feat(marketplace): prefix official command names with the technology

Rename every command 'name' in the official integrations to a
<technology>-<command> slug (e.g. sentinelone-isolate-agent,
harfanglab-isolate-endpoint) so they group together when searching the
toolbox. Command IDs (and thus script files and action refs) are unchanged.
Bump both integrations to 1.1.0.
This commit is contained in:
2026-06-22 14:41:22 +02:00
parent 6b65c5f9df
commit e3e363c2f9
2 changed files with 145 additions and 145 deletions
+72 -72
View File
@@ -1,8 +1,8 @@
id: sentinelone
name: SentinelOne
version: 1.0.0
version: 1.1.0
description: "SentinelOne Singularity (API v2.1) — endpoint detection & response: triage threats, enrich, isolate/reconnect hosts, mitigate, scan."
changelog: "1.0.0 — Initial release: 70 commands covering agents, threats, alerts, blocklist/exclusions, IOCs, STAR rules, Deep Visibility, remote scripts, tags, firewall and network discovery based on the SentinelOne API v2.1."
changelog: "1.1.0 — Command names prefixed with 'sentinelone-' (e.g. sentinelone-isolate-agent) for easier toolbox search; command IDs unchanged. 1.0.0 — Initial release: 70 commands covering agents, threats, alerts, blocklist/exclusions, IOCs, STAR rules, Deep Visibility, remote scripts, tags, firewall and network discovery based on the SentinelOne API v2.1."
category: endpoint
# Per-instance configuration. The scripts build the API base as <url>/web/api/v2.1.
@@ -32,7 +32,7 @@ auth:
commands:
# ── Enrichment / read ─────────────────────────────────────────────────────
- id: get_threats
name: Get threats
name: sentinelone-get-threats
description: List threats/detections matching filters.
inputs_schema:
properties:
@@ -45,7 +45,7 @@ commands:
outputs_schema: { properties: {} }
- id: list_agents
name: List agents
name: sentinelone-list-agents
description: List endpoints (agents) matching filters.
inputs_schema:
properties:
@@ -57,7 +57,7 @@ commands:
outputs_schema: { properties: {} }
- id: get_agent
name: Get agent
name: sentinelone-get-agent
description: Get details for one or more agents by ID.
inputs_schema:
properties:
@@ -66,7 +66,7 @@ commands:
outputs_schema: { properties: {} }
- id: get_hash_verdict
name: Get hash verdict
name: sentinelone-get-hash-verdict
description: Reputation verdict for a SHA1 hash.
inputs_schema:
properties:
@@ -76,7 +76,7 @@ commands:
# ── Response ──────────────────────────────────────────────────────────────
- id: isolate_agent
name: Isolate agent (disconnect)
name: sentinelone-isolate-agent
description: Disconnect agents from the network.
inputs_schema:
properties:
@@ -85,7 +85,7 @@ commands:
outputs_schema: { properties: {} }
- id: reconnect_agent
name: Reconnect agent
name: sentinelone-reconnect-agent
description: Reconnect agents to the network.
inputs_schema:
properties:
@@ -94,7 +94,7 @@ commands:
outputs_schema: { properties: {} }
- id: mitigate_threat
name: Mitigate threat
name: sentinelone-mitigate-threat
description: Apply a mitigation action to threats (kill, quarantine, remediate, rollback).
inputs_schema:
properties:
@@ -104,7 +104,7 @@ commands:
outputs_schema: { properties: {} }
- id: initiate_scan
name: Initiate endpoint scan
name: sentinelone-initiate-scan
description: Start a full disk scan on agents.
inputs_schema:
properties:
@@ -113,7 +113,7 @@ commands:
outputs_schema: { properties: {} }
- id: write_threat_note
name: Add threat note
name: sentinelone-write-threat-note
description: Add a note to one or more threats.
inputs_schema:
properties:
@@ -124,7 +124,7 @@ commands:
# ── Agents: actions & info ────────────────────────────────────────────────
- id: shutdown_agent
name: Shutdown agent
name: sentinelone-shutdown-agent
description: "Send a shutdown command to agents matching the filter."
inputs_schema:
properties:
@@ -134,7 +134,7 @@ commands:
required: []
outputs_schema: { properties: {} }
- id: uninstall_agent
name: Uninstall agent
name: sentinelone-uninstall-agent
description: "Send an uninstall command to agents matching the filter."
