Skip to main content
SentinelOne app icon

SentinelOne

This app integrates with the SentinelOne Singularity platform to perform prevention, detection, remediation, and forensic endpoint management tasksBuilt by srv-stage-community
soar product badge
Default Version 2.1.1

September 17, 2021

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1, 5.0, 4.10, 4.9

Rating
0
(0)

Log in to rate this app

Support
Not Supported
Ranking

#3 in Endpoint

This app integrates with the SentinelOne Singularity platform to perform prevention, detection, remediation, and forensic endpoint management tasks

Supported actions

  • test connectivity: Validate the asset configuration for connectivity using supplied configuration
  • block hash: Add a file hash to the global blocklist
  • unblock hash: Remove a hash from the global blocklist
  • quarantine device: Quarantine an endpoint
  • unquarantine device: Unquarantine an endpoint
  • mitigate threat: Mitigate an identified threat
  • scan endpoint: Scan an endpoint for dormant threats
  • get endpoint info: Get detailed information about an endpoint/agent
  • get threat info: Get detailed information about a threat
  • on poll: Callback action for the on_poll ingest functionality