Actu
SentinelOne Continues Sterling MITRE ATT&CK Evaluation Performance, Now with MDR
November 2022 by Marc Jacob
SentinelOne was recognized in the MITRE Engenuity ATT&CK® Evaluation for Managed Services for its Vigilance MDR. This achievement follows three consecutive years of top performance in MITRE ATT&CK® Enterprise Evaluations and MITRE ATT&CK® Deception evaluation. SentinelOne is the only XDR vendor to participate in every MITRE evaluation spanning EDR, Identity/Deception, and now MDR – and consistently deliver top results. Integrated within Singularity XDR, SentinelOne is fully committed to MITRE’s frameworks as the de facto language of cybersecurity, supporting organizations in programmatic risk reduction.
The MITRE Engenuity ATT&CK® Evaluation for Managed Services evaluated vendors’ ability to analyze and describe adversary behavior from OilRig, also known as APT 34. The evaluation highlighted the importance of MDR services in providing faster threat mitigation to reduce attacker dwell time, showcasing SentinelOne Vigilance MDR’s:
• Accurate, Insightful Adversary Attribution. SentinelOne Vigilance was able to not only correctly attribute the attack to OilRig, but provide additional insight including a summary of the adversary and the group’s evolution over time, commonly exploited tools by the adversary, and all of their known associated TTPs.
• Superior Digital Forensics and Incident Response (DFIR) Capabilities. With a frictionless MDR and DFIR experience, SentinelOne Vigilance seamlessly provided insight into the “how” and the “why” – including malware and data exfiltration technique analysis and reverse engineering of malware samples – to significantly accelerate overall investigation and response.
• Real-Time Threat Mitigation, Going Beyond Detection. SentinelOne Vigilance accurately tracked and detected – using patented Storyline technology – the adversary from the moment they infiltrated the simulated environment. With protection policies enabled, this attack would have been autonomously stopped in its tracks.
Earlier this year, SentinelOne received the most comprehensive MITRE ATT&CK® analytic coverage in the inaugural MITRE Engenuity ATT&CK® Deception Evaluation. SentinelOne was one of the first endpoint companies to correlate alerts in-product with the MITRE ATT&CK framework, embrace the MITRE ATT&CK Endpoint Protection Product Evaluation, and incorporate the MITRE ATT&CK framework as the new threat hunting standard within Singularity XDR’s console.
