<?xml version="1.0" encoding="utf-8" standalone="yes"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml"><url><loc>https://attackthesoc.com/</loc><lastmod>2025-03-23T10:32:18-04:00</lastmod><changefreq>daily</changefreq><priority>0.5</priority></url><url><loc>https://attackthesoc.com/posts/</loc><lastmod>2025-03-23T10:32:18-04:00</lastmod><changefreq>daily</changefreq><priority>0.5</priority></url><url><loc>https://attackthesoc.com/posts/detect-cap-gaps/</loc><lastmod>2025-03-23T10:32:18-04:00</lastmod><changefreq>daily</changefreq><priority>0.5</priority></url><url><loc>https://attackthesoc.com/posts/ms-xdr-optimizing-the-soc/</loc><lastmod>2024-12-07T18:32:18-04:00</lastmod><changefreq>daily</changefreq><priority>0.5</priority></url><url><loc>https://attackthesoc.com/posts/practical-temporal-proximity-with-kql/</loc><lastmod>2024-09-15T13:48:18-04:00</lastmod><changefreq>daily</changefreq><priority>0.5</priority></url><url><loc>https://attackthesoc.com/posts/detecting-entity-behavior/</loc><lastmod>2024-07-07T13:34:24-04:00</lastmod><changefreq>daily</changefreq><priority>0.5</priority></url><url><loc>https://attackthesoc.com/posts/stacking-your-deception/</loc><lastmod>2024-04-26T23:30:10-04:00</lastmod><changefreq>daily</changefreq><priority>0.5</priority></url><url><loc>https://attackthesoc.com/posts/enhancing-entity-timelines/</loc><lastmod>2024-04-13T13:57:30-04:00</lastmod><changefreq>daily</changefreq><priority>0.5</priority></url><url><loc>https://attackthesoc.com/about/</loc><lastmod>2022-12-08T07:36:59-08:00</lastmod><changefreq>daily</changefreq><priority>0.5</priority></url></urlset>