SENTRY combines automated analysis with human sign-off. Here's the flow for a real alert.
A connected sensor detects something — say, a burst of files being renamed with a ransomware extension.
The signal reaches our watch floor instantly and is analyzed for severity and intent.
Low-noise events are logged. Anything genuinely serious is escalated to a human analyst.
For containment actions — isolating a machine, blocking an IP, disabling an account — a human signs off before it happens. Nothing destructive runs autonomously.
Every step is written to an immutable audit trail you can use for insurance and compliance evidence.
This human-in-the-loop design is deliberate: it's why SENTRY can act fast without the risk of an automated system taking your business offline over a false alarm.