SentinelOne

SentinelOne is a pioneer in delivering autonomous security for the endpoint, data center and cloud environments to help organizations secure their assets with speed and simplicity. SentinelOne unifies prevention, detection, response, remediation, and forensics in a single platform powered by artificial intelligence.

Use the SentinelOne integration to interact with core aspects directly from Torq workflows.

Create your SentinelOne API key

1. Log in to your SentinelOne portal.
2. In the upper-right corner, click the arrow next to your user name and select My User.
3. Click Generate next to API Token.
4. Download and copy the API key for later use.

Create a SentinelOne steps integration in Torq

To create the steps integration, you'll need your SentinelOne API key and the management URL

1. Log in to Torq.
2. Go to the Integrations page, locate the SentinelOne card, and click Add.
3. Give the integration a meaningful name.
4. Enter the API key you created earlier.
5. Enter your management URL without the https:// prefix. For example, <company-name>.sentineleone.net .
6. Click Add.

Use SentinelOne steps

Add the step you want to use to the designer and select the integration you created earlier.

In this example, we're getting items on our SentinelOne blacklist.

The output includes information about each item on the blacklist.

Available templates

• Download a File from a SentinelOne Endpoint