SentinelOne icon

SentinelOne

SentinelOne Management Console API specification.

Actions281

Threats → Export Mitigation Report

AI-generated

Overview

This node interacts with the SentinelOne API to export a mitigation report for a specified threat report ID. It is useful for security analysts and IT administrators who need to retrieve detailed mitigation reports in CSV format for further analysis or record-keeping. For example, after a threat has been mitigated, the node can be used to download the mitigation report to review the actions taken and outcomes.

Use Case Examples

  1. Export a mitigation report for a specific threat report ID to analyze the mitigation steps taken by SentinelOne agents.
  2. Download mitigation reports regularly for compliance and auditing purposes.

Properties

Name Meaning
Report Id The unique identifier of the mitigation report to export. This is a required string input.

Output

JSON

  • data - The mitigation report data, typically in CSV format or as provided by the API response.

Dependencies

  • An API key credential for authenticating with the SentinelOne Management Console API.

Troubleshooting

  • Ensure the provided Report Id is valid and exists in the SentinelOne system.
  • Check API credentials and permissions to confirm the node can access the mitigation report endpoint.
  • Verify network connectivity to the SentinelOne API endpoint.
  • If the node returns an error about rate limiting, consider adjusting batching or request intervals in the node options.

Links

Discussion