How-to install SentinelOne (S1) for Endpoint Protection

Table of Contents

Introduction

SentinelOne (S1) is a next-generation anti-virus solution that detects and responds to cyber threats like malware and ransomware. S1 provides a lightweight single-agent approach with AI capabilities. (Source https://security.utoronto.ca/about/cyberstrategy/epp/sentinelone-project/ ).

This how-to will guide you through installing S1 agent on Ubuntu, however we provide installers for Linux and Windows OS available at vskey-stor.eis.utoronto.ca:/ut-vss-lib/sentinelone.

Requirements

Instructions

1. Login to the target server and promote as administrator/root.

2. With your preferred SFTP client login to vskey-stor.eis.utoronto.ca using your VSS credentials and fetch any of the available installers based on the host operating system:

   sftp user@vskey-stor.eis.utoronto.ca (user@vskey-stor.eis.utoronto.ca) Password: Connected to vskey-stor.eis.utoronto.ca. sftp> get /ut-vss-lib/sentinelone/SentinelAgent_linux_x86_64_v24_1_2_6.deb Fetching /ut-vss-lib/sentinelone/SentinelAgent_linux_x86_64_v24_1_2_6.deb to SentinelAgent_linux_x86_64_v24_1_2_6.deb SentinelAgent_linux_x86_64_v24_1_2_6.deb 100% 45MB 51.8MB/s 00:00 sftp>

3. Run the installer:

   apt install ./SentinelAgent_linux_x86_64_v24_1_2_6.deb

4. Associate the instance with your department site token:

   /opt/sentinelone/bin/sentinelctl management token set {{ sentinelone_token }}

5. Start the service

6. Note that the first run takes a few minutes until shown at the SentinelOne Management Console (https://cace1-201.sentinelone.net/login).

7.  

Related articles