Findings
Generator
Configuration
Lucidum Reverse
Architecture
Statistics
← All Findings
Vendor:
SentinelOne Singularity XDR
FIN-202
Weight:
5
4
3
2
1
Confidence:
High
Medium
Low
Edited:
2026-03-06 08:58
Verified
What It Detects
The SentinelOne agent is reporting an offline status, indicating the endpoint has lost connectivity to the SentinelOne management console. While local protection may still be active, the agent cannot receive policy updates, threat intelligence updates, or remote response commands.
MITRE ATT&CK Techniques
Comma-separated, e.g. T1078, T1190
Checks
read-only
Field
Operator
Value
Agent Status
not_equals
online
Remediation
×
×
×
×
+ Add item
Why It Matters
×
×
×
+ Add item
Save Changes
Export Lucidum