MDR360 integrations · Endpoint (EDR/XDR)
DIAMATIX MDR for SentinelOne
SentinelOne threats and alerts are ingested into SHIELD SIEM/XDR, investigated and escalated by DIAMATIX analysts.
Technical details pending DIAMATIX confirmation
Technical overview
Integration specifications
- Category
- Endpoint (EDR/XDR)
- Availability
- Production Supported
- Ingestion method
- Vendor management API
- Capabilities
- Telemetry Ingestion, Detection & Investigation
- Active response
- Awaiting technical confirmation
Telemetry collected
- Security alerts and detections
- Endpoint process and threat context
- Device and agent health
Onboarding prerequisites
- Active vendor licence covering EDR/XDR features
- API credentials with read access for alert collection
- Agreed response permissions, if active response is in scope
How it works
How DIAMATIX SecOps works with it
- 01
Collect
SentinelOne signals are brought into SHIELD SIEM/XDR.
- 02
Investigate
DIAMATIX analysts triage, correlate and filter alerts 24/7.
- 03
Respond
Agreed containment or guided response follows your runbook and MDR360 tier.
Scope, capabilities and response actions are confirmed for your environment during scoping.
Back to all integrationsRunning SentinelOne?
Tell us about your environment and we will confirm coverage for MDR360.