AvantGuard - SentinelOne

Actions682

Overview

This node operation exports CVE (Common Vulnerabilities and Exposures) risk data related to applications in CSV format. It allows users to filter and customize the export by specifying various query parameters such as application vendor, application name, CVE publish dates, severities, remediation levels, and more. This is useful for security analysts and IT teams who want to extract detailed vulnerability data for further analysis, reporting, or integration with other tools.

Properties

Name	Meaning
Additional Query Parameters	A collection of optional filters and settings to customize the CVE export query. These include parameters like application vendor, application name, application versions, CVE publish date ranges, severities, remediation levels, exploited status, analyst verdicts, and CSV delimiter among others.

Output

JSON

csvData - The exported CVE risk data in CSV format as a string, using the specified delimiter.

Dependencies

Requires an API key credential for authentication to the AvantGuard SentinelOne API.
Relies on the AvantGuard SentinelOne API endpoint configured via the baseURL credential.

Troubleshooting

If the node returns authentication errors, verify that the API key credential is correctly configured and has the necessary permissions.
Incorrect or unsupported query parameters may result in empty or error responses; ensure parameters conform to expected formats and values.
Large data exports may time out or fail; consider narrowing filters or exporting in smaller batches.
If CSV delimiter is set incorrectly, the output CSV may not parse properly; use ',' or ';' as supported delimiters.