• Capture Client
• Overview
• About Deep Visibility
  • Getting Started
  • Accessing SentinelOne Help
  • Finding Threat Hunt Queries in SentinelOne
• SentinelOne Hunter Chrome Extension
  • Installing SentinelOne Hunter Chrome Extension
  • SentinelOne Hunter Modes
  • Licensing SentinelOne Hunter Chrome Extension
• Rogues Detection
• Useful References
• SonicWall Support
  • About This Document

SentinelOne Hunter Modes

SentinelOne Hunter has two modes - Scraper mode and Library mode:

SentinelOne Hunter Scraper Mode

In Scraper mode, Hunter captures these indicators from information open in the current browser tab. This includes IP addresses, Network URLs (DNS requests), and hashes (MD5, SHA-1, and SHA-256).

SentinelOne Library Mode

In Library mode, Hunter opens a collection of SentinelOne queries.

You need to select one or more queries to run them easily in your management console (Management URL) and SentinelOne updates the Library dynamically.