API & Integrations - SentinelOne Integration - May 2025

Service Update

Availability	May 19th, 2025
Product(s)	Engage Cloud Gateway
Who's affected	Email Security Cloud Gateway (CG) customers

Overview

Mimecast is pleased to announce the SentinelOne Integration for all Mimecast Engage Email Security Cloud Gateway customers. This integration periodically reads endpoint protection alerts and incidents from SentinelOne via API. These are then forwarded to the Human Risk Platform, which associates each event with a user and updates the malware behavior score for that user. 

What's Changing

• The SentinelOne Integration will be available for Engage users.
• Users will need to create a set of credentials for the integration in the SentinelOne console, which will then be used to configure a new integration instance in the new Integrations Hub.
• The new integration can be set up by navigating to Integrations | Integrations Hub.

Only alerts labeled True Positive in the SentinelOne console (or alerts associated with an Incident marked as such) will be scored.

Recommended Actions 

For more information on how to configure the new Sentinel One integration, see API & Integrations - SentinelOne Integration.