inputs_schema:
properties:
@@ -144,7 +144,7 @@ commands:
required: []
outputs_schema: { properties: {} }
- id: broadcast_message
name: Broadcast message
name: sentinelone-broadcast-message
description: "Broadcast a message to agents matching the filter."
inputs_schema:
properties:
@@ -155,7 +155,7 @@ commands:
required: [message]
outputs_schema: { properties: {} }
- id: enable_agent
name: Enable agent
name: sentinelone-enable-agent
description: "Enable agents matching the given IDs, optionally rebooting them."
inputs_schema:
properties:
@@ -164,7 +164,7 @@ commands:
required: [agent_ids]
outputs_schema: { properties: {} }
- id: move_agent
name: Move agent
name: sentinelone-move-agent
description: "Move agents into the specified group."
inputs_schema:
properties:
@@ -173,7 +173,7 @@ commands:
required: [group_id, agents_ids]
outputs_schema: { properties: {} }
- id: count_agents
name: Count agents
name: sentinelone-count-agents
description: "Count agents matching the given filters."
inputs_schema:
properties:
@@ -185,7 +185,7 @@ commands:
required: []
outputs_schema: { properties: {} }
- id: get_agent_mac
name: Get agent MAC addresses
name: sentinelone-get-agent-mac
description: "Retrieve network interfaces (IP and MAC) for a single agent."
inputs_schema:
properties:
@@ -193,7 +193,7 @@ commands:
required: [agent_id]
outputs_schema: { properties: {} }
- id: get_installed_applications
name: Get installed applications
name: sentinelone-get-installed-applications
description: "Retrieve the applications installed on the given agents."
inputs_schema:
properties:
@@ -201,7 +201,7 @@ commands:
required: [agent_ids]
outputs_schema: { properties: {} }
- id: manage_tags
name: Manage tags
name: sentinelone-manage-tags
description: "Add, override or remove a tag on the given agents."
inputs_schema:
properties:
@@ -213,7 +213,7 @@ commands:
# ── Threats & Alerts ──────────────────────────────────────────────────────
- id: resolve_threat
name: Resolve threat
name: sentinelone-resolve-threat
description: "Mark one or more threats as resolved."
inputs_schema:
properties:
@@ -221,7 +221,7 @@ commands:
required: [threat_ids]
outputs_schema: { properties: {} }
- id: mark_as_threat
name: Mark as threat
name: sentinelone-mark-as-threat
description: "Mark detections as a true threat, scoped to a site or the whole tenant."
inputs_schema:
properties:
@@ -230,7 +230,7 @@ commands:
required: [threat_ids, target_scope]
outputs_schema: { properties: {} }
- id: update_threats_verdict
name: Update threats verdict
name: sentinelone-update-threats-verdict
description: "Set the analyst verdict on one or more threats."
inputs_schema:
properties:
@@ -239,7 +239,7 @@ commands:
required: [verdict, threat_ids]
outputs_schema: { properties: {} }
- id: update_threats_status
name: Update threats status
name: sentinelone-update-threats-status
description: "Set the incident status on one or more threats."
inputs_schema:
properties:
@@ -248,7 +248,7 @@ commands:
required: [status, threat_ids]
outputs_schema: { properties: {} }
- id: get_threat_notes
name: Get threat notes
name: sentinelone-get-threat-notes
description: "Retrieve the notes attached to a single threat."
inputs_schema:
properties:
@@ -256,7 +256,7 @@ commands:
required: [threat_id]
outputs_schema: { properties: {} }
- id: get_threat_summary
name: Get threat summary
name: sentinelone-get-threat-summary
description: "Retrieve a dashboard threat summary, optionally filtered by site and group."
inputs_schema:
properties:
@@ -265,7 +265,7 @@ commands:
required: []
outputs_schema: { properties: {} }
- id: fetch_threat_file
name: Fetch threat file
name: sentinelone-fetch-threat-file
description: "Request the threat file for download, protected by a ZIP password."
inputs_schema:
properties:
@@ -274,7 +274,7 @@ commands:
required: [threat_id, password]
outputs_schema: { properties: {} }
- id: get_alerts
name: Get alerts
name: sentinelone-get-alerts
description: "Retrieve cloud-detection alerts filtered by creation window and optional criteria."
