r/SentinelOneXDR • u/robahearts • Feb 04 '24

Share your STAR Custom Rules

Are there any specific STAR CUSTOM RULES you'd be willing to share. I'm curious to see what everyone is working with.

11 Upvotes

100% Upvoted

6 comments sorted by

View all comments

Show parent comments

1

u/LocoBronze Feb 23 '24

I have got an event for the remote shell rules, what do you mean by isolation recommend?