Skip to content

Commit

Permalink
Add docs on SentinelOne integration
Browse files Browse the repository at this point in the history
  • Loading branch information
misterpantz committed Jan 14, 2025
1 parent 5e11281 commit 4b33d3b
Showing 1 changed file with 80 additions and 0 deletions.
80 changes: 80 additions & 0 deletions docs/platform/infra/imports/sentinelone.mdx
Original file line number Diff line number Diff line change
@@ -0,0 +1,80 @@
---
title: Import Data from SentinelOne
sidebar_label: SentinelOne
sidebar_position: 20
description: Import data from SentinelOne to combine SentinelOne vulnerabilities with your Mondoo security findings.
image: /img/featured_img/mondoo-feature.jpg
---

Mondoo can import data from SentinelOne and incorporate that data with your security findings. With a unified view of SentinelOne's vulnerabilities and Mondoo scan results, you can take advantage of Mondoo's powerful security visualization, prioritization, and ticket system integration.

## Prerequisites

Before you integrate SentinelOne with Mondoo, be sure you have:

- A Mondoo account with Editor or Owner permissions for the space in which you want to add the integration

- A [SentinelOne account](??????) with DEETS

Check warning on line 17 in docs/platform/infra/imports/sentinelone.mdx

View workflow job for this annotation

GitHub Actions / Run spell check

`DEETS` is not a recognized word. (unrecognized-spelling)

- access DEETS

Check warning on line 19 in docs/platform/infra/imports/sentinelone.mdx

View workflow job for this annotation

GitHub Actions / Run spell check

`DEETS` is not a recognized word. (unrecognized-spelling)


## Integrate Mondoo with SentinelOne

To create a new SentinelOne integration in Mondoo, perform these steps:

Step A: Create a SentinelOne DEETS to give Mondoo access to SentinelOne data

Check warning on line 26 in docs/platform/infra/imports/sentinelone.mdx

View workflow job for this annotation

GitHub Actions / Run spell check

`DEETS` is not a recognized word. (unrecognized-spelling)

Step B: Add a new SentinelOne integration in the Mondoo Console

### Step A: Create a SentinelOne DEETS

Check warning on line 30 in docs/platform/infra/imports/sentinelone.mdx

View workflow job for this annotation

GitHub Actions / Run spell check

`DEETS` is not a recognized word. (unrecognized-spelling)

Like any service that integrates with SentinelOne, Mondoo must have a DEETS that gives it access to SentinelOne data. To learn about DEETS

Check warning on line 32 in docs/platform/infra/imports/sentinelone.mdx

View workflow job for this annotation

GitHub Actions / Run spell check

`DEETS` is not a recognized word. (unrecognized-spelling)

1. Log into the SentinelOne console as a DEETS.

![DEETS](/img/platform/infra/imports/sentinelone/DEETS.png)

2.

### Step B: Add a new SentinelOne integration in the Mondoo Console

After you've created your new API client, you can create a Mondoo SentinelOne integration. You need information from the DEETS you created in the instructions above.

1. Access the Integrations > Add > SentinelOne page in one of two ways:

- New space setup: After creating a new Mondoo account or creating a new space, the initial setup guide welcomes you. Select **BROWSE INTEGRATIONS** and then select **SentinelOne**.

![Welcome to Mondoo Page](/img/platform/start/welcome_to_mondoo.png)

- INTEGRATIONS page: In the side navigation bar, under **INTEGRATIONS**, select **Add New Integration**. Under Third-Party Data, select **SentinelOne**.

SCRNSHOT

Check warning on line 52 in docs/platform/infra/imports/sentinelone.mdx

View workflow job for this annotation

GitHub Actions / Run spell check

`SCRNSHOT` is not a recognized word. (unrecognized-spelling)

2. In the **Choose an integration name** box, enter a name for the integration.

3. DEETS

7. Select the **START IMPORTING** button.

Mondoo begins connecting to DEETS and collecting data.

## View, edit, or remove a SentinelOne integration

1. In the left navigation, under **Integrations**, select **All Integrations**.

2. Select **SentinelOne** and then select the integration you want.

![Mondoo SentinelOne integration] SCRNSHT

Check warning on line 68 in docs/platform/infra/imports/sentinelone.mdx

View workflow job for this annotation

GitHub Actions / Run spell check

`SCRNSHT` is not a recognized word. (unrecognized-spelling)

3. Use the options in near the top-right corner of the page:

- To change the integration settings, select the edit (pencil) icon.

- To import data from SentinelOne as soon as possible, select the **SCHEDULE NOW** button.

- To pause or resume importing data from SentinelOne, select the ellipsis (...) menu and then select Pause Imports or Resume Imports.

- To remove the integration, select the delete (trash can) icon.

---

0 comments on commit 4b33d3b

Please sign in to comment.