Skip to main content
Question

SECOPS-SentinelOne alerts closing using Secops GUI

  • June 15, 2026
  • 1 reply
  • 9 views

rkacprzycki
Forum|alt.badge.img

Hello. We re using S1. When we`re closing alerts in SECOPS we need also to close alert in S1 console using:
Mitigate option in S1

  • Choosing suitable option (kill, Unquarantie, Remediate, Rollback, Add to Blocklist) and naturally
  • mark alert as resolved in S1 without touching S1 console.

We would like to do all of theses jobs directly from SECOPS console. 

Is it doable? 

1 reply

cmorris
Staff
Forum|alt.badge.img+13
  • Staff
  • June 15, 2026

Install the SentinelOne integration and then configure the sync job - https://docs.cloud.google.com/chronicle/docs/soar/marketplace-integrations/sentinelonev2#jobs