• Capture Client
• Overview
• Deep Visibility
  • Getting Started
  • Accessing SentinelOne Help
  • Finding Threat Hunt Queries in SentinelOne
• Hunter Chrome Extension
  • Installing SentinelOne Hunter Chrome Extension
  • SentinelOne Hunter Modes
  • Licensing SentinelOne Hunter Chrome Extension
• Network Control
  • Getting Started with Network Control
  • Configurable Network Quarantine
  • Network Status
  • Network Quarantine Operations
• Remote Shell
  • SentinelOne Remote Shell Use Case 1
  • SentinelOne Remote Shell Use Case 2
• Rogues Detection
• Useful References
• SonicWall Support
  • About This Document

SentinelOne Hunter Modes

SentinelOne Hunter has two modes - Scraper mode and Library mode:

SentinelOne Hunter Scraper Mode

In Scraper mode, Hunter captures these indicators from information open in the current browser tab. This includes IP addresses, Network URLs (DNS requests), and hashes (MD5, SHA-1, and SHA-256).

SentinelOne Library Mode

In Library mode, Hunter opens a collection of SentinelOne queries.

You need to select one or more queries to run them easily in your management console (SentinelOne Library Mode and SentinelOne updates the Library dynamically.