SentinelOne (EDR)

Last updated:

SentinelOne integration

What you get

  • Endpoint agent inventory
  • Threat alerts → SOC alert queue
  • Per-endpoint detection details

Setup

  1. SentinelOne console → Settings → Users → API Tokens (Service User recommended)
  2. Generate a token with Site Admin scope (read at minimum)
  3. Note the Account ID if working under a specific account
  4. Note the console base URL (e.g. https://my-org.sentinelone.net)
  5. Paste into the Chorum wizard