Hand off from SentinelOne to Insurance Provider's DFIR
I'm considering purchasing SentinelOne including their MDR service which includes hours for forensics (if needed) and proactive security if not needed. Unfortunately, SentinelOne is not on my cybersecurity insurance company's list of preferred forensics providers (even though they are listed as a partner) meaning if we were to suffer a significant enough breach to file a claim we'd be shifting from sentinel one's forensics to whoever the insurance company wanted to cover.
Has anyone here gone through this process during a breach, and if so how was the hand off from SentinelOne to the new DFIR team? Am I overreacting in thinking this hand off could be a problem?
Posted Apr 24, 2026, 8:18 PM UTC
66