Guillaume BOURGEOIS 8fd297169f feat(sentinelone): default ingestion (get_threats fetch + OCSF mapper) ...

Declare get_threats as the default fetch command (results_path data, dedup id,
incremental created_after) with the bundled get_threats OCSF mapper and a
'SentinelOne Threat' default incident type. get_alerts is also marked
ingestion-ready (incremental created_from). Existing filters (mitigation
status, query, created window, limit) let an operator fetch a subset.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-27 14:10:37 +02:00

..

incident-types

feat(sentinelone): default ingestion (get_threats fetch + OCSF mapper)

2026-06-27 14:10:37 +02:00

mappers

feat(sentinelone): exhaustive OCSF mappers using full catalog (actor/target/registry/network/indicators)

2026-06-26 13:36:34 +02:00

scripts

feat: add test_connection command to all integrations for the instance Test button

2026-06-26 00:00:06 +02:00

manifest.yaml

feat(sentinelone): default ingestion (get_threats fetch + OCSF mapper)

2026-06-27 14:10:37 +02:00