Popular repositories Loading

1. claude-skills claude-skills Public

   A SentinelOne AI SOC analyst built as Claude Skills, 3 MCP servers (PowerQuery, SDL, Mgmt Console, UAM, Hyperautomation), and a Principal SOC Analyst persona. Threat hunting, alert triage, detectio…

   Python 19 9

2. s1-aws-quick-skills s1-aws-quick-skills Public

   Turn Amazon Quick into a Principal SOC Analyst with full SentinelOne API access — threat hunting, alert triage, dashboard authoring, UEBA/advanced detection creation, log parser development, and wo…

   Python 3

3. ai-siem ai-siem Public

   Forked from Sentinel-One/ai-siem

   A community‑driven, SentinelOne‑assisted library of parsers, dashboards, detections & response playbooks that supercharge the Singularity Platform.

   Lua 2

4. s1-detections-as-a-code s1-detections-as-a-code Public

   Detection as Code for SentinelOne: author detection rules as TOML, validate on PR, sync to the Custom Detection Rule API on merge (events, correlation, scheduled).

   Python 1

5. s1-ueba-deployer s1-ueba-deployer Public

   One-click UEBA anomaly-detection deployer for SentinelOne SDL (interactive UI + GitHub Actions), with a simulated HEC test harness and a multi-tab review dashboard

   Python 1 1

6. s1-soc-investigation s1-soc-investigation Public

   SentinelOne SOC investigation execution engine: sliced long-lookback SDL queries with resumable execution, content-addressed cache, verification, xlsx workbook, and a hardened Docker UI

   Python