Skip to content

Get-S1Command

SYNOPSIS

Retrieve SentinelOne command information based on specified filters.

SYNTAX

Get-S1Command [[-Status] <String[]>] [[-AccountID] <String[]>] [[-SiteID] <String[]>] [[-GroupID] <String[]>]
 [[-AgentID] <String[]>] [<CommonParameters>]

DESCRIPTION

This function retrieves SentinelOne command information using various filters such as status, account IDs, site IDs, group IDs, and agent IDs. It sends a GET request to the `/web/api/v2.1/private/commands` endpoint and returns the data.

EXAMPLES

EXAMPLE 1

Get-S1Command -Status "pending" -AgentID @("agent1", "agent2")

Retrieves pending commands for the specified agents.

EXAMPLE 2

Get-S1Command -SiteID "site1" -GroupID "group1"

Retrieves commands for the specified site and group.

EXAMPLE 3

"agent1" | Get-S1Command -Status "acknowledged"

Retrieves acknowledged commands for the agent provided through the pipeline.

PARAMETERS

-Status

Filter commands by their status. Valid values are "pending", "sent", "acknowledged", or "canceled".

Type: String[]
Parameter Sets: (All)
Aliases:

Required: False
Position: 1
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-AccountID

Filter commands by account IDs.

Type: String[]
Parameter Sets: (All)
Aliases:

Required: False
Position: 2
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-SiteID

Filter commands by site IDs.

Type: String[]
Parameter Sets: (All)
Aliases:

Required: False
Position: 3
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-GroupID

Filter commands by group IDs.

Type: String[]
Parameter Sets: (All)
Aliases:

Required: False
Position: 4
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-AgentID

Filter commands by agent IDs.

Type: String[]
Parameter Sets: (All)
Aliases:

Required: False
Position: 5
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

NOTES