post AV means you are not blacklisting by signature/iocs. since it poor method to detect a virus. sentinelone are using behavioural engine for malware detection

post AV means you are not blacklisting by signature/iocs. since it poor method to detect a virus. sentinelone are using behavioural engine for malware detection, assuming a malware will do malicious things which can be detected. 0-days aren't a problem for sentinelone EPP.