<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://sarafoleanu.com</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/about</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/teardown</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/fundamentals</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/sec-monitoring</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/cloud-security</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/app-security</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/infrastructure</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/identity-security</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/security-leadership</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/ai-agents</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/security-engineering</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/ai-agents/agents-strands</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/ai-agents/agents-memory-state</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/ai-agents/agents-langgraph</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/ai-agents/agents-threat-modeling</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/ai-agents/agents-first-security-agent</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/ai-agents/agents-new-perimeter</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/ai-agents/centaur-security-engineer-baseline</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/sec-monitoring/dark-soc-cookbook</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/sec-monitoring/ai-agent-monitoring-blind-spot</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/ai-agents/ai-agent-insider-threat</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/security-leadership/your-risk-register-is-a-menu</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/ai-agents/litellm-ai-agent-trust-model</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/sec-monitoring/github-actions-security-secops</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/sec-monitoring/security-scanner-supply-chain-risk</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/sec-monitoring/trivy-malware-runner</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/sec-monitoring/security-data-pipeline</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/sec-monitoring/finding-accounts-delinea-doesnt-know</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/sec-monitoring/building-two-siems-together</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/sec-monitoring/log-source-onboarding-wide-but-shallow</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/app-security/spa-security-model-shift</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/app-security/agent-sdk-engineering</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/sec-monitoring/monitoring-eks-splunk</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/sec-monitoring/monitoring-ai-agents-eks</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/ai-agents/secure-ai-coding-agents-enterprise</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/ai-agents/agentic-memory-attack-surface</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/ai-agents/marketing-agents-what-works</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/ai-agents/coding-agent-attack-surface</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/ai-agents/agent-harnesses-attack-surface</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/ai-agents/clawdbot-agi-open-source</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/cloud-security/security-graph-problem</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/cloud-security/eks-logging-practitioners-guide</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/security-leadership/security-technology-map</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/identity-security/salesloft-drift-oauth-breach</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/infrastructure/ralph-context-window-management</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/infrastructure/disposable-dev-box-ai-agents</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/cloud-security/aws-cross-account-log-collection-s3-sqs</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/app-security/beyond-vulnerability-management-aspm</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/app-security/vulnerability-management-at-scale</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/sec-monitoring/use-case-development-mitre</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/security-engineering/mitre-attack-ground-up</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/security-engineering/crowdstrike-falcon-ground-up</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/security-engineering/soar-playbooks-ground-up</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/security-engineering/email-security-ground-up</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/security-engineering/security-apis-ground-up</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/security-engineering/palo-alto-ground-up</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/security-engineering/purview-identity-ground-up</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/security-engineering/cicd-pipeline-security-ground-up</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/security-engineering/ti-to-detection-content</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/blog/sec-monitoring/adding-soar-dual-siem</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/fundamentals/what-is-a-harness</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/fundamentals/confused-deputy</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/fundamentals/swiss-cheese-model</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/fundamentals/prompt-injection</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/fundamentals/filesystem-isolation</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/fundamentals/network-isolation</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/fundamentals/sandbox-boundary-strength</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/fundamentals/macos-tcc</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/fundamentals/oauth-tokens</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/fundamentals/supply-chain-risk</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/fundamentals/cloudtrail</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/fundamentals/iam-trust</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/fundamentals/irsa</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/fundamentals/jwt-basics</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/fundamentals/web-app-architecture</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/fundamentals/graph-databases</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/fundamentals/serialization</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://sarafoleanu.com/fundamentals/siem-basics</loc>
    <lastmod>2026-06-02T08:44:26.026Z</lastmod>
    <priority>0.6</priority>
  </url>
</urlset>
