SentinelOne Remote Script Orchestration Revolutionizes Incident Response and Endpoint Management at Enterprise Scale

Rhea-AI Summary

SentinelOne (NYSE: S) has launched Remote Script Orchestration (RSO), a new feature that automates responses across enterprises, streamlining collaboration between IT and security teams. RSO allows organizations to orchestrate software updates and custom remediation remotely on multiple machines, enhancing efficiency in handling cyber incidents.

This tool is uniquely integrated within SentinelOne's existing cybersecurity suite, supporting various operating systems including macOS, Windows, and Linux. The solution aims to address the challenges posed by legacy systems that rely on manual processes.

Positive

• Launch of Remote Script Orchestration (RSO) enhances operational efficiency.
• RSO supports remote automation of software updates and incident responses.
• Integration with existing SentinelOne cybersecurity suite provides a comprehensive solution across multiple operating systems.

Negative

• None.

Merging IT and Security Operations Workflows for Advanced Investigations and Response Across Every Enterprise Device

MOUNTAIN VIEW, Calif.--(BUSINESS WIRE)-- SentinelOne (NYSE: S), an autonomous cybersecurity platform company, today announced SentinelOne Remote Script Orchestration (RSO), enabling enterprises to remotely automate custom responses. This new functionality allows both IT and security teams to quickly install, update, or remove software across the enterprise. With SentinelOne RSO, IT operations teams can simplify response actions and unify policy configuration management at scale. Designed and built in close partnership with some of the world’s leading incident response providers, RSO delivers on SentinelOne’s commitment to a holistic approach to cybersecurity, arming security analysts with the power of technology -- to do more at machine speed.

Legacy tools and point products still require people to manually execute commands on each machine across the network individually. The sheer amount of data, devices, and workloads in today’s enterprise environments makes IT and security operations simply too big, too vast, and too fast for humans alone to burden. SentinelOne RSO enables security and IT teams to remotely execute customizable remediation and response actions on the entire estate, across every operating system, enabling rapid containment.

"Enterprise security teams often struggle to triage and remediate incidents at scale,” said Dave Wagner, Senior Vice President in Kroll’s Cyber Risk practice. “We are excited about the capabilities SentinelOne Remote Script Orchestration brings to the table. It readily integrates with our proprietary IR tools to help eliminate time-consuming efforts to collect and consolidate forensics data and rapidly contain attacks, enabling us to minimize adversary impact.”

SentinelOne RSO empowers enterprises to send scripts to one machine, a few hundred machines, or even millions of machines, to respond to present and future cyberattacks at machine speed. Security teams can send custom scripts or select from a large library of pre-built scripts created by SentinelOne to perform a wide range of tasks -- ranging from incident response to forensic artifact collection and even IT administration. In combination with SentinelOne’s Storyline Active Response (STAR), analysts benefit from automated workflows that take incident response to the next level.

“Working closely with our customers and incident response partners has provided us with a unique opportunity to revolutionize how security teams succeed. Analysts are often juggling multiple tools and an overwhelming number of tasks, and we are positioned to solve this problem,” said Yonni Shelmerdine, Vice President of XDR Products and Strategy, SentinelOne. “We help our customers and partners deliver IT and cybersecurity responses faster and more efficiently. With RSO, we limit the need for manual, time-intensive tasks and legacy tools, empowering security analysts to uplevel their approach to incident response and forensic collection with speed, scale and simplicity -- a step forward for the XDR era.”

SentinelOne RSO is the only remote orchestration solution on the market that, in the same platform as an industry-leading EPP, EDR, and XDR supports macOS, Windows, and Linux environments. To learn more about how SentinelOne RSO can automate advanced investigations and response, please visit: https://assets.sentinelone.com/ciso-epp/ds-remote-script-orchestration

About SentinelOne

SentinelOne’s cybersecurity solution encompasses AI-powered prevention, detection, response and hunting across endpoints, containers, cloud workloads, and IoT devices in a single autonomous platform.

View source version on businesswire.com: https://www.businesswire.com/news/home/20211019005263/en/

Maryellen Sartori

fama PR for SentinelOne

E: S1@famapr.com

Source: SentinelOne

FAQ

What is SentinelOne's Remote Script Orchestration (RSO)?

RSO is a new feature that automates responses and software management across enterprise devices, streamlining IT and security operations.

How does RSO enhance cybersecurity for SentinelOne (S) users?

RSO helps security teams respond faster to cyber incidents by allowing them to execute scripts on multiple machines simultaneously.

What operating systems does SentinelOne RSO support?

SentinelOne RSO supports macOS, Windows, and Linux environments, making it versatile for various organizational settings.

When was SentinelOne's RSO announced?

SentinelOne announced the Remote Script Orchestration feature on October 19, 2021.

How does RSO improve incident response for enterprises?

RSO reduces the need for manual interventions, enabling rapid incident containment and streamlined forensic data collection.