<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
    <url>
         <loc>https://runbooklabhq.com/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/about/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/about/follow/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/about/method/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/about/privacy/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/ai-agent-hardening/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/ai-agent-hardening/ag01-inventory-every-agent-in-the-tenant/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/ai-agent-hardening/ag02-require-user-authentication-for-copilot-studio-agents/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/ai-agent-hardening/ag03-block-http-requests-and-channels-you-don-t-use/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/ai-agent-hardening/ag04-watch-agent-creation-publishing-sharing-and/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/ai-agent-hardening/ag05-block-high-risk-agent-identities-with-conditional-access/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/conditional-access/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/conditional-access/ca01-create-two-emergency-access-accounts-exclude-them-from/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/conditional-access/ca02-name-policies-by-persona-and-create-every-new-policy-in/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/conditional-access/ca03-require-mfa-for-all-users-on-all-resources-with-an/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/conditional-access/ca04-block-legacy-authentication-for-all-users/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/conditional-access/ca05-require-phishing-resistant-mfa-for-administrators/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/copilot-readiness/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/copilot-readiness/cr01-find-the-overshared-sites-before-copilot-does/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/copilot-readiness/cr02-hide-the-riskiest-sites-from-copilot-while-you-fix-them/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/copilot-readiness/cr03-make-specific-people-view-the-default-sharing-link-and/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/copilot-readiness/cr04-remove-everyone-except-external-users-from-sensitive/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/copilot-readiness/cr05-confirm-copilot-interactions-are-audited-and-searchable/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/defender-endpoint-asr/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/defender-endpoint-asr/de01-check-every-device-is-onboarded-and-its-sensor-is-healthy/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/defender-endpoint-asr/de02-make-sure-defender-antivirus-is-active-with-cloud/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/defender-endpoint-asr/de03-turn-on-tamper-protection-tenant-wide/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/defender-endpoint-asr/de04-put-all-asr-rules-in-audit-and-block-the-three-standard/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/defender-endpoint-asr/de05-turn-on-network-protection-audit-then-block/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/exchange-online-protection/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/exchange-online-protection/ex01-turn-on-the-standard-preset-security-policy-for-all-users/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/exchange-online-protection/ex02-block-automatic-forwarding-to-external-addresses-and/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/exchange-online-protection/ex03-publish-spf-and-turn-on-dkim-signing-for-every-domain/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/exchange-online-protection/ex04-publish-dmarc-for-every-domain-and-move-it-from-p-none-to/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/exchange-online-protection/ex05-anti-malware-common-attachments-filter-on-with-reject/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/privileged-access-pim/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/privileged-access-pim/pa01-inventory-every-privileged-role-assignment-and-bring/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/privileged-access-pim/pa02-make-admin-roles-eligible-in-pim-no-permanent-active/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/privileged-access-pim/pa03-set-pim-role-settings-for-tier-0-roles-short-activation/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/privileged-access-pim/pa04-give-every-admin-a-separate-cloud-only-admin-account-not/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/controls/privileged-access-pim/pa05-run-a-quarterly-access-review-of-privileged-roles-and/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/guides/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/guides/deadlines/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/guides/defender-asr-rules-audit-to-block/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/guides/entra-sms-voice-mfa-retirement-passkeys/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/guides/exchange-online-smtp-auth-basic-auth-checklist/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/guides/microsoft-365-copilot-oversharing-checklist-jira/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/guides/microsoft-365-hardening-checklist-jira/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/kits/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/kits/ai-agent-hardening/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/kits/bundles/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/kits/conditional-access/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/kits/copilot-readiness/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/kits/defender-endpoint-asr/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/kits/exchange-online-protection/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/kits/m365-hardening/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/kits/privileged-access-pim/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/kits/sms-mfa-exit/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/news/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/news/copilot-studio-model-retirement-12-november/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/news/entra-passkey-first-mfa-method/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/news/teams-external-chat-file-sharing-default/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/news/entra-sspr-registered-methods-only/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/news/litellm-1-107-0-supply-chain-compromise/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/news/topic/ai-security/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/news/topic/identity/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/news/topic/microsoft-teams/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
    <url>
         <loc>https://runbooklabhq.com/news/topic/ai-agents/</loc>
         <lastmod>2026-10-29</lastmod>
    </url>
</urlset>