-to-design-one</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/vulnerability-intelligence/zero-day-response-how-to-decide-what-to-do-before-a-patch-exists</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-sharing-standards/tlp-2-0-in-practice-which-sharing-label-should-you-use</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-careers-industry/which-cyber-threat-intelligence-certification-should-you-choose</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-sharing-standards/should-you-join-an-isac-isao-or-threat-sharing-community</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/vulnerability-intelligence/exploit-proof-of-concept-how-to-decide-whether-it-changes-priority</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-fundamentals/the-cyber-threat-intelligence-lifecycle-from-requirements-to-feedback</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-careers-industry/working-in-cyber-threat-intelligence-roles-skills-and-what-its-really-like</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/strategic-cti/what-should-a-board-level-cyber-threat-intelligence-report-include</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-fundamentals/threat-intelligence-vs-incident-response-where-one-ends-and-the-other-begins</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-analysis-tradecraft/cognitive-bias-in-cti-a-practical-review-checklist-before-you-publish</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-collection-sources/how-to-build-an-osint-collection-plan-for-cyber-threat-intelligence</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-fundamentals/likelihood-confidence-and-risk-in-cti-how-to-read-the-judgment-correctly</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-analysis-tradecraft/indicators-of-compromise-and-ttps-turning-threat-evidence-into-detection</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-program-management/how-to-design-a-cti-service-catalog-people-can-actually-use</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-fundamentals/what-is-cyber-threat-intelligence-definition-process-types-and-use-cases</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/vulnerability-intelligence/patch-mitigate-or-accept-how-to-choose-a-vulnerability-response</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-program-management/who-should-you-hire-first-for-a-cyber-threat-intelligence-team</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-fundamentals/tactical-operational-or-strategic-cti-which-type-does-your-decision-need</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-program-management/centralized-embedded-or-hybrid-cti-which-team-model-fits</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-technology-platforms/ai-assisted-cti-safe-workflows-for-research-analysis-and-writing</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-collection-sources/passive-dns-and-whois-in-cti-what-can-you-safely-conclude</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-collection-sources/regional-and-language-coverage-in-cti-how-to-find-your-blind-spots</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-analysis-tradecraft/malware-intelligence-which-findings-should-change-a-defensive-decision</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/vulnerability-intelligence/third-party-vulnerability-exposure-how-to-decide-which-supplier-risk-is-urgent</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-careers-industry/how-to-move-from-a-soc-role-into-cyber-threat-intelligence</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-technology-platforms/what-to-automate-in-ctiand-what-to-keep-human</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-fundamentals/how-to-write-an-intelligence-requirement-that-produces-a-useful-answer</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/strategic-cti/cti-for-ma-due-diligence-questions-to-ask-before-and-after-the-deal</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-sharing-standards/how-to-design-a-threat-intelligence-sharing-agreement</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-collection-sources/cyber-threat-intelligence-sources-collection-evaluation-and-corroboration</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-analysis-tradecraft/how-to-build-a-threat-actor-profile-without-overclaiming</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/cti-analysis-tradecraft/how-to-write-a-cyber-threat-intelligence-report-that-supports-decisions</loc>
    <lastmod>2026-08-16</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/microsoft-purview/microsoft-purview-sensitivity-labels-design-deployment-and-best-practices</loc>
    <lastmod>2026-08-17</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/microsoft-purview/microsoft-purview-data-loss-prevention-policy-design-deployment-and-best-practices</loc>
    <lastmod>2026-08-17</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/microsoft-purview/microsoft-purview-encryption-readiness-risks-pre-enforcement-checks-auto-labeling-and-trainable-classifiers</loc>
    <lastmod>2026-08-17</lastmod>
  </url>
  <url>
    <loc>https://threatintelligencelab.com/microsoft-purview/microsoft-purview-data-map-and-data-sources-architecture-scanning-classification-and-best-practices</loc>
    <lastmod>2026-08-17</lastmod>
  </url>
</urlset>