SentinelOne: Complete +

This is a Discovery Integration.

This integration collects 14 days of history by default upon first connection.

Collect Required Information from Vendor

IMPORTANT!
You must meet the following prerequisites before you can continue.
You must have the “Admin role.”
The Complete SKU (product option) is required for Deep Visibility access.

Create New Service User and API Key

Log in to your SentinelOne Management Console using one of the roles as defined above.
Go to Settings > Users > Service Users.
Select Actions > Create New Service User.
In the Create New Service User window…
1. Set the Name and Description.
  - Name — “Calero SMP”
  - Description — (Optional) A description for the service user.
2. Set the Expiration Date — Select 2 Years as the expiration date for the API token.
3. Select Next.
In the Select Scope of Access window…
1. Set the preferred Account or Site access for the service user.
2. Copy/save the following field(s) for use when onboarding this Integration:
  - API Key
3. Select Create User.
Next, determine your organization’s Management URL, which is the base URL specific to your organization when you are logged in to SentinelOne.
Copy/save the following field(s) for use when onboarding this Integration:
- Subdomain
  EXAMPLE:
  https://myorg.sentinelone.net

Generate Token

Log in to your SentinelOne Management Console using one of the roles as defined above.
Open the left nav (SentinelOne logo) > Visibility (or Visibility (Enhanced)/Singularity Data Lake).
You will be redirected to the SDL console.
In the top right, select your Username > API Keys.
Under Log Access Keys, select Add Key > Add Read Key.
Copy/save the following field(s) for use when onboarding this Integration:
- Key Value
Copy/save the URL in the browser for use when onboarding this Integration.
- URL
  EXAMPLE:
  https://xdr.eu1.sentinelone.net

Onboard This Discovery Integration

Go to SaaS Management > Applications.
Select Add Integration.
Select the Discovery Apps tab, then select the card with the vendor's name.
From the API tab, enter the field(s) you copy/saved above.
Select the Authorize button.

SUCCESS!
You will now be redirected to the Integrations page in Calero.com, where the data sync will continue in the background, and you can monitor progress.

SUGGESTION:

Access Help through your Calero.com instance if links between articles return errors or if there are fewer sections in the Help menu than expected. Doing so will ensure you see all Help articles.

Reference Information

API Endpoints

These are the API endpoints used to fetch both App Launch and URL data.

https://[domain].sentinelone.net/api-doc/api-details?category=accounts&api=get-accounts
https://[domain].sentinelone.net/api-doc/api-details?category=long-running-query&api=launch-a-query
https://[domain].sentinelone.net/api-doc/api-details?category=long-running-query&api=poll-query

NOTE:
Replace [domain] with the domain you saved in step 6 in Create New Service User and API Key.

Documentation Index