Sentinel One EDR misc information

Services:

Name=LogProcessorService; DisplayName=SentinelOne Agent Log Processing Service; ServiceName=LogProcessorService
Name=SecurityHealthService; DisplayName=Windows Security Service; ServiceName=SecurityHealthService
Name=SentinelAgent; DisplayName=Sentinel Agent; ServiceName=SentinelAgent
Name=SentinelHelperService; DisplayName=SentinelHelperService; ServiceName=SentinelHelperService
Name=SentinelStaticEngine; DisplayName=SentinelOne Static Service; ServiceName=SentinelStaticEngine

Hooked functions

NTDLL

RtlAddVectoredExceptionHandler
LdrLoadDll
NtSetInformationThread
NtAllocateVirtualMemory
NtSetInformationProcess
NtFreeVirtualMemory
NtOpenProcess
NtMapViewOfSection
NtUnmapViewOfSection
NtTerminateProcess
NtQuerySystemInformation
NtWriteVirtualMemory
NtReadVirtualMemory
NtQueueApcThread
NtProtectVirtualMemory
NtResumeThread
NtCreateThreadEx
NtCreateUserProcess
NtLoadDriver
NtMapUserPhysicalPages
NtQuerySystemInformationEx
NtQueueApcThreadEx
NtSetContextThread
KiUserApcDispatcher