inputs_schema:
properties:
@@ -289,7 +289,7 @@ commands:
required: [created_from]
outputs_schema: { properties: {} }
- id: update_alerts_verdict
name: Update alerts verdict
name: sentinelone-update-alerts-verdict
description: "Set the analyst verdict on one or more cloud-detection alerts."
inputs_schema:
properties:
@@ -298,7 +298,7 @@ commands:
required: [verdict, alert_ids]
outputs_schema: { properties: {} }
- id: update_alerts_status
name: Update alerts status
name: sentinelone-update-alerts-status
description: "Set the incident status on one or more cloud-detection alerts."
inputs_schema:
properties:
@@ -309,7 +309,7 @@ commands:
# ── Hash, blocklist, exclusions, IOCs ─────────────────────────────────────
- id: get_blocklist
name: Get blocklist
name: sentinelone-get-blocklist
description: "Retrieve hash blocklist (restriction) entries, optionally filtered by hash, scope, and pagination."
inputs_schema:
properties:
@@ -323,7 +323,7 @@ commands:
required: []
outputs_schema: { properties: {} }
- id: add_hash_to_blocklist
name: Add hash to blocklist
name: sentinelone-add-hash-to-blocklist
description: "Add a SHA1 or SHA256 hash to the blocklist for the given scope."
inputs_schema:
properties:
@@ -338,7 +338,7 @@ commands:
required: [os_type]
outputs_schema: { properties: {} }
- id: remove_hash_from_blocklist
name: Remove hash from blocklist
name: sentinelone-remove-hash-from-blocklist
description: "Find blocklist entries matching a SHA1 hash and delete them."
inputs_schema:
properties:
@@ -347,7 +347,7 @@ commands:
required: [sha1]
outputs_schema: { properties: {} }
- id: get_white_list
name: Get exclusions (white list)
name: sentinelone-get-white-list
description: "Retrieve exclusion items, optionally filtered by IDs, type, OS, and scope."
inputs_schema:
properties:
@@ -361,7 +361,7 @@ commands:
required: []
outputs_schema: { properties: {} }
- id: create_white_list_item
name: Create exclusion item
name: sentinelone-create-white-list-item
description: "Create an exclusion (whitelist) item of the given type and value."
inputs_schema:
properties:
@@ -376,7 +376,7 @@ commands:
required: [exclusion_type, exclusion_value, os_type]
outputs_schema: { properties: {} }
- id: remove_item_from_whitelist
name: Remove exclusion item
name: sentinelone-remove-item-from-whitelist
description: "Find exclusion items matching a value and delete them."
inputs_schema:
properties:
@@ -386,7 +386,7 @@ commands:
required: [item]
outputs_schema: { properties: {} }
- id: delete_exclusion
name: Delete exclusion
name: sentinelone-delete-exclusion
description: "Delete exclusion items by their IDs and type."
inputs_schema:
properties:
@@ -395,7 +395,7 @@ commands:
required: [ids, type]
outputs_schema: { properties: {} }
- id: create_ioc
name: Create IOC
name: sentinelone-create-ioc
description: "Create a threat-intelligence IOC for the given account scope."
inputs_schema:
properties:
@@ -411,7 +411,7 @@ commands:
required: [name, source, type, method, validUntil, value, account_ids]
outputs_schema: { properties: {} }
- id: delete_ioc
name: Delete IOC
name: sentinelone-delete-ioc
description: "Delete threat-intelligence IOCs by UUID within the given account scope."
inputs_schema:
properties:
@@ -420,7 +420,7 @@ commands:
required: [account_ids, uuids]
outputs_schema: { properties: {} }
- id: get_iocs
name: Get IOCs
name: sentinelone-get-iocs
description: "Retrieve threat-intelligence IOCs, optionally filtered by type, value, source, and name."
inputs_schema:
properties:
@@ -435,7 +435,7 @@ commands:
# ── Sites, groups, accounts, users, Deep Visibility ───────────────────────
- id: get_activities
name: Get activities
name: sentinelone-get-activities
description: "Retrieve activities, optionally filtered by date, agents, or threats."
inputs_schema:
properties:
@@ -446,7 +446,7 @@ commands:
required: []
outputs_schema: { properties: {} }
- id: get_groups
name: Get groups
name: sentinelone-get-groups
description: "List groups with optional filters."
