Fleet and cloud
SentinelOne
Endpoints protected by SentinelOne join the fleet, with their installed applications.
What the connector does
The SentinelOne connector reads agents and the applications installed on each with the API token of a service user with the “Viewer” role. It never isolates, remediates or uninstalls anything, and never touches a policy.
What comes into TechWatchAlert
- Agents: name, OS, agent version, IP addresses, last seen
- Applications installed on each endpoint, with their version
Setup
- In the SentinelOne console, create a service user with the “Viewer” role
- Copy its API token
- In TechWatchAlert, enter the console address and the token
In the same family
GLPIThe software inventoried in GLPI becomes your monitored stack, resynced automatically.View connector →Microsoft IntuneThe apps Intune detects on your managed devices, monitored with nothing to install.View connector →Jamf ProThe apps on your Jamf Pro-managed Macs, monitored Mac by Mac.View connector →WazuhYour Wazuh agents already collect packages: TechWatchAlert turns them into precise CVE monitoring.View connector →AWS Systems ManagerThe software on your EC2 instances and hybrid servers, read from the Systems Manager inventory.View connector →Microsoft AzureYour Azure VMs and Azure Arc servers monitored through Change Tracking & Inventory.View connector →Google CloudCompute Engine VMs and their software, read from the VM Manager OS Config inventory.View connector →Oracle Cloud InfrastructureOCI compute instances and their packages, read from OS Management Hub.View connector →TechWatchAlert agent (Windows, Linux, macOS)A lightweight agent that reports the inventory and missing updates of every workstation and server.View connector →Microsoft Entra IDThe devices in your Entra ID directory join the fleet, with their OS and last sign-in.View connector →Active Directory (LDAP)The computers in your Active Directory, with their OS and last logon.View connector →WSUS (Windows Server Update Services)The workstations and servers of your WSUS server, their exact build and their missing updates.View connector →Palo Alto Cortex XDREndpoints protected by Cortex XDR join the fleet, with their agent version.View connector →Microsoft Defender for EndpointDefender machines and the software installed on each, with no extra agent.View connector →TaniumTanium endpoints and their installed applications, read through Tanium Gateway.View connector →ServiceNow CMDBThe computers in your CMDB and their software, monitored as ServiceNow knows them.View connector →
Connectors
Plug in your tools in minutes
Start with a repository, a fleet or a scan report: your first targeted alerts arrive with the first sync.
Free plan, no credit card · hosted in France