SentinelOne

Connect Sola and SentinelOne to get security insights

Overview

The SentinelOne integration connects endpoint security data to your Sola workspace, making it easy to search and find answers to your specific use cases.

The SentinelOne integration provides a comprehensive view of your endpoint security environment, enabling you to monitor endpoint agents, analyze threat detections, and track overall security posture across your organization.

With the SentinelOne integration, you can:

• Gain visibility into endpoint agents and threat detection events.

• Monitor vulnerabilities, applications, and detection rule activity.

• Review security management policies.

• Track and analyze endpoint activity across your environment.

Your data can only be retrieved, never modified.

Once connected, your data is securely stored, and access is restricted to retrieving configurations and metadata only. Authentication methods ensure secure delegation of permissions while maintaining data integrity.

Set up SentinelOne data source integration with Sola

Go to Integrations > Data Sources > click New data source > select SentinelOne.

The Sola wizard will take you through the steps.

To connect SentinelOne, you’ll need a SentinelOne tenant with an administrator user.

API Token

This method uses an API token to securely grant Sola read-only access to your SentinelOne services and resources.