SentinelOne

To attach SentinelOne to your instance of Prelude, you will need 3 items:

• Base URL
• Site ID
• API Secret

You can attach SentinelOne using the prelude cli or the Detect console.

Prelude CLI

prelude partner attach sentinelone --api <https://usea1-partners.sentinelone.net> --user <SiteID> --secret <API Secret>

Detect Console - User--Integrations

Obtain BaseURL

1. Login to Sentinel One
2. Click on Help -> API Doc
3. Expand Accounts -> Click on Create Account
4. Click run on console
5. Click Run API query
6. The URL will be displayed. Click Copy URL.
   An example provided URL: https://usea1-partners.sentinelone.net/web/api/v2.1/accounts
   Remove everything after the .net: https://usea1-partners.sentinelone.net

Obtain Site ID

1. Login to Sentinel One
2. Click on Settings
3. Click on the Sites tab
4. Click on the Name of the site you want to use ie: Default site
5. The Site ID is displayed. Copy Site ID

Obtain API Secret

1. Login to Sentinel One
2. Click on Settings
3. Click on Users tab
4. Click on your console user -> you’ll see a modal for the selected user
5. Click on the Actions drop down -> API Token Operations -> Generate API token
   Your API Token is displayed. Copy and save the token securely, this token will not be available to view again without creating a new one.