Overview
Explore
Expertise
Ecosystem
What's popular
Endpoint Security Transformation
Keep pace with industry challenges and regulatory changes by focusing on a holistic endpoint protection solution.
SentinelOne CTF: Siren Song
SentinelOne delivers a unified, AI-powered platform for endpoint protection, detection, and response. The Singularity Operations Center gives security teams real-time visibility, autonomous remediation, and deep threat context—all from a single console.
In this Capture the Flag (CTF) challenge, you'll step into the role of a cyber defender and use SentinelOne's Singularity platform to investigate and respond to a ransomware attack. This interactive experience offers a hands-on opportunity to apply core blue team skills while exploring SentinelOne's capabilities in a dynamic, threat-rich environment.
Primary tools utilized within the game:
🔹 SentinelOne Singularity Operations Center (EDR/XDR & incident response)
We invite you to complete the SentinelOne XDR Learning Path and Initiation, our demo CTF, to be best prepared! You can find both of these under the related content at the bottom of this page. After 12/17, they can be launched from the "Resources" tab on this page.
SentinelOne CTF: Siren Song
SentinelOne delivers a unified, AI-powered platform for endpoint protection, detection, and response. The Singularity Operations Center gives security teams real-time visibility, autonomous remediation, and deep threat context—all from a single console.
In this Capture the Flag (CTF) challenge, you'll step into the role of a cyber defender and use SentinelOne's Singularity platform to investigate and respond to a ransomware attack. This interactive experience offers a hands-on opportunity to apply core blue team skills while exploring SentinelOne's capabilities in a dynamic, threat-rich environment.
Primary tools utilized within the game:
🔹 SentinelOne Singularity Operations Center (EDR/XDR & incident response)
THIS EVENT IS FULL, PLEASE MOVE OVER TO THE NOVEMBER EVENT https://www.wwt.com/event/68d2c91abaf9d222fb9115ff
SentinelOne CTF: Siren Song
This CTF is full. Please register for our next SentinelOne CTF on January 15th, 2026 - https://www.wwt.com/event/690219226a7b8a3f85a4c935
SentinelOne delivers a unified, AI-powered platform for endpoint protection, detection, and response. The Singularity Operations Center gives security teams real-time visibility, autonomous remediation, and deep threat context—all from a single console.
In this Capture the Flag (CTF) challenge, you'll step into the role of a cyber defender and use SentinelOne's Singularity platform to investigate and respond to a ransomware attack. This interactive experience offers a hands-on opportunity to apply core blue team skills while exploring SentinelOne's capabilities in a dynamic, threat-rich environment.
Primary tools utilized within the game:
🔹 SentinelOne Singularity Operations Center (EDR/XDR & incident response)
SentinelOne CTF: Siren Song
REGISTRATION IS CLOSED. PLEASE REACH OUT TO Daniel.Hartnagel@wwt.com IF YOU ARE INTERESTED IN PLAYING!
SentinelOne delivers a unified, AI-powered platform for endpoint protection, detection, and response. The Singularity Operations Center gives security teams real-time visibility, autonomous remediation, and deep threat context—all from a single console.
In this Capture the Flag (CTF) challenge, you'll step into the role of a cyber defender and use SentinelOne's Singularity platform to investigate and respond to a ransomware attack. This interactive experience offers a hands-on opportunity to apply core blue team skills while exploring SentinelOne's capabilities in a dynamic, threat-rich environment.
While the lab environment remains open for 8 hours, the game is designed to be completed within a 6-hour window.
Primary tools utilized within the game:
🔹 SentinelOne Singularity Operations Center (EDR/XDR & incident response)
What's new
Partner POV | Bring Your Own Vulnerable Driver: How EDR Killing Became an Industry
Ransomware actors disabled security tools in about 48% of intrusions in 2024, and bring-your-own-vulnerable-driver (BYOVD) attacks are the fastest-growing way they do it. SentinelOne traces a four-year timeline of how EDR killers went from one-off binaries to a maintained, ransomware-as-a-service supply chain, and why defenders should treat them as supply with a release cadence they can track and detect.
Partner POV | Stopping PHP2SHELL: How SentinelOne Protects Customers From This Attack Technique
Two critical PHP vulnerabilities allow remote code execution and memory disclosure on web servers, and many versions can no longer be patched. This article explains how the flaws work, which versions are affected, and how attackers behave after exploitation. It also covers hardening steps to apply while patching and how endpoint detection and threat hunting can surface post-exploitation activity.
