SentinelOne icon

SentinelOne

SentinelOne Management Console API specification.

Actions281

Threats → Update Threat Note

AI-generated

Overview

This node updates the text of a specific threat note in the SentinelOne Management Console. It is useful for security analysts or administrators who want to modify or add information to existing threat notes for better tracking and documentation. For example, after investigating a threat, an analyst can update the note to include findings or remediation steps.

Use Case Examples

  1. Updating a threat note to add new investigation details.
  2. Correcting or clarifying information in an existing threat note.

Properties

Name Meaning
Note Id The unique identifier of the threat note to update.
Threat Id The unique identifier of the threat to which the note belongs.
Options Additional optional parameters such as custom request body, headers, query filters, batching, debug mode, pagination, and timeout settings.

Output

JSON

  • json - The response from the API after updating the threat note.

Dependencies

  • An API key credential for SentinelOne Management Console API

Troubleshooting

  • Ensure that the Note Id and Threat Id are correct and exist in the SentinelOne system.
  • Check API credentials and permissions to update threat notes.
  • Enable debug mode to see the actual request and response for troubleshooting.
  • Handle API rate limits by configuring batching and intervals.

Links

Discussion