AvantGuard - SentinelOne

Actions682

Overview

This node performs an update (PUT) operation on the 'Exclusions And Blocklist' resource via a web API. It allows users to modify exclusion rules or blocklist entries by sending structured JSON data to the API. This is useful for managing security or filtering configurations programmatically, such as suppressing certain file paths or actions on specific operating systems.

Properties

Name	Meaning
Data	The JSON object containing the exclusion or blocklist details to be updated. This includes fields like type, value, osType, actions, mode, id, inject, and pathExclusionType, which define the specifics of the exclusion rule.

Output

JSON

response - The JSON response from the API after performing the PUT operation, typically containing the updated exclusion or blocklist entry details or status information.

Dependencies

Requires an API key credential for authentication to the AvantGuard SentinelOne API, with a base URL configured in the node credentials.

Troubleshooting

Ensure the JSON data provided in the 'Data' property is correctly formatted and includes all required fields; malformed JSON or missing fields may cause API errors.
Verify that the API credentials are valid and have sufficient permissions to perform update operations on exclusions and blocklists.
Common error messages may include authentication failures, invalid data format, or resource not found errors if the specified exclusion ID does not exist. Resolving these involves checking credentials, validating input data, and confirming the existence of the target resource.