<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://signalhunt.dev</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules</loc>
</url>
<url>
<loc>https://signalhunt.dev/incidents</loc>
<lastmod>2026-09-07</lastmod>
</url>
<url>
<loc>https://signalhunt.dev/articles</loc>
<lastmod>2026-09-07</lastmod>
</url>
<url>
<loc>https://signalhunt.dev/simulator</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/aws-3001</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/aws-3002</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/email-8001</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/email-8002</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/email-8003</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/email-8004</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/email-8005</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/email-8006</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/fw-7001</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/fw-7002</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/fw-7003</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/fw-7004</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/fw-7005</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/id-9001</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/id-9002</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/lin-2001</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/lin-2002</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/rp-7001</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/rp-7002</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/rp-7003</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/rp-7004</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/rp-7005</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/sys-4001</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/sys-4002</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/sys-4003</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/sys-4004</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/sys-4005</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/sys-4006</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/sys-4007</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/waf-5001</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/waf-5002</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/waf-5003</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/waf-5004</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/waf-5005</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/web-6001</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/web-6002</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/web-6003</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/web-6004</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/web-6005</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/webproxy-9001</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/webproxy-9002</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/webproxy-9003</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/webproxy-9004</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/webproxy-9005</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/win-1001</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/win-1002</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/win-1003</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/win-1004</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/win-1005</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/win-1006</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/win-1007</loc>
</url>
<url>
<loc>https://signalhunt.dev/rules/win-1008</loc>
</url>
<url>
<loc>https://signalhunt.dev/incidents/hybrid-breach-ssh-to-aws-root</loc>
<lastmod>2026-09-07</lastmod>
</url>
<url>
<loc>https://signalhunt.dev/incidents/phishing-account-takeover</loc>
<lastmod>2026-04-02</lastmod>
</url>
<url>
<loc>https://signalhunt.dev/incidents/activemq-lockbit-ransomware</loc>
<lastmod>2026-02-27</lastmod>
</url>
<url>
<loc>https://signalhunt.dev/articles/rules-that-know-what-they-need</loc>
<lastmod>2026-09-07</lastmod>
</url>
</urlset>
