Potential SentinelOne Shell Context Menu Scan Command Tampering
Detects suspicious modifications to the SentinelOne context menu scan command in the Windows Registry. This rule specifically looks for changes made by processes other than the legitimate SentinelOne agent, indicating potential tampering or persistence mechanisms.
Sigma
