Plugin marketplace

sentinelone

SentinelOne SecOps skills for Claude: PowerQuery threat hunting, Management Console API, Singularity Data Lake API, dashboard authoring, log parsing, Hyperautomation workflows, autonomous DFIR alert investigation, and packaged SDL solution deployment.

96 · Sentinel-One/ai-siem1 pluginAGPL-3.0updated yesterday

Add this marketplace

Then install any plugin below by name — each page has its exact command.

s1-secops-skills

claude

SentinelOne SecOps skills for Claude: PowerQuery threat hunting and STAR/Custom Detection rules; Management Console API; Singularity Data Lake API; SDL dashboards; log parsing (OCSF); Hyperautomation SOAR; DFIR alert investigation (soc-investigator); and 11 one-prompt SDL solutions: source onboarding, asset enrichment, UEBA, ingest health, detection exclusions, Risk-Based Alerting, Detection as Code, alert noise reduction, MITRE-mapped custom detections, query slicing, unprotected endpoints.

8 skills

96

README badge

Shows how many plugins this repo ships, and links here.

claude & codex pluginslisted