The company once again confirms the potential of the AI-powered Singularity platform to defend against advanced and current cyber threats, through the most authoritative independent testing and evaluation tool
MITER ATT&CK® 2024 Assessment Results: Enterprise have been published e SentinelOne (NYSE: S) has once again proven itself to be a benchmark for detecting today's most sophisticated threats. For the fifth consecutive year, the piattaforma Singularity™ powered by SentinelOne AI, it achieved 100% detection and zero delays in the main independent evaluation, detecting 80 out of 80 attacks in the simulation, at every stage. Singularity also generated 88% fewer alerts than the average of all vendors evaluated, demonstrating an exceptional alert-to-disturbance ratio, which is critical to helping security teams avoid alert fatigue and act quickly on real threats.
SentinelOne's key findings in the 2024 assessment include:
- 100% detection accuracy: Identification of all 16 attack phases and 80 secondary phases.
- Zero delays in detection: Real-time detection ensures immediate action in the preliminary stages of the kill chain.
- 100% technical detections on all operating systems: The most granular view of all attacker actions on Windows, Linux and MacOS based on the MITER framework.
- Exceptional quality/alert ratio: Generated 88% fewer alerts than the average of all vendors evaluated, improving analyst workflows, accelerating response and optimizing efficiency.
This year's assessment: True and false positive detections, MITER analysts, and real threats on Windows, Linux, and MacOS.
MITER focused its 2024 assessment on two primary threats: widespread ransomware targeting Windows and Linux, and multi-stage, modular malware in operations involving elevated privileges and credentials to target MacOS endpoints. By simulating these complex attacks, MITER ATT&CK assessments provide valuable insights into the strengths and weaknesses of various security products.
Two important changes to the testing process were also introduced this year. First, MITER introduced false positives into the evaluation, adding annoying background interference during the detection portion of the evaluation. This added difficulty required candidates to balance detection accuracy with the generation of false positives and avoid the dreaded “alert fatigue” that customers suffer from. To determine the false positive rate, MITER evaluated a subset of innocuous tasks to determine the prevalence of false positives during the evaluation.
Furthermore, unlike other years where vendors performed the evaluation on their own platform, in 2024 MITER analysts personally used the console as a real Security Operations Center (SOC) would do in a real customer context. This further reflected actual usage, prevented vendors from misrepresenting themselves, and highlighted the strengths of SentinelOne's AI-powered platform to provide immediate protection.
“When it comes to defending against ongoing cyber attacks, three things are important: speed, accuracy and low noise, and SentinelOne's AI-powered approach addresses each of these needs,” said Ric Smith, President, Product, Technology and Operations at SentinelOne. "As confirmed by the latest assessment, SentinelOne Singularity provides immediate, complete and autonomous detection with zero delay on 100% of attacks, eliminating noise and surface real threats. MITER ATT&CK assessments have long been the gold standard, and we strongly believe that participation in these assessments provides customers with transparency they can trust, while pushing vendors to focus innovation on protecting customers from the threats of today and tomorrow."
To learn more about SentinelOne's results in the 2024 MITER ATT&CK®: Enterprise assessments, see blog by SentinelOne.
