<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd" xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://jon.glass/blogsabout/sharpening-the-acks/</loc>
<lastmod>2013-03-29T19:24:43+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/war-driving-with-a-raspberry-pi/</loc>
<lastmod>2013-07-08T08:41:51+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/useful-tshark-commands/</loc>
<lastmod>2013-07-10T06:55:14+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/sysmon-and-process-mapping/</loc>
<lastmod>2014-08-29T07:24:59+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/more-sysmonmaps-and-processmapper/</loc>
<lastmod>2014-09-12T07:24:37+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/finally-using-github/</loc>
<lastmod>2014-09-15T07:17:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/live-process-mapping-with-wmi/</loc>
<lastmod>2014-09-17T08:54:29+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/lfo-with-powershell/</loc>
<lastmod>2014-09-24T06:06:35+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/querying-sysmon-for-execution-times/</loc>
<lastmod>2014-09-25T23:28:50+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/reading-email-with-powershell/</loc>
<lastmod>2014-09-29T16:32:27+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/internet-headers-from-outlook-with-powershell/</loc>
<lastmod>2014-10-08T07:44:41+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/the-anatomy-of-a-zip-file/</loc>
<lastmod>2014-11-14T05:05:03+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/the-zip-seeking-missile/</loc>
<lastmod>2014-11-22T05:03:37+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/recovering-zip-files-with-zlib/</loc>
<lastmod>2014-11-25T21:33:47+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/parsing-webcachev01-dat-part-1/</loc>
<lastmod>2014-12-10T14:48:36+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/parsing-webcachev01-dat-part-2/</loc>
<lastmod>2014-12-10T22:02:37+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/parsing-webcachev01-dat-part-3/</loc>
<lastmod>2014-12-15T04:04:53+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/stupid-vbs-tricks/</loc>
<lastmod>2014-12-28T20:19:03+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/sysmon-2-0-part-1/</loc>
<lastmod>2015-01-21T16:09:07+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/sysmon-2-0-part-2/</loc>
<lastmod>2015-02-03T03:33:48+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/a-magic-trick-in-the-windows-10-boot-process/</loc>
<lastmod>2015-02-17T03:03:50+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/a-few-sysmonmaps-for-reference/</loc>
<lastmod>2015-02-17T13:08:59+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/mass-undeleting-from-the-recycle-bin/</loc>
<lastmod>2015-02-20T16:03:47+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/useless-trivia-about-windows-process-ids/</loc>
<lastmod>2015-02-20T16:05:14+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/evidence-of-a-usb-transfer-cable/</loc>
<lastmod>2015-02-28T03:07:21+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/the-34-file-entries-on-a-brand-new-mft/</loc>
<lastmod>2015-03-03T02:51:08+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/wmic-commands-that-arent-yo-mommas/</loc>
<lastmod>2015-03-13T19:48:48+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/dridex-malware-part-1/</loc>
<lastmod>2015-03-20T15:11:48+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/dridex-malware-part-2/</loc>
<lastmod>2015-03-23T23:01:16+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/encrypting-huge-files-with-python/</loc>
<lastmod>2015-05-29T03:42:25+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/finally-parsing-webcachev01-dat/</loc>
<lastmod>2015-09-28T10:07:59+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/parsing-chrome-artifacts-with-python-part-1/</loc>
<lastmod>2015-10-09T03:03:41+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/parsing-chrome-artifacts-with-python-part-2/</loc>
<lastmod>2015-10-11T13:28:03+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/parsing-chrome-artifacts-with-python-part-3/</loc>
<lastmod>2015-10-25T23:55:08+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/what-windows-defender-does-when-it-quarantines-stuff/</loc>
<lastmod>2015-11-03T04:34:30+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/mastering-python-forensics-a-review/</loc>
