This workflow template, "Initial SentinelOne Case Creation," automates the process of handling threat alerts from SentinelOne. When an alert is triggered, the workflow maps the alert fields to a predefined case layout, ensuring all relevant information is captured. It then creates a new case within Torq using the detailed mappings. By automating case creation with precise field mapping, this template enhances the efficiency of security incident responses and streamlines case management workflows for organizations.
Trigger
SentinelOne
Use Cases
Case Management
Workflow Breakdown
Receives an alert event on a SentinelOne Trigger.
Map alert fields to a predefined case layout.
Creates a new case for the alert with a predefined layout.
Vendors
Utils, Torq Cases
Tips