{
  "type": "skill",
  "slug": "sentinelone-ai-analyst-claude-skills",
  "name": "SentinelOne AI Analyst: Claude Skills",
  "author": "Sentinel-One",
  "description": "A full-stack AI SOC analyst for SentinelOne: seven Claude skills, three bundled MCP servers, and an operating persona (CLAUDE.md) that hunt threats, triage alerts, author detections/dashboards/parsers, and build Hyperautomation workflows from natural language.",
  "github_url": "https://github.com/Sentinel-One/ai-siem/tree/main/plugins/s1-secops-skills",
  "license": "AGPL-3.0",
  "tier": "contributed",
  "tags": [
    "sentinelone",
    "soc",
    "threat-hunting",
    "powerquery",
    "singularity-data-lake",
    "hyperautomation",
    "claude-skills"
  ],
  "integrations": [
    "SentinelOne"
  ],
  "domains": [
    "security-operations"
  ],
  "date_added": "2026-07-09",
  "last_reviewed": "2026-07-30",
  "compatible_platforms": [
    "Claude Code",
    "Claude Desktop",
    "Claude Cowork",
    "Windsurf"
  ],
  "invocation": "No slash command. Install the plugin (or point Claude Code/Cowork at the CLAUDE.md persona) and describe what you want in natural language — the matching skill (mgmt-console-api, powerquery, sdl-api, sdl-dashboard, sdl-log-parser, hyperautomation, or the sdl-solutions orchestrator) is invoked automatically.",
  "repo": {
    "found": true,
    "archived": false,
    "pushed_at": "2026-11-05T11:01:40Z",
    "stars": 95,
    "forks": 39,
    "open_issues": 5,
    "owner_type": "organization",
    "language": "Lua",
    "checked_at": "2026-11-05T20:35:15.821Z"
  },
  "url": "https://exchange.tenable.com/skills/sentinelone-ai-analyst-claude-skills",
  "json_url": "https://exchange.tenable.com/api/skills/sentinelone-ai-analyst-claude-skills.json",
  "markdown_url": "https://exchange.tenable.com/skills/sentinelone-ai-analyst-claude-skills.md",
  "source_url": "https://github.com/tenable/cyberagents-exchange/blob/main/skills/sentinelone-ai-analyst-claude-skills.md"
}