How SentinelOne Blocked APT29's CaptiveCrunch Campaign

Once the corporate network stopped being defensible, the control had to move to the device, as SentinelOne® has long argued. That move carried one assumption with it. Wherever the laptop sits, name resolution tells it the truth and the agent can reach its own cloud. Almost nothing in the stack checks either half.

Summary from SentinelOne Blog.

More in Threat Intel