<?xml version="1.0" encoding="utf-8" standalone="yes"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml"><url><loc>https://www.threatbear.co/blog/</loc><lastmod>2026-08-04T09:35:00+10:00</lastmod></url><url><loc>https://www.threatbear.co/blog/introducing-easy-intel/</loc><lastmod>2026-08-04T09:35:00+10:00</lastmod></url><url><loc>https://www.threatbear.co/tags/misp/</loc><lastmod>2026-08-04T09:35:00+10:00</lastmod></url><url><loc>https://www.threatbear.co/tags/threat-intel/</loc><lastmod>2026-08-04T09:35:00+10:00</lastmod></url><url><loc>https://www.threatbear.co/</loc><lastmod>2026-08-04T09:35:00+10:00</lastmod></url><url><loc>https://www.threatbear.co/tags/elastic/</loc><lastmod>2026-07-31T15:35:00+10:00</lastmod></url><url><loc>https://www.threatbear.co/tags/elasticsearch/</loc><lastmod>2026-07-31T15:35:00+10:00</lastmod></url><url><loc>https://www.threatbear.co/tags/hugo/</loc><lastmod>2026-07-31T15:35:00+10:00</lastmod></url><url><loc>https://www.threatbear.co/tags/observability/</loc><lastmod>2026-07-31T15:35:00+10:00</lastmod></url><url><loc>https://www.threatbear.co/blog/elastic-observability-statuspage/</loc><lastmod>2026-07-31T15:35:00+10:00</lastmod></url><url><loc>https://www.threatbear.co/tags/cybersecurity/</loc><lastmod>2026-05-25T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/tags/m365/</loc><lastmod>2026-05-25T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/uncomplicated-naming-convention/</loc><lastmod>2026-05-25T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/tags/cve-2026-31431/</loc><lastmod>2026-04-30T16:58:00+10:00</lastmod></url><url><loc>https://www.threatbear.co/blog/detecting-copyfail-using-ebpf/</loc><lastmod>2026-04-30T16:58:00+10:00</lastmod></url><url><loc>https://www.threatbear.co/tags/detection-engineering/</loc><lastmod>2026-04-30T16:58:00+10:00</lastmod></url><url><loc>https://www.threatbear.co/tags/ebpf/</loc><lastmod>2026-04-30T16:58:00+10:00</lastmod></url><url><loc>https://www.threatbear.co/tags/falco/</loc><lastmod>2026-04-30T16:58:00+10:00</lastmod></url><url><loc>https://www.threatbear.co/tags/linux/</loc><lastmod>2026-04-30T16:58:00+10:00</lastmod></url><url><loc>https://www.threatbear.co/blog/how-to-enable-the-elastic-defend-system-extension-in-macos-sequoia/</loc><lastmod>2025-06-24T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/tags/macos/</loc><lastmod>2025-06-24T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/ag-tech-cybersecurity-partner-for-darling-downs/</loc><lastmod>2025-05-06T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/tags/agtech/</loc><lastmod>2025-05-06T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/network-defence-using-routeros-part-1/</loc><lastmod>2024-05-26T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/tags/routeros/</loc><lastmod>2024-05-26T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/is-routeros-vulnerable-to-cve-2023-48795/</loc><lastmod>2023-12-19T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/quick-and-dirty-routeros-forensics/</loc><lastmod>2023-12-14T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/tags/engineering/</loc><lastmod>2023-12-11T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/tags/mikrotik/</loc><lastmod>2023-12-11T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/routeros-visibility-using-elastic-security/</loc><lastmod>2023-12-11T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/backing-up-proxmox-vms-to-backblaze-b2/</loc><lastmod>2023-09-26T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/microsoft-edge-popping-shells-on-macos/</loc><lastmod>2023-07-06T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/properly-renaming-proxmox-nodes/</loc><lastmod>2022-10-17T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/zeek-without-rc-local/</loc><lastmod>2022-10-07T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/using-osquery-to-check-if-youve-patched-cve-2022-26809/</loc><lastmod>2022-04-20T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/using-google-chat-for-elastic-security-alerts/</loc><lastmod>2022-04-19T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/getting-dockerd-to-behave-with-snap/</loc><lastmod>2022-04-18T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/increasing-signal-to-noise-ratio-for-mitel-systems/</loc><lastmod>2022-03-27T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/detecting-cve-202141379-using-eql/</loc><lastmod>2021-11-23T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/deploy-elastic-agent-with-microsoft-intune/</loc><lastmod>2021-10-28T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/tags/intune/</loc><lastmod>2021-10-28T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/tags/siem/</loc><lastmod>2021-10-28T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/tags/edr/</loc><lastmod>2021-05-28T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/from-zero-to-visibility-in-record-time/</loc><lastmod>2021-05-28T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/renaming-multiple-files/</loc><lastmod>2019-02-27T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/digital-ocean-dictates-what-nodes-you-can-add-to-their-kubernetes-service/</loc><lastmod>2019-01-02T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/using-amazon-athena-to-check-if-a-password-has-been-pawned/</loc><lastmod>2018-07-23T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/ftdi-drivers-on-osx-reap-havoc-with-usb-ports/</loc><lastmod>2017-09-06T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/hashicorp_pros_cons/</loc><lastmod>2017-08-29T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/automate-your-devops-environment-with-hypersh-and-a-yubikey/</loc><lastmod>2017-08-16T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/blog/rackspace-please-add-support-for-slack-notifications-to-rackspace-intelligence/</loc><lastmod>2017-07-04T00:00:00+00:00</lastmod></url><url><loc>https://www.threatbear.co/status/</loc></url></urlset>