WatchTower is a managed threat hunting offering that searches your environment for known and emerging threats in real-time. WatchTower Pro builds on WatchTower and adds additional custom threat hunting along with risk assessment and mitigation guidance. WatchTower Pro hunters not only hunt for threats but also conduct comprehensive assessments tailored to your specific industry, region, and individual network architecture, policies, and procedures.  WatchTower Pro Hunters design a bespoke threat/risk hunting and mitigation program for your environment. Plus, with attack surface mapping, dark web exposure reviews, and premium support, it’s like having a full team of threat hunters at your disposal.

WatchTower releases TLP: AMBER reports on a monthly basis. The SentinelOne threat hunting team also provides WatchTower subscribers with proactive communication for notable threats as they arise.

WatchTower provides monthly TLP: AMBER reports to subscribers, which contain sensitive intelligence, including specific IOCs, TTPs, case studies, and campaign analysis drawn from SentinelOne telemetry.

Previously published TLP: WHITE WatchTower reports are also available in the SentinelOne Community’s WatchTower threat intelligence library.

As part of the WatchTower service, customers receive expert guidance on how to mitigate emergent threats such as ransomware or cyber criminal activity as they arise. If a WatchTower target is detected in the customer environment, Singularity Complete customers are delivered tailored remediation steps, or Vigilance MDR analysts will automatically contain and remediate threats on behalf of the customer.