Searches SentinelOne for agents using device name, MAC address, local IP address, or a custom query string. If no search parameters are provided, all agents will be returned. See the SentinelOne API documentation for more information about supported query string options.

Target: SentinelOne integration target or an HTTP Endpoint for "your-tenant.sentinelone.net" with a path of "/web/api/v2.1"

Account Key: None if using an integration-provided target, API token if using an HTTP endpoint target

Steps:
[] Build the query string
[] Generate the authorization header
[] Request matching agents from SentinelOne
[] Check if the API request succeeded:
[]> If it did, extract the agent information and set the output variables
[]> If it didn't, output an error

More information about this API can be found in the SentinelOne documentation

SentinelOne - Search Agents