mad_dr

·11년 전·discuss

post AV means you are not blacklisting by signature/iocs. since it poor method to detect a virus. sentinelone are using behavioural engine for malware detection, assuming a malware will do malicious things which can be detected.

0-days aren't a problem for sentinelone EPP.