Partner POV | Bring Your Own Vulnerable Driver: What Detection Teams Should Actually Hunt
SentinelOne breaks EDR-killer attacks into four distinct behavior hunts: vulnerable driver abuse, the kill chain as a correlation target, kernel-callback removal, and installer abuse with driverless suspension. The article shows detection teams what to look for in telemetry, how to tune the hunts to limit false positives, and why catching the kill attempt early can stop ransomware before it fires.
Partner POV | SentinelOne and NVIDIA: Governing AI From Silicon to Runtime
NVIDIA and SentinelOne's collaboration on the Open Agent Safety Platform aims to revolutionize AI governance by ensuring independent, hardware-rooted security. This initiative addresses the critical need for verifiable, real-time oversight of AI actions, promising a future where AI operates with trust, accountability, and seamless integration into enterprise systems.
Partner POV | From Input to Impact: Secure AI Where It Runs
AI agents permeate environments, posing security challenges across apps, endpoints, identities, and cloud workloads. SentinelOne's unified platform autonomously detects and mitigates AI threats, ensuring seamless protection from manipulated prompts to unauthorized actions. By integrating AI telemetry, it transforms fragmented alerts into cohesive narratives, offering real-time defense without architectural overhaul.
End-to-End Walkthrough: Autonomous Triage to No-Code Response
Discover how Sentinel One's Purple AI Agentic Investigations transform incident response by automatically launching in-depth investigations for critical EDR alerts and seamlessly integrating hyper automation workflows for rapid threat mitigation. This video highlights advanced features including AI-driven verdicts, executive summaries, actionable investigation reports, user feedback integration, and automated collaboration through tools like Slack and Jira.
Partner POV | The Agentic SOC: Solving Security's Investigation Capacity Crisis in the Frontier AI Era
Purple AI revolutionizes cybersecurity by automating investigations, addressing the investigation capacity gap in Security Operations Centers. Operating natively on the Singularity Platform, it leverages frontier AI to deliver rapid, autonomous threat analysis, empowering human defenders with unprecedented efficiency and control. SentinelOne's innovation transforms alert management, enhancing security in the AI era.
Partner POV | SentinelOne + Claude: Integrations for AI Visibility, Governance, and Defense
SentinelOne enhances AI security by integrating Claude into existing platforms, offering comprehensive protection from infrastructure to user interactions. Through partnerships with Anthropic and others, it provides advanced threat detection and remediation. This approach empowers organizations to innovate with AI while maintaining robust security and minimizing risks.
SentinelOne CTF: Siren Song
REGISTRATION IS CLOSED. PLEASE REACH OUT TO Daniel.Hartnagel@wwt.com IF YOU ARE INTERESTED IN PLAYING!
SentinelOne delivers a unified, AI-powered platform for endpoint protection, detection, and response. The Singularity Operations Center gives security teams real-time visibility, autonomous remediation, and deep threat context—all from a single console.
In this Capture the Flag (CTF) challenge, you'll step into the role of a cyber defender and use SentinelOne's Singularity platform to investigate and respond to a ransomware attack. This interactive experience offers a hands-on opportunity to apply core blue team skills while exploring SentinelOne's capabilities in a dynamic, threat-rich environment.
While the lab environment remains open for 8 hours, the game is designed to be completed within a 6-hour window.
Primary tools utilized within the game:
🔹 SentinelOne Singularity Operations Center (EDR/XDR & incident response)
Partner POV | Turn Blind Trust into Verified Control with Prompt Security for Agentic AI
Agentic AI is revolutionizing enterprise operations with autonomous execution, posing unique security challenges. SentinelOne's Prompt for Agentic AI Security offers real-time governance, risk assessment, and policy enforcement to safely integrate AI agents. Embrace this shift with visibility, control, and proactive management to harness AI's potential securely.
Partner POV | The Agentic AI Attack Surface: Where Risk Lives Beyond the Prompt
Atlas, OpenAI's browser-based AI agent, highlights security challenges in agentic systems. By mapping its architecture, we identify four critical boundaries: content ingestion, context translation, tool execution, and behavioral constraints. These boundaries reveal vulnerabilities in AI systems that process external content, emphasizing the need for robust security measures beyond prompt-level concerns.
