Skip to main content
Go to Red Canary Documentation
Red Canary Support

Getting Started with SentinelOne

  • Updated .

Issue

User is new to using SentinelOne (S1) and needs guidance or introductory training on installing agents and using the management console.

Environment

SentinelOne

Resolution

To begin learning how to use SentinelOne, refer to the vendor's documentation linked below.

The following hyperlinks assume your SentinelOne management console is hosted on Red Canary's subdomain (usea1-redcanary.sentinelone.net). If you log in to S1 from a different URL, replace the usea1-redcanary subdomain in the link's address with your own (e.g. usea1-016).

SentinelOne Overview

  1. SentinelOne Basics
  2. Detection Engines and Agent Overview

Agent Installation and Troubleshooting

  1. Deploying and Installing the Agent
  2. System Requirements and Agent Lifecycle
  3. Troubleshooting and Managing Agents

Using the Management Console

  1. Using the Console UI
  2. User Management
  3. Managing Incidents
  4. Configuring Policies
  5. Creating Policy Exclusions

Note: SentinelOne documentation is not publicly available and can only be accessed with a SentinelOne user account.

Cause

The linked documentation contains all the fundamentals and resources needed to migrate to and start using SentinelOne as your EDR platform. These pages, and other guides, can be found in the SentinelOne management console under Help > Offline Help.

Because not all organizations will have access to the SentinelOne Customer Portal (see Why Is the SentinelOne Customer Portal Unavailable?), Red Canary recommends using the Offline Help documentation.