Hi All,
We tried to use SentinelOne SOAR app to implement playbook to block hash on SentinelOne.
SentinelOne SOAR App: https://splunkbase.splunk.com/app/6056
We found that it applied hash only some groups on SentinelOne.
Does anyone found this issue before?
Please advise.