<lastmod>2015-11-25T02:01:16+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/unxoring-a-rat/</loc>
<lastmod>2016-02-05T19:52:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/the-grep-before-christmas/</loc>
<lastmod>2016-12-27T20:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/dealing-with-users-gone-bad/</loc>
<lastmod>2017-02-03T19:52:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/setting-up-elk-on-a-macbook-part-1/</loc>
<lastmod>2017-03-07T00:52:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/setting-up-elk-on-a-macbook-part-2/</loc>
<lastmod>2017-03-11T20:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/tips/FullEventLogView/</loc>
<lastmod>2018-02-19T20:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/tips/ChangeBitlockerKeys/</loc>
<lastmod>2018-02-20T20:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/tips/LookForWindowsTimestamps/</loc>
<lastmod>2018-02-20T20:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/adfirwmc/Ch0/</loc>
<lastmod>2018-03-01T20:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/adfirwmc/Ch1/</loc>
<lastmod>2018-03-02T20:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/adfirwmc/Ch2/</loc>
<lastmod>2018-03-03T20:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/adfirwmc/Ch3/</loc>
<lastmod>2018-03-04T20:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/adfirwmc/Ch4/</loc>
<lastmod>2018-03-05T20:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/hacking-brbbot/</loc>
<lastmod>2018-12-08T20:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/analyzing-the-fiesta-exploit-kit/</loc>
<lastmod>2018-12-26T20:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/zero-to-hero-with-cyberchef/</loc>
<lastmod>2019-06-23T20:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/decoding-autoit-xor-obfuscation/</loc>
<lastmod>2020-03-15T17:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/bottricker/</loc>
<lastmod>2020-03-24T17:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/multifactor-access-to-the-mde-api/</loc>
<lastmod>2022-03-06T17:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/building-an-mde-api-wrapper/</loc>
<lastmod>2022-03-09T17:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/using-the-api-for-live-response/</loc>
<lastmod>2022-03-10T17:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/running-arbitrary-commands-with-live-response/</loc>
<lastmod>2022-03-13T17:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/kernel-level-access-with-live-response/</loc>
<lastmod>2022-03-13T17:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/what-chatgpt-wrote/</loc>
<lastmod>2023-02-27T17:33:28+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/spoke/</loc>
<lastmod>2026-10-26T14:00:00+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/blogsabout/reverse-engineering-a-fitrx-ems-app/</loc>
<lastmod>2026-10-26T15:00:00+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/adfirwmc/Ch5-1/</loc>
<lastmod>2026-10-28T12:00:00+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/ADFIRWMC/Whole%20Course/</loc>
</url>
<url>
<loc>https://jon.glass/</loc>
</url>
<url>
<loc>https://jon.glass/theme-setup/</loc>
</url>
<url>
<loc>https://jon.glass/adfirwmc/</loc>
</url>
<url>
<loc>https://jon.glass/tags/</loc>
</url>
<url>
<loc>https://jon.glass/about/</loc>
</url>
<url>
<loc>https://jon.glass/blogsabout/</loc>
</url>
<url>
<loc>https://jon.glass/tips/</loc>
</url>
<url>
<loc>https://jon.glass/huddle/</loc>
<lastmod>2026-10-28T14:44:08+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/images/2604052_PM_EN.pdf</loc>
<lastmod>2026-10-28T14:44:08+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/images/Win10-Sysmonmap.html</loc>
<lastmod>2026-10-28T14:44:08+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/images/Win7SysmonMap.html</loc>
<lastmod>2026-10-28T14:44:08+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/images/Win8SysmonMap.html</loc>
<lastmod>2026-10-28T14:44:08+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/images/Windows10-sysmonmap.html</loc>
<lastmod>2026-10-28T14:44:08+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/images/sysmonmap-Win10x64.html</loc>
<lastmod>2026-10-28T14:44:08+00:00</lastmod>
</url>
<url>
<loc>https://jon.glass/spoke/</loc>
<lastmod>2026-10-28T14:44:08+00:00</lastmod>
</url>
</urlset>
