SentinelOne

SentinelOne Management Console API specification.

Actions281

Accounts Actions
- Account Policy
- Update Account Policy
- GenerateRegenerate Uninstall Password
- Get Uninstall Password Metadata
- Revoke Uninstall Password
- Get Uninstall Password
- Get Account by ID
- Update Account
- Expire an Account
- Reactivate Account
- Revert Policy
- Get Accounts
- Create Account
- Get accounts private
- Available Name
- Get Accounts for Navigation
- Get One Account
Policy Actions
- Account Policy
- Update Account Policy
- Group Policy
- Update Group Policy
- Get Policy
- Create Policy
- Site Policy
- Update Site Policy
UninstallPassword Actions
- GenerateRegenerate Uninstall Password
- Get Uninstall Password Metadata
- Revoke Uninstall Password
- Get Uninstall Password
Activities Actions
- Get Activities
- Get Activity Types
Agents Actions
- Abort Scan
- Approve Uninstall
- Broadcast Message
- Can run Remote Shell
- Clear Remote Shell
- Connect to Network
- Decommission
- Disable Agent
- Disconnect from Network
- Enable Agent
- Fetch Firewall Rules
- Get Installed Apps for agent
- Initiate Scan
- Mark as uptodate
- Move to Console
- Move between Sites
- Randomize UUID
- Disable Ranger
- Enable Ranger
- Reject uninstall
- Reset Local Config
- Set Persistent Configuration Overrides
- Set External ID
- Shutdown
- Start Remote Profiling
- Start Remote Shell
- Stop Remote Profiling
- Uninstall
- Update Software
- Fetch Files
- Export Agent Logs
- Get Agents
- Get Application
- Count Agents
- Get Passphrase
- Processes
- DEPRECATED Get Agent Available Actions
- Get Agent Available Actions
- Event Throttling
- Flush Event Queue
- Protect
- Purge Crash Dumps
- Purge DB
- Purge Research Data
- Reload
- Restart
- Revoke Token
- Send Crash Dumps
- Send Research Data
- Unprotect
- Randomize DV Host
- Auto Complete
- Count by Filters
- FreeText Filters
- Count Summary
- Get config
Actions Actions
- Abort Scan
- Approve Uninstall
- Broadcast Message
- Can run Remote Shell
- Clear Remote Shell
- Connect to Network
- Decommission
- Disable Agent
- Disconnect from Network
- Enable Agent
- Fetch Firewall Rules
- Get Installed Apps for agent
- Fetch Logs
- Fetch Firewall Logs
- Initiate Scan
- Mark as uptodate
- Move to Console
- Move between Sites
- Randomize UUID
- Disable Ranger
- Enable Ranger
- Reject uninstall
- Reset Local Config
- Restart
- Set Persistent Configuration Overrides
- Set External ID
- Shutdown
Settings Actions
- Test SMTP Settings
- Get SSO Settings
- Set SSO Settings
- Test SSO Settings
- Get Syslog Settings
- Set Syslog Settings
- Test Syslog Settings
Tasks Actions
- Get tasks
- Cancel Tasks
- Auto complete
- Count Tasks by Filters
- Freetext filters
Threats Actions
- Get Enriched Events
- Count Events by Type
- Get Process Event
- Prefetch events
- Get Timeline Limits
- Get Tree
- Threat Analysis
- Threat Appearances
- Connect Agents
- Disconnect Agents
- Get Threat Available Actions
- Create Slim Threat
- Add to Blacklist Deep Visibility
- Mark as Threat Deep Visibility
- Auto Complete
- Count by Filters
- FreeText Filters
- Create Deep Visibility Threat
- Multiple actions for Threats
- Threat Summary
- Get Timeline Categories
- Update Threat Note
- Delete Threat Note
- Get Threat Notes
- Download from cloud
- Get Events
- Get Threat Timeline
- Exclusion Options
- Get Threats
- Add to Blacklist
- Add to Exclusions
- Update Threat Analyst Verdict
- Disable Engines
- Export Threats
- Update Threat External Ticket ID
- Fetch Threat File
- Updated Threat Incident
- Mitigate Threats
- Export Mitigation Report
- Add Note to Multiple
Explore Actions
- Get Enriched Events
- Count Events by Type
- Get Process Event
- Prefetch events
- Get Timeline Limits
- Get Tree
Users Actions
- iFrame Token Details
- Login by iFrame Token
- Get Token
- Revoke iFrame Token
- Disable 2FA
- Enable 2FA
- Auth App
- Sign EULA
- Auth Recovery Code
- Redirect to SSO
- Auth by SSO
- Login
- Login by API Token
- Login by Token
- Send Verification Email
- Validate Verification Token
- Email Verification
- Get User
- Update User
- Delete User
- API Token by User ID
- List users
- Create User
- API Token Details
- Change Password
- Bulk Delete Users
- Enable 2FA App
- Generate API Token
- Generate iFrame Token
- Generate Recovery Code
- Check Global User
Details Actions
- Delete Cred Group Detail
- Get Cred group details
- Add cred details
DeviceReview Actions
- Change Device Review in Bulk
- Change Device Review
Rbac Actions
- Get Specific Role Definition
- Update role
- Delete role
- Get template for new role
- Create new role
- Get All Roles
Role Actions
- Get Specific Role Definition
- Update role
- Delete role
- Get template for new role
- Create new role
RemoteScripts Actions
- Get scripts
- Upload a new script
- Run remote script
ReportTasks Actions
- Get Report Tasks
- Create Report Task
- Update Report Task
Reports Actions
- Get Reports
- Delete Reports
- Delete Report Tasks
- Get Insight Reports
- Download Report
ActiveDirectory Actions
- Get AD FQDNs
- Set AD FQDNs
- Get AD Settings
Microsoft Actions
- Test Microsoft Settings
Notifications Actions
- Get Notification Settings
- Set Notification Settings
- Clear Pending Emails
Recipients Actions
- Get Notification Recipients
- Set Notification Recipients
- Delete Notification Recipient
Sms Actions
- Get SMS Settings
- Set SMS Settings
Smtp Actions
- Get SMTP Settings
- Set SMTP Settings
- Test SMTP Settings
Sso Actions
- Get SSO Settings
- Set SSO Settings
- Test SSO Settings
Notes Actions
- Get Threat Notes
Download Actions
- Download Agent Package
- Download Package
Packages Actions
- Get Latest Packages
- Delete Packages
- Update package
Update Actions
- Latest Packages by OS
Upload Actions
- Upload System Package
- Deploy System Package
- Upload Agent Package
Software Actions
- Upload System Package
- Deploy System Package
2fa Actions
- Disable 2FA
- Enable 2FA
Auth Actions
- Auth App
- Sign EULA
- Auth Recovery Code
Login Actions
- Redirect to SSO
- Auth by SSO
- Login
- Login by API Token
- Login by Token
SsoSaml2 Actions
- Redirect to SSO
Onboarding Actions
- Send Verification Email
- Validate Verification Token
- Email Verification
ApplicationInventory Actions
- Grouped app inventory
ApplicationInventoryCounts Actions
- Counters
LastActivityAsSyslog Actions
- Last activity as Syslog message
Sentinelonerss Actions
- S1 RSS Feed
SiteWithAdmin Actions
- Create Site and User
Tests Actions
- FreeText Filters
User Actions
- User by token

Actions → Broadcast Message

No explanation available for this operation.

Discussion