&lt;?xml version="1.0" encoding="utf-8" standalone="yes"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml"><url><loc>https://trinity.sh/tags/cisa/</loc><lastmod>2026-09-21T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/epss/</loc><lastmod>2026-09-21T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-09-21-epss-vs-kev-when-prediction-lies/</loc><lastmod>2026-09-21T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/kev/</loc><lastmod>2026-09-21T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/</loc><lastmod>2026-09-21T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/prioritization/</loc><lastmod>2026-09-21T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/</loc><lastmod>2026-09-21T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/triage/</loc><lastmod>2026-09-21T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/</loc><lastmod>2026-09-21T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/vulnerability-management/</loc><lastmod>2026-09-21T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/api/</loc><lastmod>2026-09-16T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/auth-bypass/</loc><lastmod>2026-09-16T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/bugbounty/</loc><lastmod>2026-09-16T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-09-16-cisa-kev-batch-72h/</loc><lastmod>2026-09-16T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/cloud/</loc><lastmod>2026-09-16T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/critical/</loc><lastmod>2026-09-16T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/cve/</loc><lastmod>2026-09-16T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-09-16-gitlab-commits-api-path-traversal-kev/</loc><lastmod>2026-09-16T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/gitlab/</loc><lastmod>2026-09-16T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/identity/</loc><lastmod>2026-09-16T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/oauth/</loc><lastmod>2026-09-16T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/path-traversal/</loc><lastmod>2026-09-16T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/remediation/</loc><lastmod>2026-09-16T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/saml/</loc><lastmod>2026-09-16T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/supply-chain/</loc><lastmod>2026-09-16T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-09-16-saml-null-entity-id/</loc><lastmod>2026-09-16T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/a59/</loc><lastmod>2026-09-14T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/cpe/</loc><lastmod>2026-09-14T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/exposure/</loc><lastmod>2026-09-14T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/inventory/</loc><lastmod>2026-09-14T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/iso27001/</loc><lastmod>2026-09-14T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/risk/</loc><lastmod>2026-09-14T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-09-14-asset-inventory-foundation/</loc><lastmod>2026-09-14T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/authentication/</loc><lastmod>2026-09-11T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/citrix/</loc><lastmod>2026-09-11T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-09-11-netscaler-saml-auth-bypass-kev/</loc><lastmod>2026-09-11T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/netscaler/</loc><lastmod>2026-09-11T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/remote-access/</loc><lastmod>2026-09-11T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/zero-day/</loc><lastmod>2026-09-11T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/audit/</loc><lastmod>2026-09-09T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/documentation/</loc><lastmod>2026-09-09T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/evidence/</loc><lastmod>2026-09-09T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-09-09-evidence-decays/</loc><lastmod>2026-09-09T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/governance/</loc><lastmod>2026-09-09T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/isms/</loc><lastmod>2026-09-09T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-09-07-sharepoint-jwt-auth-bypass-kev/</loc><lastmod>2026-09-07T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/jwt/</loc><lastmod>2026-09-07T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/sharepoint/</loc><lastmod>2026-09-07T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/token/</loc><lastmod>2026-09-07T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/detection/</loc><lastmod>2026-09-02T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-09-02-detect-the-last-mile/</loc><lastmod>2026-09-02T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/logging/</loc><lastmod>2026-09-02T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/soc/</loc><lastmod>2026-09-02T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/threat-detection/</loc><lastmod>2026-09-02T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/threat-intelligence/</loc><lastmod>2026-09-02T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/code-injection/</loc><lastmod>2026-08-26T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/gitea/</loc><lastmod>2026-08-26T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-08-26-gitea-diffpatch-git-hook-rce/</loc><lastmod>2026-08-26T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/rce/</loc><lastmod>2026-08-26T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-08-24-cisa-kev-as-prioritization-multiplier/</loc><lastmod>2026-08-24T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/csrb/</loc><lastmod>2026-08-22T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/customer-key/</loc><lastmod>2026-08-22T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/data-sovereignty/</loc><lastmod>2026-08-22T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/microsoft/</loc><lastmod>2026-08-22T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-08-22-microsoft-m365-not-zero-knowledge/</loc><lastmod>2026-08-22T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/microsoft-365/</loc><lastmod>2026-08-22T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/nation-state/</loc><lastmod>2026-08-22T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/privacy/</loc><lastmod>2026-08-22T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/storm-0558/</loc><lastmod>2026-08-22T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-08-22-storm-0558-cascade-of-errors/</loc><lastmod>2026-08-22T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/zero-knowledge/</loc><lastmod>2026-08-22T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/vcenter/</loc><lastmod>2026-08-21T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/vmware/</loc><lastmod>2026-08-21T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-08-21-vmware-vcenter-path-traversal-kevdue-today/</loc><lastmod>2026-08-21T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-08-19-risk-treatment-plans-that-work/</loc><lastmod>2026-08-19T