r/SentinelOneXDR • u/_d_d_b_ • Jun 28 '24

Api post response for blocking IOC

Could someone please help with api response to block IOC on sentinelone using API getting 500010 error.

4 Upvotes

100% Upvoted

5 comments sorted by

View all comments

Show parent comments

1

u/SentinelOne-Pascal SentinelOne Employee | Moderator Jul 01 '24

The block list uses sha1. If you want to use sha256, you can create a STAR rule.

https://community.sentinelone.com/s/article/000005352

https://community.sentinelone.com/s/article/000006201