No, the detect vs. protect mode policies will remain, as this is part of the SentinelOne engine itself. Detection mode is only recommended at the beginning after installing the agent to capture false positives. After the initial analysis, we recommend that units activate protect mode on all devices with SentinelOne. The Vigilance service acts on significant alerts flagged by the SentinelOne agent after they review and confirm that the threat is real.