Problems with SentinelOne V2 Integration - 401

michaelsysec242 — Thu, 22 Sep 2022 12:39:42 GMT

Hello,

In the past few days our SentinelOne Integration has stopped working. I am seeing the following error;

[Failed to execute test-module command. Error: Error in API call [401] - UNAUTHORIZED {"errors": [{"code": 4010010, "detail": null, "title": "Authentication Failed"}]} (85)] . In regards to the Server URL nothing has changed and all other parameters appear correctly. In regards to resolving this issue I have done the following; Revoking and Generating a new API Key from the SentinelOne Panel, ensured that the Site-Ids are correct and reset the "Last run Timestamp. Nothing appears to have worked.

In regards to content pack I am currently on the current 3.0.0 yet I have downgraded in order to see if this is the problem.

Apart from this the SentinelOne Tenant has received an update which includes more commands.

Can someone help me with this problem ?

If anyone else is experiencing the same thing please let me know.

#sentinelOne #XSOAR

Re: Problems with SentinelOne V2 Integration - 401

sramesh-7 — Sun, 25 Sep 2022 09:24:07 GMT

Hi,

Have you tried creating a new instance and configuring this integration and check if this works.

For new command, I would recommend you to create a FR.

topic Problems with SentinelOne V2 Integration - 401 in Cortex XSOAR Discussions

Problems with SentinelOne V2 Integration - 401

Re: Problems with SentinelOne V2 Integration - 401