pushpythonscheduledhand-curated
SentinelOne → IBM QRadar
Ingest SentinelOne threat events into QRadar log source hourly
Polls SentinelOne threats API hourly and forwards them as syslog events to a QRadar log source, preserving threat classification and endpoint.
sentineloneqradarsyslogpushmoderate
Use case
Push new SentinelOne threats to a QRadar log source every hour as syslog, preserve threat_classification and endpoint name, dedupe by threat id
No code yet. Click below to run the Rinox pipeline. The result is saved to this library entry — every future visitor gets it instantly.
Useful?
Used by 0 teams · Viewed 5 times · Last validated 5/17/2026