Contents x
    SentinelOne - Send Broadcast Message
    • 22 Oct 2024
    • 2 Minutes to read
    • Print
    • Dark
      Light
    • PDF
    Contents

    SentinelOne - Send Broadcast Message

    • Updated on 22 Oct 2024
    • 2 Minutes to read
    • Print
    • Dark
      Light
    • PDF
    Article summary

    SentinelOne - Send Broadcast Message sends a broadcast message to:

    • Assets returned by the selected query or assets selected on the relevant asset page.

    See Creating Enforcement Sets to learn more about adding Enforcement Actions to Enforcement Sets.

    Note:

    Required Fields

    These fields must be configured to run the Enforcement Set.

    • Action name - The name of this Enforcement Action. The system sets a default name. You can change the name.
    • Configure Dynamic Values - Toggle on to enter a Dynamic Value statement. See Creating Enforcement Action Dynamic Value Statements to learn more about Dynamic Value statement syntax.

    • Use stored credentials from the SentinelOne adapter - Select this option to use credentials from the adapter connection. By default, the first connection is selected.

      • When you select this option, the Select Adapter Connection drop-down becomes available. Select the adapter connection to use for this Enforcement Action.
      Note:
      To use this option, you must successfully configure a SentinelOne adapter connection.

    • Message - Enter the content of the broadcast message.

    • Compute Node - The Axonius node to use when connecting to the specified host. For more details, see Connecting Additional Axonius Nodes.

    Additional Fields

    These fields are optional.

    • SentinelOne Domain - The hostname or IP Address of the SentinelOne management server. This field format is '[instance].sentinelone.net'.
    • User Name and Password - The user name and password for an account that has site viewer access to the management server. For information on how to create users in SentinelOne, see Create a Single User.
    • 2FA Secret (only for accounts with SaaS Management capability) - The secret generated in SentinelOne for setting up two-factor authentication for the adapter user created for collecting SaaS data.
    • Singularity Data Lake (SDL) API Key - Relevant for enabling SDL queries. See the Parameters section in the SentinelOne adapter page for details.
    • API token - The API token is created within the My User Profile of the account with viewer access to the management server.
    • Verify SSL (optional) - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
    • HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.
    • HTTPS Proxy User Name (optional) - The user name to use when connecting to the server using the  HTTPS Proxy.
    • HTTPS Proxy Password (optional) - The password to use when connecting to the server using the  HTTPS Proxy.
    • Gateway Name - Select the Gateway through which to connect to perform the action.

    API

    Axonius uses the SentinelOne API.

    Required Ports

    Axonius must be able to communicate via the following ports:

    • 80
    • 443

    For more details about other Enforcement Actions available, see Action Library.


    Was this article helpful?
    What's Next