guardicore
Recognize SeninalOne as endpoint AV
Is your feature request related to a problem? Please describe. SentinalOne is an enpoint security solution. Infection Monkey does not check for the presence of SentinalOne and produces a false positive alert in the zero trust report.
Describe the solution you'd like Infection Monkey detects the presence of SentinalOne.
Describe alternatives you've considered Do not detect SentinalOne. Monkey will continue to show false positive alerts to users.
The whole AV gathering procedure could be potentially improved. Maybe we could utilize a library for AV discovery: https://pypi.org/project/windows-tools.antivirus/ . AV detection should also trigger a new Software discovery attack technique.
The Zero Trust report has been removed for now. It will be reimagined and readded at some time in the future.