Decrypting SentinelOne Cloud Detection | The STAR™ Rules Engine in Real-Time CWPP