<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>ZeroExfil Blog</title>
    <link>https://www.zeroexfil.com/blog/</link>
    <description>Research, findings, and practical guidance to help organizations and individuals stay secure, alongside updates from the ZeroExfil platform.</description>
    <language>en-us</language>
    <copyright>Copyright 2026 ZeroExfil</copyright>
    <lastBuildDate>Mon, 20 Apr 2026 08:00:00 GMT</lastBuildDate>
    <atom:link href="https://www.zeroexfil.com/blog/rss.xml" rel="self" type="application/rss+xml" />
    <image>
      <url>https://www.zeroexfil.com/images/Logo_Original.png</url>
      <title>ZeroExfil Blog</title>
      <link>https://www.zeroexfil.com/blog/</link>
    </image>

    <item>
      <title>Are You Aware of Your Monitoring Gaps?</title>
      <link>https://www.zeroexfil.com/blog/posts/monitoring-gaps-defender-file-events/</link>
      <guid isPermaLink="true">https://www.zeroexfil.com/blog/posts/monitoring-gaps-defender-file-events/</guid>
      <pubDate>Mon, 20 Apr 2026 08:00:00 GMT</pubDate>
      <dc:creator>Victor Olsson</dc:creator>
      <category>Security Monitoring</category>
      <description><![CDATA[A practical look at what Microsoft Defender's DeviceFileEvents table reliably surfaces, what it does not, and why that matters for detecting data exfiltration. Includes a reproducible PowerShell test.]]></description>
    </item>
  </channel>
</rss>
