- List the SentinelOne accounts the token can see.
- Get a SentinelOne account by ID.
- List console and agent activity records, the audit trail of the SentinelOne tenant.
- List the activity type codes used by SentinelOne, with the description of each.
- Start a full disk scan on the selected endpoints.
- Stop a running full disk scan on the selected endpoints.
- Isolate the selected endpoints from the network.
- Return the selected endpoints to the network after isolation.
- Restart the machines behind the selected endpoints.
- Shut down the machines behind the selected endpoints.
- Uninstall the SentinelOne agent from the selected endpoints.
- Decommission the selected endpoints and remove them from the console.
- Mark the selected agents as running an up to date version.
- Approve pending uninstall requests from the selected endpoints.
- Reject pending uninstall requests from the selected endpoints.
- Ask the selected endpoints to report their installed applications.
- Collect diagnostic logs from the selected endpoints.
- Set the customer identifier shown on the selected endpoints.
- Move the selected endpoints to another site.
- Update the SentinelOne agent version on the selected endpoints.
- Add, remove or override endpoint tags on the selected endpoints.
- List the SentinelOne agents installed on managed endpoints.
- Count the agents that match a filter, without returning the agents themselves.
- List the applications installed on specific endpoints.
- Create an endpoint tag that can then be attached to agents.
- List the endpoint tags defined in the tenant.
- List the endpoint groups in the SentinelOne tenant.
- Get one SentinelOne endpoint group by ID.
- Get the registration token that enrols new agents straight into a group.
- Create an endpoint group inside a site.
- Update a SentinelOne endpoint group.
- Delete a SentinelOne endpoint group.
- Move selected agents into an endpoint group.
- Get the current SentinelOne connection's unified credentials and identity.
- List unified organizations in a SentinelOne console.
- Get a unified SentinelOne organization by ID.
- List unified roles in a SentinelOne console.
- Get a unified SentinelOne role by ID.
- List unified users in a SentinelOne console.
- Get a unified SentinelOne user by ID.
- List the roles defined in a SentinelOne console.
- Get a SentinelOne role definition by ID.
- List the SentinelOne service users, the API-only identities.
- Get a SentinelOne service user by ID.
- List the sites in the SentinelOne tenant.
- Get one SentinelOne site by ID.
- Get the registration token that enrols new agents into a site.
- Create a site in the SentinelOne tenant.
- Update a SentinelOne site.
- Delete a SentinelOne site.
- List the analyst notes recorded against one threat.
- Add an analyst note to the selected threats.
- Change the text of one analyst note on a threat.
- Delete one analyst note from a threat.
- List the threats SentinelOne has detected on managed endpoints.
- Get the ordered history of what happened to one threat.
- List the endpoint events recorded around one threat.
- Get the exclusion types that can be created from one threat's detection data.
- Apply a mitigation action to the selected threats.
- Record the analyst's judgement on the selected threats.
- Move the selected threats through the triage workflow.
- Link the selected threats to a ticket in another system.
- Block the file hashes behind the selected threats across a scope.
- Create an exclusion from the selected threats so SentinelOne stops flagging them.
- Retrieve the file behind the selected threats for offline analysis.
- List the users who can sign in to the SentinelOne console.
- Get a SentinelOne console user by ID.
- Get the user that owns the connection API token.
- Check that the API token can read users from the SentinelOne console.
No matching actions
