As promised, let’s dive into the new SentinelOne console and its features. Here's an overview of what the updated interface looks like:
Dashboard
The front-page dashboard in the new console is intuitive and visually appealing. While it doesn’t require much explanation, I highly encourage you to explore it. Even if you don’t end up using SentinelOne, experiencing this console once will showcase how flawlessly it operates—with proper configuration, of course.
Purple AI Tab
This tab is dedicated to Purple AI, a feature aimed at enhancing automation and operational efficiency.
Alerts Tab
In the updated console, the Alerts tab combines the previously separate Alerts and Threats tabs. You now get all alert details in one place, simplifying threat management.
Exposure Tab
The Exposure tab now includes:
ISPM (Identity Security Posture Management) details under the Misconfiguration section.
Application vulnerabilities listed under the Vulnerabilities section, providing a centralized view of risks.
Event Search Tab
This tab provides Deep Visibility, a feature carried over from the previous console, enabling you to dive deep into historical event data for advanced investigations.
Inventory Tab
Assets: Displays endpoints with SentinelOne installed.
Identity Endpoints: If you’ve configured Active Directory (AD) as part of ISPM, domain controllers or identity endpoints should appear here.
Applications: Houses the application inventory, listing all apps detected within the environment.
New Graph Query Feature
A notable new addition is the ability to build custom graphs:
Custom Queries: Build your own queries for tailored insights.
Query Builder Examples: Use pre-designed examples as starting points.
Library: Access a library of prebuilt queries for quicker analysis.
Activities Tab
This tab contains the Activity Log, which records everything that happens in the console—a carryover from the previous logs feature.
RemoteOps Tab
This tab is similar to the Automation feature from the older console, allowing remote operations and task execution.
Agent Management Tab
The Agent Management tab replaces the old Sentinels tab and provides similar functionalities, along with additional sub-tabs for more granular management.
Reports and Policies Tabs
The final two tabs:
Reports: For generating and viewing detailed reports.
Policy and Settings: Offers comprehensive configuration options for policies and other settings.
Conclusion
That wraps up the overview of the new SentinelOne console. It’s packed with updates and improved functionality.
"Thanks for sticking with me on this journey through SentinelOne! It’s truly an incredible platform that combines power, simplicity, and innovation. Whether you're new to it or a seasoned user, SentinelOne has something to wow everyone. Stay tuned for more updates as we continue exploring its awesome features together!"
Comments