Torq

SentinelOne delivers autonomous security for endpoints, data centers, and cloud environments to help organizations secure their assets. 

Use the SentinelOne integration to interact with core aspects directly from Torq workflows.

Create a SentinelOne Trigger Integration in Torq

Go to Build &gt; Integrations &gt; Triggers &gt; SentinelOne and click Add.

Give the trigger a meaningful name. You will not be able to change this later. 

Under Authentication Headers click Add.

1. Click Generate Random Secret and save the secret created.

1. Go to Build &gt; Integrations &gt; Triggers &gt; SentinelOne and click Add.
2. Give the trigger a meaningful name. You will not be able to change this later. 
3. Under Authentication Headers click Add. 
 1. Click Generate Random Secret and save the secret created. 
4. Click Add.

In the upper-right corner, click the arrow next to your user name and select My User.

Click Generate next to the API token.

Download and copy the API key for later use. 

1. Log in to your SentinelOne portal.
2. In the upper-right corner, click the arrow next to your user name and select My User.

3. Click Generate next to the API token. 

4. Download and copy the API key for later use.

Create a SentinelOne Steps Integration in Torq

To create the steps integration, you'll need your SentinelOne API key and the management URL

Go to Build &gt; Integrations &gt; Steps &gt; SentinelOne and click Add.

Give the integration a meaningful name. This cannot be changed later.

Enter the API key you <a href="#h_f0ed817595">created earlier</a>.

Enter your management URL without the <code>https://</code> prefix. For example, <code>&lt;company-name&gt;.sentineleone.net</code>

1. Go to Build &gt; Integrations &gt; Steps &gt; SentinelOne and click Add.
2. Give the integration a meaningful name. This cannot be changed later.
3. Enter the API key you <a href="#h_f0ed817595">created earlier</a>.
4. Enter your management URL without the <code>https://</code> prefix. For example, <code>&lt;company-name&gt;.sentineleone.net</code> 
5. Click Add.

- Add note to threats
- Broadcast message
- Cancel deep visibility query
- Connect to network
- Create blacklist item
- Create deep visibility query
- Create exclusion
- Create firewall control rule
- Create hash exclusion
- Delete blacklist item
- Delete exclusion
- Delete firewall rule by ID
- Disconnect from network
- Download file from activity
- Execute remote script
- Fetch file from agent
- Fetch threat file
- Get account policy
- Get agents
- Get blacklist items
- Get deep visibility events
- Get deep visibility query status
- Get exclusions
- Get firewall control protocols
- Get firewall control rules
- Get group policy
- Get notes for threat
- Get ranger table view
- Get recent threats
- Get remote script task status
- Get script results URL
- Get site
- Get site policy
- Get threats
- Initiate scan
- List activities
- List activity types
- List alerts
- List remote scripts
- List sites
- Mitigate threats
- Restart machine
- Update alert analyst verdict
- Update alert threat incident
- Update blacklist item
- Update firewall control rule
- Update hash exclusion
- Update threat incident
- Upload logs
   

Secure assets with SentinelOne's unified AI-driven platform and Torq's automated workflows.

Create a SentinelOne Trigger Integration in Torq

Create a SentinelOne API key

Create a SentinelOne Steps Integration in Torq

Premade Steps