skills.rest
Sentinel-One
Sentinel-OneOFFICIAL
Explore all skills by this author →
WebsiteGitHub

sdl-api

Manage and query SentinelOne Singularity Data Lake API data and configurations.

59|30|Updated Aug 19, 2025
Search Tags:#security#api#data management#sentinelone#singularity data lake
One-click install
npx skills add https://github.com/Sentinel-One/ai-siem --skill sdl-api
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sdl-api
Source: https://github.com/Sentinel-One/ai-siem/tree/main/plugins/s1-secops-skills/skills/sdl-api
Command: npx skills add https://github.com/Sentinel-One/ai-siem --skill sdl-api

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, json, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill allows you to interact with the SentinelOne Singularity Data Lake (SDL) API for data ingestion, querying, and configuration file management, streamlining the process of analyzing and manipulating SDL data.

Core Features & Use Cases

  • Data Ingestion: Query SDL data and perform actions like file uploads and deletes.
  • Data Querying: Execute complex queries across the SDL to analyze and retrieve information.
  • Configuration Management: Manage SDL configurations such as parsers, dashboards, and alerts programmatically.
  • Use Case: If you need to automate the process of querying SDL for specific events and then manage the associated alerts and parsers, this Skill provides a comprehensive solution.

Quick Start

To use the sdl-api skill, first install it in your Claude environment:

cp -r sdl-api ~/.claude/skills/

Then, configure your credentials as per the Skill's documentation and start querying or managing your SDL data.

Frequently Asked Questions about sdl-api

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I query SentinelOne Singularity Data Lake data programmatically?▼

You can query SentinelOne Singularity Data Lake (SDL) data programmatically by using a Python client to execute complex queries across the SDL, retrieving and analyzing security event information directly.

Can I manage SDL parsers and alerts automatically with Python?▼

Yes, you can manage SDL configurations programmatically with Python, handling parsers, dashboards, and alerts to automate SentinelOne Singularity Data Lake configuration tasks.

What is the best way to automate SentinelOne data ingestion and file uploads?▼

Automating SentinelOne data ingestion involves using the SDL API to query data and perform file management actions like uploads and deletes, streamlining the process of manipulating SDL data.

Do I need prior API knowledge to manage the Singularity Data Lake with this approach?▼

Yes, interacting with the Singularity Data Lake (SDL) API requires knowledge of SDL API concepts for proper usage, making it primarily suited for IT professionals and security analysts.

Does the SDL API client work with standard Python dependencies?▼

Yes, the SDL API client operates using standard Python dependencies, specifically requiring the requests and json libraries to manage and query data within the SentinelOne Singularity Data Lake.

Why use a Python client for SentinelOne Singularity Data Lake instead of manual configuration?▼

Using a Python client for the Singularity Data Lake automates data ingestion, querying, and configuration management, streamlining the analysis and manipulation of SDL data compared to manual configuration.

Related Skills

Explore More Software Engineering Skills→
Sentinel-OneSentinel-One
59

powerquery

Execute PowerQuery commands against SentinelOne's Singularity Data Lake.

Official
Advanced
Q16GQ16G
83

log-analysis

Analyze multi-source security logs to identify threat indicators and enable threat hunting.

Community
Intermediate
Sentinel-OneSentinel-One
59

hyperautomation

Create and manage SentinelOne Hyperautomation workflows via the Hyperautomation API.

Official
Advanced
wyre-technologywyre-technology
39

threat-hunting

Execute PowerQuery language queries against SentinelOne Singularity Data Lake for threat hunting.

Official
Advanced