<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd" xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://blog.zachristensen.com/sa-crowdstrikedevices/</loc>
<lastmod>2022-09-19T00:00:00-06:00</lastmod>
</url>
<url>
<loc>https://blog.zachristensen.com/sa-sentinelonedevices/</loc>
<lastmod>2022-09-29T00:00:00-06:00</lastmod>
</url>
<url>
<loc>https://blog.zachristensen.com/splunk-your-canarytokens/</loc>
<lastmod>2022-11-01T00:00:00-06:00</lastmod>
</url>
<url>
<loc>https://blog.zachristensen.com/sa-awsassets/</loc>
<lastmod>2022-11-02T00:00:00-06:00</lastmod>
</url>
<url>
<loc>https://blog.zachristensen.com/splunk-rba-dynamic-mitre-annotations/</loc>
<lastmod>2025-02-01T16:42:28-07:00</lastmod>
</url>
<url>
<loc>https://blog.zachristensen.com/risk-notable-urgency/</loc>
<lastmod>2023-07-01T01:06:30-06:00</lastmod>
</url>
<url>
<loc>https://blog.zachristensen.com/soar-powershell/</loc>
<lastmod>2023-07-01T01:06:30-06:00</lastmod>
</url>
<url>
<loc>https://blog.zachristensen.com/splunk-the-nginx-proxy-manager/</loc>
<lastmod>2023-06-30T16:21:09-06:00</lastmod>
</url>
<url>
<loc>https://blog.zachristensen.com/splunk-hostname-tracking/</loc>
<lastmod>2023-10-30T14:05:26-06:00</lastmod>
</url>
<url>
<loc>https://blog.zachristensen.com/genai-secops/</loc>
<lastmod>2025-04-24T00:00:00-06:00</lastmod>
</url>
<url>
<loc>https://blog.zachristensen.com/categories/</loc>
<lastmod>2026-03-25T22:00:10-06:00</lastmod>
</url>
<url>
<loc>https://blog.zachristensen.com/tags/</loc>
<lastmod>2026-03-25T22:00:10-06:00</lastmod>
</url>
<url>
<loc>https://blog.zachristensen.com/archives/</loc>
<lastmod>2026-03-25T22:00:10-06:00</lastmod>
</url>
<url>
<loc>https://blog.zachristensen.com/archive/about.html</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/archive/splunk-apps.html</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/tags/crowdstrike/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/tags/assets/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/tags/enterprise-security/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/tags/supporting-add-on/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/tags/sentinelone/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/tags/getting-data-in/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/tags/hec/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/tags/canarytokens/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/tags/aws/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/tags/rba/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/tags/mitre-att-ck/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/tags/sandfly-security/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/tags/soar/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/tags/enrichment/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/tags/attack-range/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/tags/advanced/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/tags/genai/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/tags/presecurity/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/tags/secops/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/categories/splunk-apps/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/categories/tutorial/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/categories/walk-through/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/categories/experiments/</loc>
</url>
<url>
<loc>https://blog.zachristensen.com/categories/demo/</loc>
</url>
</urlset>
