SentinelOne agents will only update when it’s connected to the management console. Because agents come online/go offline throughout the day, I wanted to automate this with InsightConnect. How might I go about this? At a high level, I thought of this:
Every 15 minutes,
Get all SentinelOne endpoints.
Identify those that are out of date.
Attempt to push an update.
If no endpoints are out of date, close a Jira ticket.
Is there an easy way to do all the identification of out of date endpoints without having to identify count of endpoints, cycling through those endpoints for which ones are out of date?
Edit: I realize that there may be no API call I can make to update SentinelOne agents programmatically. Can someone confirm whether this is the case?