SentinelOne TA (Add-on) for Splunk

The integration of Splunk and SentinelOne empowers organizations to combine the strengths of their Splunk deployments to collect, monitor, analyze and visualize massive streams of machine data, with the visibility, detection, response, remediation and forensics capabilities of SentinelOne. The SentinelOne TA (Technology Add-on) for Splunk collects the data from the SentinelOne Management Server and maps SentinelOne objects to relevant Splunk CIM (Common Information Models). It enables saved searches and macros from one or more SentinelOne Management Consoles. The SentinelOne App for Splunk is an optional application that runs on the Splunk platform. It has dashboards, saved searches, custom actions, and adaptive response actions, all ready to use as-is on the data collected by the SentinelOne TA, or as examples for further customization.