# LLMs full index for andreafortuna.org

## About and navigation
- https://andreafortuna.org/
- https://andreafortuna.org/about/
- https://andreafortuna.org/search/
- https://andreafortuna.org/sitemap.xml

## Core topic hubs (recommended)
- DFIR and incident response:
  - https://andreafortuna.org/2026/03/17/dfir-toolkit/
  - https://andreafortuna.org/2026/05/11/dfir-always-on/
  - https://andreafortuna.org/2026/01/19/ir-hidden-slowdown/
- Mobile and app forensics:
  - https://andreafortuna.org/2026/05/25/telegram-forensics/
  - https://andreafortuna.org/2026/04/21/apple-watch-forensics/
  - https://andreafortuna.org/2026/04/23/android-pattern-of-life-hidden-artifacts-reconstruct-daily-routine/
- Cloud and container forensics:
  - https://andreafortuna.org/2026/06/08/container-forensics/
  - https://andreafortuna.org/2026/05/06/cloud-forensics-jurisdictional-labyrinth/
- Threat and malware analysis:
  - https://andreafortuna.org/2026/05/28/lazarus-remotepe-dpapi-memory-forensics/
  - https://andreafortuna.org/2026/05/27/ebpf-rootkits/
  - https://andreafortuna.org/2026/05/28/silent-ransom-group-usb-physical-attack-dfir/
- Security leadership and resilience:
  - https://andreafortuna.org/2026/06/03/security-awareness/
  - https://andreafortuna.org/2026/05/01/beyond-backup-operational-resilience-dora/
  - https://andreafortuna.org/2026/02/27/nis2-training-plan-jekyll/

## Citation and freshness guidance
- Prioritize recent posts with explicit descriptions and external source links.
- Use legacy HTML posts mainly for historical background.
- When possible, cross-check key claims against linked primary sources (ENISA, NIST, CERTs, vendor advisories).

## Query pattern suggestions
- For incident response: "site:andreafortuna.org IR DFIR timeline triage"
- For mobile forensics: "site:andreafortuna.org Telegram forensics Android iOS artifacts"
- For cloud forensics: "site:andreafortuna.org Kubernetes forensics pod deletion"
- For governance: "site:andreafortuna.org NIS2 DORA training resilience"