# \#sentinelone

**URL:** https://discuss.rapid7.com/tag/sentinelone/175.md

[Latest](https://discuss.rapid7.com/latest.md) · [Categories](https://discuss.rapid7.com/categories.md) · [Tags](https://discuss.rapid7.com/tags.md)

---

## [Anyone use S1 as a trigger and have a way to filter down the results to be useful?](https://discuss.rapid7.com/t/anyone-use-s1-as-a-trigger-and-have-a-way-to-filter-down-the-results-to-be-useful/47773)

<div class="topic-metadata">

**Author:** [@ilovesoar](https://discuss.rapid7.com/u/ilovesoar)\
**Replies:** 16\
**Last updated:** [February 11, 2025, 6:45pm UTC](https://discuss.rapid7.com/t/anyone-use-s1-as-a-trigger-and-have-a-way-to-filter-down-the-results-to-be-useful/47773 "2025-02-11T18:45:46Z")

</div>

Sentinelone as a trigger means a lot of new jobs running. It also means one new threat can have hundreds of new threats under the same original threat. It would be nice to be able to group the new threat alerts by one c…

---

## [SentinelOne](https://discuss.rapid7.com/t/sentinelone/37021)

<div class="topic-metadata">

**Author:** [@bbruno.vieira](https://discuss.rapid7.com/u/bbruno.vieira)\
**Replies:** 3\
**Last updated:** [May 11, 2024, 5:36pm UTC](https://discuss.rapid7.com/t/sentinelone/37021 "2024-05-11T17:36:20Z")

</div>

Hi team! I just started using Insight Connect and the first workflow I am trying to develop is directly related to SentinelOne. I’ve seen the post made in the past regarding “Get Threats” but unfortunately it did not re…

---

## [Required Permissions for SentinelOne Connector](https://discuss.rapid7.com/t/required-permissions-for-sentinelone-connector/32510)

<div class="topic-metadata">

**Author:** [@Jon\_B](https://discuss.rapid7.com/u/Jon_B)\
**Replies:** 2\
**Last updated:** [January 29, 2024, 6:26pm UTC](https://discuss.rapid7.com/t/required-permissions-for-sentinelone-connector/32510 "2024-01-29T18:26:45Z")

</div>

Trying to setup a SentinelOne connector, but there is no Setup Guide for it. Is there a list of required permissions somewhere?

---

## [InsightConnect Sentinelone trigger "get threats"](https://discuss.rapid7.com/t/insightconnect-sentinelone-trigger-get-threats/18312)

<div class="topic-metadata">

**Author:** [@adelima](https://discuss.rapid7.com/u/adelima)\
**Replies:** 4\
**Last updated:** [March 15, 2023, 11:28am UTC](https://discuss.rapid7.com/t/insightconnect-sentinelone-trigger-get-threats/18312 "2023-03-15T11:28:00Z")

</div>

how exactly do we use the sentinelone plugin trigger “get threats” , i activated the workflow and set “get threat” as the trigger but still no jobs running. From what I understood it is suppose to check every 5 seconds. …