inputs_schema:
properties:
@@ -459,7 +459,7 @@ commands:
required: []
outputs_schema: { properties: {} }
- id: delete_group
name: Delete group
name: sentinelone-delete-group
description: "Delete a group by its ID."
inputs_schema:
properties:
@@ -467,7 +467,7 @@ commands:
required: [group_id]
outputs_schema: { properties: {} }
- id: get_sites
name: Get sites
name: sentinelone-get-sites
description: "List sites with optional filters."
inputs_schema:
properties:
@@ -480,7 +480,7 @@ commands:
required: []
outputs_schema: { properties: {} }
- id: get_site
name: Get site
name: sentinelone-get-site
description: "Retrieve a single site by its ID."
inputs_schema:
properties:
@@ -488,7 +488,7 @@ commands:
required: [site_id]
outputs_schema: { properties: {} }
- id: reactivate_site
name: Reactivate site
name: sentinelone-reactivate-site
description: "Reactivate an expired site."
inputs_schema:
properties:
@@ -498,7 +498,7 @@ commands:
required: [site_id]
outputs_schema: { properties: {} }
- id: expire_site
name: Expire site
name: sentinelone-expire-site
description: "Expire a site immediately."
inputs_schema:
properties:
@@ -506,7 +506,7 @@ commands:
required: [site_id]
outputs_schema: { properties: {} }
- id: get_accounts
name: Get accounts
name: sentinelone-get-accounts
description: "List all accounts, or retrieve a single account when an ID is provided."
inputs_schema:
properties:
@@ -514,7 +514,7 @@ commands:
required: []
outputs_schema: { properties: {} }
- id: list_users
name: List users
name: sentinelone-list-users
description: "List users, optionally filtered by account IDs."
inputs_schema:
properties:
@@ -523,7 +523,7 @@ commands:
required: []
outputs_schema: { properties: {} }
- id: delete_user
name: Delete user
name: sentinelone-delete-user
description: "Delete a user by their ID."
inputs_schema:
properties:
@@ -531,7 +531,7 @@ commands:
required: [user_id]
outputs_schema: { properties: {} }
- id: create_query
name: Create DV query
name: sentinelone-create-query
description: "Initialize a Deep Visibility query over a given time range."
inputs_schema:
properties:
@@ -541,7 +541,7 @@ commands:
required: [query, from_date, to_date]
outputs_schema: { properties: {} }
- id: get_dv_query_status
name: Get DV query status
name: sentinelone-get-dv-query-status
description: "Get the status of a Deep Visibility query by ID."
inputs_schema:
properties:
@@ -549,7 +549,7 @@ commands:
required: [query_id]
outputs_schema: { properties: {} }
- id: get_events
name: Get DV events
name: sentinelone-get-events
description: "Retrieve events for a completed Deep Visibility query."
inputs_schema:
properties:
@@ -559,7 +559,7 @@ commands:
required: [query_id]
outputs_schema: { properties: {} }
- id: get_processes
name: Get DV processes
name: sentinelone-get-processes
description: "Retrieve process events for a completed Deep Visibility query."
inputs_schema:
properties:
@@ -570,7 +570,7 @@ commands:
# ── STAR rules & advanced (remote scripts, tags, firewall, discovery) ──────
- id: create_star_rule
name: Create STAR rule
name: sentinelone-create-star-rule
description: "Create a STAR custom detection rule in Draft status."
inputs_schema:
properties:
@@ -589,7 +589,7 @@ commands:
required: [name, query, rule_severity, expiration_mode, network_quarantine, treatAsThreat]
outputs_schema: { properties: {} }
- id: get_star_rules
name: Get STAR rules
name: sentinelone-get-star-rules
description: "List STAR custom detection rules."
inputs_schema:
properties:
@@ -603,7 +603,7 @@ commands:
required: []
outputs_schema: { properties: {} }
- id: update_star_rule
name: Update STAR rule
name: sentinelone-update-star-rule
description: "Update an existing STAR custom detection rule by ID."
inputs_schema:
properties:
@@ -624,7 +624,7 @@ commands:
required: [rule_id, name, query, rule_severity, expiration_mode, network_quarantine, treatAsThreat]
outputs_schema: { properties: {} }
- id: enable_star_rules
name: Enable STAR rules
name: sentinelone-enable-star-rules
description: "Enable one or more STAR custom detection rules by ID."