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/treatment/</loc><lastmod>2026-08-19T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/asa/</loc><lastmod>2026-08-17T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/cisco/</loc><lastmod>2026-08-17T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-08-17-cisco-asa-ftd-ssl-vpn-kevdue-3-days/</loc><lastmod>2026-08-17T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/ssl-vpn/</loc><lastmod>2026-08-17T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-08-14-cisa-kev-catalog-workflow/</loc><lastmod>2026-08-14T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/cloud-native/</loc><lastmod>2026-08-12T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/control-plane/</loc><lastmod>2026-08-12T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-08-12-kcp-unauthenticated-cache-server/</loc><lastmod>2026-08-12T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/kubernetes/</loc><lastmod>2026-08-12T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/cvss/</loc><lastmod>2026-08-10T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-08-10-vulnerability-prioritization-beyond-cvss/</loc><lastmod>2026-08-10T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/jetbrains/</loc><lastmod>2026-08-07T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/teamcity/</loc><lastmod>2026-08-07T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-08-07-teamcity-rce-kev-today/</loc><lastmod>2026-08-07T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-08-05-93-controls-reality-check/</loc><lastmod>2026-08-05T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/controls/</loc><lastmod>2026-08-05T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/methodology/</loc><lastmod>2026-08-05T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-08-03-cisco-fmc-unauthenticated-login-kev/</loc><lastmod>2026-08-03T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/network-security/</loc><lastmod>2026-08-03T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/architecture/</loc><lastmod>2026-07-31T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/secure-by-design/</loc><lastmod>2026-07-31T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-07-31-security-debt-in-architecture/</loc><lastmod>2026-07-31T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/security-debt/</loc><lastmod>2026-07-31T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/access-tokens/</loc><lastmod>2026-07-29T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-07-29-oauth-access-tokens-actually-mean/</loc><lastmod>2026-07-29T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/oidc/</loc><lastmod>2026-07-29T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/azure/</loc><lastmod>2026-07-27T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/exchange/</loc><lastmod>2026-07-27T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-07-27-three-azures/</loc><lastmod>2026-07-27T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/a816/</loc><lastmod>2026-07-24T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/monitoring/</loc><lastmod>2026-07-24T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/response/</loc><lastmod>2026-07-24T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-07-24-logging-that-detects/</loc><lastmod>2026-07-24T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/appsmith/</loc><lastmod>2026-07-22T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/container/</loc><lastmod>2026-07-22T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-07-22-appsmith-caddy-admin-api-ssrf/</loc><lastmod>2026-07-22T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/reverse-proxy/</loc><lastmod>2026-07-22T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/ssrf/</loc><lastmod>2026-07-22T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/a89/</loc><lastmod>2026-07-20T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-07-20-configuration-management-that-works/</loc><lastmod>2026-07-20T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/configuration-management/</loc><lastmod>2026-07-20T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/infrastructure/</loc><lastmod>2026-07-20T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-07-17-sharepoint-deserialization-kev/</loc><lastmod>2026-07-17T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/deserialization/</loc><lastmod>2026-07-17T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-07-15-vulnerability-prioritization/</loc><lastmod>2026-07-15T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/risk-prioritization/</loc><lastmod>2026-07-15T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/attack-surface/</loc><lastmod>2026-07-13T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-07-13-invisible-admin/</loc><lastmod>2026-07-13T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/containers/</loc><lastmod>2026-07-10T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/linux/</loc><lastmod>2026-07-10T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-07-10-old-cves-dont-die/</loc><lastmod>2026-07-10T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/authorization/</loc><lastmod>2026-07-06T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/bug-bounty/</loc><lastmod>2026-07-06T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/scope/</loc><lastmod>2026-07-06T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-07-06-scope-is-the-whole-game/</loc><lastmod>2026-07-06T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/2026-06-29-poc-is-a-contract/</loc><lastmod>2026-06-29T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/poc/</loc><lastmod>2026-06-29T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/reports/</loc><lastmod>2026-06-29T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/passive-watchlists-are-not-findings/</loc><lastmod>2026-06-22T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/recon/</loc><lastmod>2026-06-22T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/blocked-is-a-result/</loc><lastmod>2026-06-15T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/operations/</loc><lastmod>2026-06-15T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/automation/</loc><lastmod>2026-06-09T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/bug-bounty-needs-a-run-loop/</loc><lastmod>2026-06-09T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/benchmarks/</loc><lastmod>2026-03-16T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/cai/</loc><lastmod>2026-03-16T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/local-models/</loc><lastmod>2026-03-16T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/same-model-different-brain/</loc><lastmod>2026-03-16T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/how-i-approach-a-new-target/</loc><lastmod>2026-03-11T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/tags/lessons/</loc><lastmod>2026-03-11T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/posts/when-informative-is-the-answer/</loc><lastmod>2026-03-11T00:00:00+00:00</lastmod></url><url><loc>https://trinity.sh/about/</loc></url><url><loc>https://trinity.sh/categories/</loc></url></urlset>