AvantGuard - SentinelOne

Actions682

Overview

This node operation retrieves sub-category data for XDR assets from the Datalake Inventory via a web API. It is useful for security analysts or IT administrators who need to filter and obtain detailed asset sub-category information based on specific account, group, or site identifiers. For example, a user can fetch all sub-categories related to certain account IDs to analyze asset distribution or security posture within those accounts.

Properties

Name	Meaning
Additional Query Parameters	Optional filters to refine the API request by specifying lists of Account IDs, Group IDs, or Site IDs to limit the returned sub-categories accordingly.

Output

JSON

data - Array of sub-category objects for XDR assets returned by the API, each representing a specific asset sub-category with its details.

Dependencies

Requires an API key credential for authentication to the AvantGuard SentinelOne API service.

Troubleshooting

Ensure the API credentials are correctly configured and have sufficient permissions to access the Datalake Inventory endpoints.
Verify that the additional query parameters (Account Ids, Group Ids, Site Ids) are formatted as valid JSON arrays; malformed JSON will cause request failures.
If no data is returned, check that the filter parameters correspond to existing entities in the system.
Common errors include authentication failures (check API key validity) and invalid query parameters (check parameter names and formats).