AvantGuard - SentinelOne

Actions682

Overview

This node operation exports application management risk endpoint data as a CSV file from the AvantGuard SentinelOne API. It allows users to specify various filters and query parameters to refine the exported data, such as filtering by application name, detection dates, endpoint IDs, statuses, and more. This is useful for security analysts or IT administrators who want to extract detailed risk endpoint information for reporting, auditing, or further analysis in CSV format.

Properties

Name	Meaning
Additional Query Parameters	A collection of optional filters and parameters to customize the CSV export query. These include filters like domain, application name, endpoint UUID, detection dates, statuses, OS types, scan dates, and many others to precisely control which risk endpoints are included in the export.

Output

JSON

csv - The exported CSV data as a string, containing the filtered application management risk endpoint information.

Dependencies

Requires an API key credential for AvantGuard SentinelOne API access.
Relies on the AvantGuard SentinelOne API endpoint for exporting application management risk endpoint data.

Troubleshooting

If the API returns authentication errors, verify that the API key credential is correctly configured and has necessary permissions.
If the CSV export returns empty or incomplete data, check the filter parameters for correctness and ensure that matching data exists in the system.
Incorrect CSV delimiter may cause parsing issues; ensure the delimiter matches the expected character in downstream processing.
Date filters must be in the correct ISO 8601 format (e.g., '2018-02-27T04:49:26.257525Z'); invalid formats may cause errors or no results.
Large data exports may time out or fail; consider narrowing filters or exporting in smaller batches.