SentinelOne Training | Part 4b - SENTINELS

SentinelOne Training | Part 4b - SENTINELS
In part 4b of this SentinelOne training course, we cover SENTINELS.

Cybersecurity Mentorship Program!

Join this channel to get access to perks:

Social Media:

[macm]

I really appreciate you taking the time to go over every feature Sentinelone has to offer. I really learned a lot from this playlist

[MrRobert]

Incredible series. It's much appreciated! This is going to help us go the extra mile.

[jso]

Thanks for sharing your knowledge, a video about exclusion is a very good idea, they can be tricky

[jonjonnmacky]

At around 23:22 of the vid, you explain network quarantine. According to the docs, this feature is not to create a "subnet" for you to be able to quarantine a set of hosts all in one action, but to allow the quarantined hosts to communicate over the network to different services.

"With Network Quarantine, you can configure rules to allow specific network traffic to communicate with quarantined endpoints. By default Agents can only communicate with the Management Console if they are disconnected from the network."

This would come in handy if you have, for instance, a SIEM agent running on an endpoint, and if you quarantine it through S1, you would want it to still send logs to your SEIM.

[CyberSecWithDesire]

This was really awesome to watch. Can you do Crowdstrike as well?

[Nyber]

He didn't give you a very good definition of containers. He was describing mico-services.

[josedurango]

I am working with SentinelOne for the last 15 days, and I already installed in a few laptops for our customers, how can I allows Chrome Extensions, because the customers needs to work with some Chrome extensions and SentinelOne blocked. I need to allows only for a few devices, how can I do it?

[ricric]

How about viewing a decommissioned list?

[CyberSecWithDesire]

This is was really awesome to watch. Can you do Crowdstrike as well?