← All Findings
Vendor: SentinelOne Singularity XDR FIN-549 Weight: Confidence:

What It Detects

MITRE ATT&CK Techniques

Comma-separated, e.g. T1078, T1190

Checks read-only

FieldOperatorValue
Asset Type == desktop
First Time Seen older than 180 days
Source User Name is empty
Domain is empty
Threat List is not empty

Remediation

Why It Matters

Notes read-only

LDG fields used:

Export Lucidum