# SentinelOne

This document provides instructions for configuring SentinelOne in order for the Netography Context Integration to have the correct access to pull label contexts.

## Prerequisites <a href="#prerequisites" id="prerequisites"></a>

### Configure API token <a href="#configure-api-token" id="configure-api-token"></a>

Before configuring the SentinelOne Context Integration in Netography, you will need to an API token configured in SentinelOne. For more information configuring the API token from the SentinelOne management console, see the [API Overview](https://usea1-300-nfr.sentinelone.net/api-doc/overview) documentation.

## Netography Portal Steps <a href="#netography-portal-steps" id="netography-portal-steps"></a>

Navigate to Integrations (make sure you are on the Context tab) and click "Add Integration", then select `SentinelOne`

<div align="left"><img src="/files/vTAS8KK2g3YwXbmEHAQU" alt=""></div>

### Configuration <a href="#configuration" id="configuration"></a>

The following fields are specific to the SentinelOne integration.

| Field            | Required | Description                                                                           | Example                                                                     |
| ---------------- | -------- | ------------------------------------------------------------------------------------- | --------------------------------------------------------------------------- |
| `Base URL`       | yes      | The SentinelOne domain URL to query                                                   | `https://<subdomain>.sentinelone.net` `https://<subdomain>.sentinelone.com` |
| `Account Id`     |          | The SentinelOne account ID to query                                                   |                                                                             |
| `Filter Id`      |          | The SentinelOne filter ID to limit query, SentinelOne API result size limit is 10,000 |                                                                             |
| `Include Ranger` |          | If enabled, include Ranger labels                                                     |                                                                             |

### Authentication <a href="#authentication" id="authentication"></a>

The following fields are necessary for the integration to authenticate with SentinelOne.

| Field   | Required | Description                         |
| ------- | -------- | ----------------------------------- |
| `Token` | yes      | API token to use for authentication |


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.fusion.vectra.ai/enrich-traffic-with-context/configure-context-integrations/sentinelone.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.