Exit Sandman | How SentinelOne Deflects APT-Level Identity Security Risks