Skip to main content
Solved

SECOPS-SentinelOne alerts closing using Secops GUI

  • June 15, 2026
  • 1 reply
  • 38 views

rkacprzycki
Forum|alt.badge.img

Hello. We re using S1. When we`re closing alerts in SECOPS we need also to close alert in S1 console using:
Mitigate option in S1

  • Choosing suitable option (kill, Unquarantie, Remediate, Rollback, Add to Blocklist) and naturally
  • mark alert as resolved in S1 without touching S1 console.

We would like to do all of theses jobs directly from SECOPS console. 

Is it doable? 

Best answer by cmorris

Install the SentinelOne integration and then configure the sync job - https://docs.cloud.google.com/chronicle/docs/soar/marketplace-integrations/sentinelonev2#jobs

1 reply

cmorris
Staff
Forum|alt.badge.img+16
  • Staff
  • Answer
  • June 15, 2026

Install the SentinelOne integration and then configure the sync job - https://docs.cloud.google.com/chronicle/docs/soar/marketplace-integrations/sentinelonev2#jobs