> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tierity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# SentinelOne

> View SentinelOne threat detections, agent health, and STAR alerts in Tierity.

## Overview

SentinelOne is an endpoint detection and response (EDR) platform with autonomous threat response. The Tierity integration surfaces active threats, agent health, and STAR (SentinelOne Threat Intelligence Response) alerts so endpoint security data sits alongside the rest of your security context.

## Prerequisites

* A SentinelOne account
* A SentinelOne API token with read access to the relevant site(s)
* Manage access (or higher) in Tierity

## Setup

**1. Generate a SentinelOne API token**

1. In the SentinelOne console, click your user avatar → **My User**.
2. Under **API Token**, click **Generate**.
3. Copy the token.

**2. Configure in Tierity**

1. Go to **Config → Integrations → SentinelOne**.
2. Enter your **API Token** and **Console URL** (e.g. `https://usea1.sentinelone.net`).
3. Select the **sites** to monitor.
4. Click **Save & Test**.

## What's available

| View | Description |
| - | - |
| **Threats** | Active and resolved threats with severity, classification, and endpoint |
| **Agents** | Connected endpoint count and sensor health |
| **STAR alerts** | Automated response rule triggers |

## Workbench card

The **SentinelOne** workbench card shows agent count, active threat count, and a STAR alert summary.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.