Prompt Security Demo: The Platform for AI Security from SentinelOne
Watch SentinelOne's Prompt Security Platform in action — a pioneer in securing AI at runtime, preventing AI-related data leakage and protecting intelligent agents. This demo walks through how the platform protects employee AI usage, secures developer tools and AI code assistants, and safeguards homegrown AI applications — all without slowing innovation.
Partner POV | SentinelOne & Cloudflare Expand Partnership to Deliver Real-Time Threat Detection and Automated Response for Enterprises
SentinelOne and Cloudflare unite to enhance enterprise security through AI-driven insights and real-time threat detection. Their integration automates threat response across edge, endpoint, and cloud environments, simplifying security operations and empowering analysts to focus on critical threats. This partnership promises a scalable, unified security approach for modern organizations.
SentinelOne FY27 Sales Kick Off Recap
Fresh off its sales kickoff, SentinelOne is going all in on AI security, unified attack surface protection, and the Autonomous SOC. The mid-market enterprise detection and response (EDR) narrative is outdated. This is about securing AI at scale and reshaping modern security operations.
SentinelOne CTF: Siren Song
SentinelOne delivers a unified, AI-powered platform for endpoint protection, detection, and response. The Singularity Operations Center gives security teams real-time visibility, autonomous remediation, and deep threat context—all from a single console.
In this Capture the Flag (CTF) challenge, you'll step into the role of a cyber defender and use SentinelOne's Singularity platform to investigate and respond to a ransomware attack. This interactive experience offers a hands-on opportunity to apply core blue team skills while exploring SentinelOne's capabilities in a dynamic, threat-rich environment.
Primary tools utilized within the game:
🔹 SentinelOne Singularity Operations Center (EDR/XDR & incident response)
We invite you to complete the SentinelOne XDR Learning Path and Initiation, our demo CTF, to be best prepared! You can find both of these under the related content at the bottom of this page. After 12/17, they can be launched from the "Resources" tab on this page.
SentinelOne Siren Song
Orientation turns into incident response when ransomware detonates mid‑briefing. Use unified endpoint telemetry to trace the attacker's path, confirm root cause, and roll back malicious changes. Contain, remediate, and validate recovery in a time‑boxed exercise that rewards speed, accuracy, and disciplined investigation habits.
Partner POV | Prompt Security's AI & Security Predictions for 2026
AI's integration into security by 2026 will redefine organizational boundaries, with agentic AI expanding capabilities and risks. Healthcare and critical industries will rely on AI for cybersecurity, while autonomous AI-driven cyberattacks will challenge traditional defenses. Data poisoning and near-AGI advancements will necessitate robust governance, reshaping model responsibility and control.
Partner POV | AI Security: Defining and Defending Cybersecurity's Next Frontier
AI is revolutionizing business and security, offering both innovation and risk. As AI accelerates operations and threats, SentinelOne's AI-native solutions provide real-time, autonomous protection. By integrating AI for security and security for AI, we ensure a safer digital future, empowering human potential and preserving digital integrity.
SentinelOne CTF: Siren Song
This CTF is full. Please register for our next SentinelOne CTF on January 15th, 2026 - https://www.wwt.com/event/690219226a7b8a3f85a4c935
SentinelOne delivers a unified, AI-powered platform for endpoint protection, detection, and response. The Singularity Operations Center gives security teams real-time visibility, autonomous remediation, and deep threat context—all from a single console.
In this Capture the Flag (CTF) challenge, you'll step into the role of a cyber defender and use SentinelOne's Singularity platform to investigate and respond to a ransomware attack. This interactive experience offers a hands-on opportunity to apply core blue team skills while exploring SentinelOne's capabilities in a dynamic, threat-rich environment.
Primary tools utilized within the game:
🔹 SentinelOne Singularity Operations Center (EDR/XDR & incident response)
SentinelOne OneCon 2025: Redefining the Future of AI-Driven Security
SentinelOne isn't afraid to take on the hard problems. Too often, as practitioners, we are faced with having to make concessions in our security program for the sake of waiting on our OEM of choice to innovate, acquire or deliver on feature-rich promises over the years of our contract terms. If there is one thing that 2025 has taught me is that SentinelOne is facing those head-on.