n3tsurge / sentinelone-slack-bot

SentinelOne Slack Bot

SentinelOne Slack Bot

Alpha Milestones

• Basic command interaction (API v2.0 - Central Park+)
• Slack user to S1 API key mapping (backend postgresdb)

Envisioned Commands

Action	Command	Description
Disconnect Host	disconnect	Disconnect a computer from the network
Reconnect Host	reconnect	Reconnect a computer to the network
Scan Host	scan	Initiates a full disk scan on the target computer
Blacklist Hash	hash blacklist	Add a hash to the blacklist
Whitelist Hash	hash whitelist	Add a hash to the whitelist
List Applications	list applications for	Lists the install applications for a host
List Processes	list processes for	Lists the running processes for a host
List Threats	list threats	Lists the open threats
Get Host Passphrase	passphrase	Displays the passphrase for the target computer
Configure Intergration	api	DM me your API key to get started (setup integration)