Overview

This node operation allows users to add a note to multiple threat records in the SentinelOne system. It is useful for security analysts or administrators who want to annotate or comment on multiple threats simultaneously, facilitating better tracking and management of threat information.

Use Case Examples

1. A security analyst wants to add a common note to several related threats to document an ongoing investigation.
2. An administrator needs to add a reminder note to multiple threats for follow-up actions.

Properties

Output

JSON

• json
  • debug - Debug information including URL, query parameters, headers, and body sent with the API request (if debug is enabled)

Dependencies

• An API key credential for SentinelOne API authentication

Troubleshooting

• Ensure the API credentials are correctly configured and have the necessary permissions to add notes to threats.
• Check the format of the custom JSON body if used, to avoid JSON parsing errors.
• If batching is used, verify batch size and interval to avoid rate limiting issues.
• Enable debug mode to get detailed request and response information for troubleshooting.