{
  "type": "skill",
  "slug": "tenable-sentinelone-attack-path-interruption",
  "name": "Tenable + SentinelOne Attack Path Interruption",
  "author": "jdelong-tenb",
  "description": "Cross-references a live Tenable One Attack Path Analysis toxic path against SentinelOne's real-time alert stream, and — with explicit confirmation — triggers SentinelOne network isolation on a path host showing active lateral-movement behavior.",
  "github_url": "https://github.com/jdelong-tenb/tenable-sentinelone-attack-path-interruption",
  "license": "MIT",
  "tier": "contributed",
  "tags": [
    "sentinelone",
    "attack-path-analysis",
    "edr",
    "lateral-movement",
    "containment"
  ],
  "integrations": [
    "Tenable",
    "Tenable Hexa AI MCP",
    "SentinelOne"
  ],
  "domains": [
    "security-operations",
    "vulnerability-management"
  ],
  "date_added": "2026-09-02",
  "last_reviewed": "2026-10-22",
  "works_with_tenable_hexa_mcp": true,
  "compatible_platforms": [
    "Claude Code"
  ],
  "invocation": "Say things like \"is anything actually happening on this attack path right now,\" \"check SentinelOne for activity on these exposed hosts,\" or \"isolate this host, it's on a toxic path\" — the skill activates automatically.",
  "repo": {
    "found": true,
    "archived": false,
    "pushed_at": "2026-09-17T14:25:35Z",
    "stars": 0,
    "forks": 0,
    "open_issues": 0,
    "owner_type": "user",
    "language": "Python",
    "checked_at": "2026-11-05T20:35:15.821Z"
  },
  "url": "https://exchange.tenable.com/skills/tenable-sentinelone-attack-path-interruption",
  "json_url": "https://exchange.tenable.com/api/skills/tenable-sentinelone-attack-path-interruption.json",
  "markdown_url": "https://exchange.tenable.com/skills/tenable-sentinelone-attack-path-interruption.md",
  "source_url": "https://github.com/tenable/cyberagents-exchange/blob/main/skills/tenable-sentinelone-attack-path-interruption.md"
}