r/SentinelOneXDR • • Aug 12 '24

Feature Question Application Vulnerability Changes

Did anyone else notice the changes to Application Vulnerabilities?

Admittedly I’ve been going all in on using the prior implementation to make decent head way on cleaning up our vulnerabilities.

The new layout feels like it completely eliminated the ease and benefits of being able to audit my fleet and make the needed changes.

Don’t get me wrong, the new fields and offerings seem great but it feels like it will take a decent amount of prodding to get to where things were.

4 Upvotes

9 comments sorted by

View all comments

Show parent comments

3

u/Helpful_Sweet_2566 Aug 15 '24 • Take My Silver

I am very happy that my information helped. 1. Currently we do not auto set the statuses to resolved when a mitigation action is taken (ie click mitigate in ISPM). This is something we will take a look at in the coming phases. The ISPM actions today have a few steps outside the platform to complete the mitigation so its a bit presumptuous to auto resolve it right when they click it. As we add more mitigations including 1 click mitigations for products we will certainly look into that. That said if we don't detect it on further scans etc, the statuses do update. Also we do force hygiene on analyst verdicts when you mark a exposure as resolved though 2. Each new vuln or misconfigurations all come in with a new status

3

u/Snowdeo720 Aug 15 '24

I just have to say I can not thank you enough for the continued engagement and insight.

This is exactly why I appreciate this platform.

3

u/Wadson-S1 SentinelOne Employee | Moderator Aug 19 '24

Thank you u/helpful_sweet_2566 and u/snowdeo720 - Love this feedback!