Official

Premium

SentinelOne

Sync from SentinelOne to any destination

Publisher

cloudquery

Latest version

v2.0.6

Type

Source

Platforms

Date Published

sentinelone_accounts
sentinelone_agent_packages
sentinelone_agents
- sentinelone_agent_applications
sentinelone_cloud_detection_rules
sentinelone_export_agents
sentinelone_installed_applications
sentinelone_installed_applications_cves
sentinelone_sites
- sentinelone_application_management_risks
  - sentinelone_application_management_risks_cves
- sentinelone_application_management_risks_aggregated_apps
sentinelone_threats
- sentinelone_threat_notes

The sentinelone_application_management_risks table shows data for SentinelOne Application Management Risks.

This table supports incremental syncing. Read more about incremental syncing here.

Syncs items from the /web/api/v2.1/application-management/risks endpoint

Name	Type
_cq_id	`uuid`

Name	Type
detection_date	`timestamp[us, tz=UTC]`

Name	Type
application	`utf8`
application_name	`utf8`
application_vendor	`utf8`
application_version	`utf8`
base_score	`utf8`
_cq_id	`uuid`
_cq_parent_id	`uuid`
cve_id	`utf8`
cvss_version	`utf8`
days_detected	`int64`
detection_date	`timestamp[us, tz=UTC]`
endpoint_id	`utf8`
endpoint_name	`utf8`
endpoint_type	`utf8`
exploit_code_maturity	`utf8`
id	`utf8`
last_scan_date	`timestamp[us, tz=UTC]`
last_scan_result	`utf8`
marked_by	`utf8`
marked_date	`timestamp[us, tz=UTC]`
mark_type	`utf8`
mitigation_status	`utf8`
mitigation_status_changed_by	`utf8`
mitigation_status_change_time	`timestamp[us, tz=UTC]`
mitigation_status_reason	`utf8`
nvd_base_score	`utf8`
nvd_cvss_version	`utf8`
os_type	`utf8`
published_date	`timestamp[us, tz=UTC]`
reason	`utf8`
remediation_level	`utf8`
report_confidence	`utf8`
risk_score	`utf8`
severity	`utf8`
status	`utf8`

This table depends on:

The following tables depend on "SentinelOne Application Management Risks":

CloudQuery