SentinelOne

Blue Hexagon integrates with SentinelOne using the Threat API.

To get started log into your SentinelOne web console and go to Settings > Users on the navigation bar

Create a New User with the role Admin, IR Team, or SOC, Blue Hexagon must have permissions to change the Blacklist.

Once the user is created, log in with the new user and select My User from the top right drop down

Once in My User Generate an API Key (found either in Options or below the Site icon)

Send the API Key along with the full partner URL of SentinelOne to support@bluehexagon.ai

Once enabled BlueHexagon detections can be found at Sentinels > Blacklist on the navigation bar

Blue Hexagon Documentation