Yup, that seems likely. Their whole shtick is that signature based checks don't cut it and that their behavior based system is the way to go.

https://en.wikipedia.org/wiki/SentinelOne#Technology

https://www.sentinelone.com