MITRE has become the common language of EDR and is the de facto way to evaluate a product’s ability to provide actionable information to the SOC. The 2022 Enterprise ATT&CK Evaluation emulate s the real attack methods of Wizard Spider and Sandworm, two APT threat groups that conduct ransomware campaigns for financial gain and data destruction. SentinelOne participated in these evaluations for a fourth year with record performance.

Read this whitepaper to understand:

• How the evaluations are carried out
• A deep dive into the results