SentinelOne THP
SentinelOne Threat Hunting Professional (THP S1-301)
Deep Investigation WorkflowsEnglish
Exam overviewPractice session
A SentinelOne hunter wants to investigate a suspicious endpoint without alerting the attacker by terminating their process. Which feature should the analyst use to remotely gather forensic artifacts (event logs, running processes, network connections) from the endpoint?
Loading your practice session…