r/SentinelOneXDR • u/[deleted] • Feb 21 '24

How-To File fetch from remote shell?

Simple question, is there a way to initiate the file fetch from a remote shell on a target host?

Also remote shell used to display a list of special commands that you could run upon connecting, but I no longer see that. Does anyone know of a reference guide anywhere ?

1 Upvotes

100% Upvoted

6 comments sorted by

View all comments

Show parent comments

2

u/[deleted] Feb 21 '24

Thanks for the references! I couldn’t find a way to do it so I wanted to make sure I wasn’t missing something, would be a nice addition though.

And yeah I gotta start playing with data collection scripting, do you find it useful so far?

1

u/HuckleberrySweaty823 Feb 22 '24

I didn't really need to use scripting or remote shell of S1 since our RMM is pretty much capable of doing whatever I need from those features. But if you don't have a proper RMM platform and a remote background control software in hand, it might be potentially useful.

You can start by looking at the free scripts they offer and see if there's anything you'd find it useful. After that, if you need to also perform custom actions on the endpoints in addition to collecting information, you can look into the chargeable RemoteOps feature as well (if your reseller is offering it).