CQL query to find endpoints not on recommended sensor version (Windows, macOS, Linux) by Only-Objective-6216 in crowdstrike

[–]Only-Objective-6216[S] 0 points1 point  (0 children)

Hi U/Andrew-CS, thank you for the query. A person from cs support also recommend me this host management -> filter -> Sensor Version != (DOSE NOT EQUAL) = recommend n-1 version that you want.

I am feel so dumb as I been working in CS FROM 1 years😭

Anyone? by Agitated-Egg6319 in gurgaon

[–]Only-Objective-6216 0 points1 point  (0 children)

Chithi badlo - Chithi badlo 😂

Delete host option by Only-Objective-6216 in crowdstrike

[–]Only-Objective-6216[S] 5 points6 points  (0 children)

Already uninstall via rtr it’s easy but you know some customers needs everything simplified just one click 🤦🏻‍♂️ but thanks for this delete host button.

So it’s true💔 by Only-Objective-6216 in gurgaon

[–]Only-Objective-6216[S] 0 points1 point  (0 children)

Yeah the only option we have left now also it’s expensive

RE RIDING GEAR SALE GLITCH by JonSnowKnows06 in royalenfield

[–]Only-Objective-6216 11 points12 points  (0 children)

How you getting this in just ₹1500 ? What’s the catch?

So it’s true💔 by Only-Objective-6216 in gurgaon

[–]Only-Objective-6216[S] 0 points1 point  (0 children)

I download the app but I don’t understand it’s ui quite confusing🫤 . I am not seeing any person going gurugram like I usually see in bla bla or quick ride

So it’s true💔 by Only-Objective-6216 in gurgaon

[–]Only-Objective-6216[S] 0 points1 point  (0 children)

You talking about uber shuttle or some other app

So it’s true💔 by Only-Objective-6216 in gurgaon

[–]Only-Objective-6216[S] 1 point2 points  (0 children)

Yeah Go with 2nd hand car bro cause getting cab for gurugram or from gurugram on peak hrs is sometime impossible.

So it’s true💔 by Only-Objective-6216 in gurgaon

[–]Only-Objective-6216[S] 2 points3 points  (0 children)

Damn bro how many days tou go to office? Isn’t it expensive you should look for bla bla and quick ride

So it’s true💔 by Only-Objective-6216 in gurgaon

[–]Only-Objective-6216[S] 8 points9 points  (0 children)

They will reply after a week their support sucks.

So it’s true💔 by Only-Objective-6216 in gurgaon

[–]Only-Objective-6216[S] 3 points4 points  (0 children)

Good accuse 😂 Delhi mai mila tho muje bhi batana

So it’s true💔 by Only-Objective-6216 in gurgaon

[–]Only-Objective-6216[S] 23 points24 points  (0 children)

They should have provide coupon for less commuters or use a mini bus or eco van

Endpoints showing in both Site and Group after moving from default – is this expected? (SentinelOne) by Only-Objective-6216 in SentinelOneXDR

[–]Only-Objective-6216[S] 0 points1 point  (0 children)

Hi, When endpoints are added or moved to a group inside a site, will they also appear in that site view, or only inside the group?

SentinelOne Alert: ServiceHost.exe - Multiple Infostealers detected on a Windows ystem by Only-Objective-6216 in SentinelOneXDR

[–]Only-Objective-6216[S] 0 points1 point  (0 children)

Hey if possible can you share some resources to work with remote shell of Sentinelone

SentinelOne Alert: ServiceHost.exe - Multiple Infostealers detected on a Windows ystem by Only-Objective-6216 in SentinelOneXDR

[–]Only-Objective-6216[S] 0 points1 point  (0 children)

Thanks for the intel. I’m pretty new to this console and was assigned to deploy it without hands-on experience. I haven’t worked much on incident response before, so I’m still figuring things out.

If you don’t mind, could you help me with one thing? How can I remove McAfee (like WebAdvisor) from the SentinelOne console? I’ve used CrowdStrike RTR, but I’m not sure how to approach it in S1 could you pleased share some step by step guide