← All Findings
Vendor: SentinelOne Singularity XDR FIN-538 Weight: Confidence:

What It Detects

MITRE ATT&CK Techniques

Comma-separated, e.g. T1078, T1190

Checks read-only

FieldOperatorValue
Asset Type == desktop
Source User Name is empty
Last Time Seen older than 14 days
Agent Enabled (True/False) == True

Remediation

Why It Matters

Notes read-only

LDG fields used:

Export Lucidum