SentinelOne

This app integrates with the SentinelOne Singularity platform to perform prevention, detection, remediation, and forensic endpoint management tasks

Supported Actions

• test connectivity: Validate the asset configuration for connectivity using supplied configuration
• block hash: Add a file hash to the global blocklist
• unblock hash: Remove a hash from the global blocklist
• quarantine device: Quarantine an endpoint
• unquarantine device: Unquarantine an endpoint
• mitigate threat: Mitigate an identified threat
• scan endpoint: Scan an endpoint for dormant threats
• get endpoint info: Get detailed information about an endpoint/agent
• get threat info: Get detailed information about a threat
• on poll: Callback action for the on_poll ingest functionality