SentinelOne extends Wayfinder coverage across endpoints, identities, and cloud workloads
SentinelOne extended Wayfinder threat hunting to AWS, Azure, and Google Cloud control planes.
SentinelOne expanded Wayfinder Threat Hunting to AWS, Azure, and Google Cloud control planes. The service combines Singularity telemetry with human hunters and intelligence from SentinelOne and Google Threat Intelligence. Coverage includes IAM privilege escalation, unauthorized access, data exfiltration, and hunts such as S3 reconnaissance, root logins, and telemetry destruction. It is generally available to existing Wayfinder customers through Singularity Marketplace plugins.
- Wayfinder Threat Hunting now covers AWS, Azure, and Google Cloud control planes.
- Hunts include IAM escalation, S3 reconnaissance, root logins, and telemetry destruction.
- Findings use SentinelOne and Google Threat Intelligence, with Purple AI summaries.
- Existing Wayfinder customers enable it via Singularity Marketplace cloud plugins.
From the original article
2 min read at helpnetsecurity.comSentinelOne has announced the expansion of Wayfinder Threat Hunting to the major public cloud services: AWS, Azure, and Google Cloud. It’s the latest offering from SentinelOne’s Wayfinder team and combines the power of SentinelOne’s AI-powered Singularity Platform telemetry with expert human-led hunting to protect the attack surface across AI, endpoints, identities, and cloud workloads.
By Industry News · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.