← All Findings
Vendor: SentinelOne Singularity XDR FIN-499 Weight: Confidence:

What It Detects

MITRE ATT&CK Techniques

Comma-separated, e.g. T1078, T1190

Checks read-only

FieldOperatorValue
Cloud Account ID is not empty
Instance Type is empty
First Time Seen older than 180 days
Agent Enabled (True/False) == True

Remediation

Why It Matters

Notes read-only

LDG fields used:

Supporting endpoints:

Export Lucidum