inputs_schema:
properties:
@@ -632,7 +632,7 @@ commands:
required: [rule_ids]
outputs_schema: { properties: {} }
- id: disable_star_rules
name: Disable STAR rules
name: sentinelone-disable-star-rules
description: "Disable one or more STAR custom detection rules by ID."
inputs_schema:
properties:
@@ -640,7 +640,7 @@ commands:
required: [rule_ids]
outputs_schema: { properties: {} }
- id: delete_star_rule
name: Delete STAR rule
name: sentinelone-delete-star-rule
description: "Delete one or more STAR custom detection rules by ID."
inputs_schema:
properties:
@@ -648,7 +648,7 @@ commands:
required: [rule_ids]
outputs_schema: { properties: {} }
- id: run_remote_script
name: Run remote script
name: sentinelone-run-remote-script
description: "Execute a remote script (RSO) on the targeted agents."
inputs_schema:
properties:
@@ -664,7 +664,7 @@ commands:
required: [account_ids, script_id, output_destination, task_description]
outputs_schema: { properties: {} }
- id: create_endpoint_tag
name: Create endpoint tag
name: sentinelone-create-endpoint-tag
description: "Create an endpoint tag in the tag manager."
inputs_schema:
properties:
@@ -679,7 +679,7 @@ commands:
required: [type, key]
outputs_schema: { properties: {} }
- id: delete_endpoint_tag
name: Delete endpoint tag
name: sentinelone-delete-endpoint-tag
description: "Delete endpoint tags matching the given scope filter."
inputs_schema:
properties:
@@ -690,7 +690,7 @@ commands:
required: []
outputs_schema: { properties: {} }
- id: get_endpoint_tags
name: Get endpoint tags
name: sentinelone-get-endpoint-tags
description: "List endpoint tags, optionally filtered by key or value substring."
inputs_schema:
properties:
@@ -699,7 +699,7 @@ commands:
required: []
outputs_schema: { properties: {} }
- id: create_firewall_rule
name: Create firewall rule
name: sentinelone-create-firewall-rule
description: "Create a firewall control rule scoped to an account or site."
inputs_schema:
properties:
@@ -714,7 +714,7 @@ commands:
required: [action, name, status, description, direction, filter_type, filter_id]
outputs_schema: { properties: {} }
- id: get_network_discovery_table
name: Get network discovery table
name: sentinelone-get-network-discovery-table
description: "Retrieve the Ranger network discovery table view."
inputs_schema:
properties:
@@ -724,7 +724,7 @@ commands:
required: []
outputs_schema: { properties: {} }
- id: get_network_discovery_assets
name: Get network discovery assets
name: sentinelone-get-network-discovery-assets
description: "Retrieve XDR network discovery surface assets."
inputs_schema:
properties:
@@ -736,7 +736,7 @@ commands:
required: []
outputs_schema: { properties: {} }
- id: get_shadow_assets
name: Get shadow assets
name: sentinelone-get-shadow-assets
description: "Retrieve XDR shadow assets with optional coverage filters."
inputs_schema:
properties:
@@ -749,14 +749,14 @@ commands:
required: []
outputs_schema: { properties: {} }
- id: get_gateways
name: Get gateways
name: sentinelone-get-gateways
description: "List Ranger gateways."
inputs_schema:
properties: {}
required: []
outputs_schema: { properties: {} }
- id: purge_crash_dumps
name: Purge crash dumps
name: sentinelone-purge-crash-dumps
description: "Purge agent crash dumps for the specified agents."
inputs_schema:
properties:
@@ -764,7 +764,7 @@ commands:
required: [agent_ids]
outputs_schema: { properties: {} }
- id: list_endpoints_with_application
name: List endpoints with application
name: sentinelone-list-endpoints-with-application
description: "List the application inventory across endpoints."
inputs_schema:
properties:
@@ -777,7 +777,7 @@ commands:
required: []
outputs_schema: { properties: {} }
- id: get_app_inventory_endpoints
name: Get app inventory endpoints
name: sentinelone-get-app-inventory-endpoints
description: "List endpoints that have a given application installed."
inputs_schema:
properties: