{"schema_version":"1.0","id":"com.abstract.sentinelone-alerts","name":"SentinelOne Alerts","version":"1.0.0","vendor":{"name":"Abstract DOO","website":"https://sentinelone-app.bg-mns.rxlog.ai","support_email":"support@abstract.rs"},"description":"Shows the SentinelOne alerts collected in this workspace with severity, status and the affected endpoint, and lets you resolve them and add notes. Every action runs as a workspace pipeline that checks the alert in SentinelOne first and re-reads it afterwards.","logo":"https://sentinelone-app.bg-mns.rxlog.ai/logo.svg","api":{"base_url":"https://sentinelone-app.bg-mns.rxlog.ai/api","install_endpoint":"/platform/install","uninstall_endpoint":"/platform/uninstall","health_endpoint":"/platform/health","manifest_endpoint":"/manifest.json"},"ui":{"type":"iframe","entry_url":"https://sentinelone-app.bg-mns.rxlog.ai/ui","allowed_origins":["https://bg-mns.rxlog.ai"]},"permissions":[{"name":"logs.read","description":"Read SentinelOne threat events from this workspace to list alerts with their severity, status and affected endpoint."},{"name":"connections.read","description":"List your SentinelOne connections (name only) so actions run against the right console. API keys are never shared."},{"name":"pipelines.execute","description":"Run the SentinelOne pipelines created for this app (refresh alert, read alert notes, change alert status, change alert verdict, add alert note)."},{"name":"workspace.read","description":"Read the workspace name so the app can label its data."}],"data_access":{"sources":["sentinel_one"],"fields":["event_time","source_type","raw_log"]},"pipelines":["sentinelone_get_alert","sentinelone_get_alert_notes","sentinelone_change_alert_status","sentinelone_change_alert_verdict","sentinelone_add_alert_note","sentinelone_assign_alert","sentinelone_get_users"],"configuration_schema":[{"name":"lookback_days","label":"Lookback (days)","type":"number","description":"How many days of SentinelOne alerts to load (default 30).","required":false,"default":30}],"compatibility":{"platform_api":["v1"]},"metadata":{"source":"sentinelone-app","category":"Security"}}