Immediately stop a Full Disk Scan on all agents that match the filter. You must use one of the filters before executing the action.

​
Basic Parameters

ParameterDescription
Active ThreatsInclude agents with this amount of active threats.
Agents IDsA list of agent IDs to filter by.
QueryA free-text search term, will match applicable attributes (sub-string match).
Note: Device’s physical addresses will be matched if they start with the search term only (no match if they contain the term).

​
Advanced Parameters

ParameterDescription
Account IDsList of account IDs to filter by.

​
Example Output

{
	"data": {
		"affected": 0
	}
}

​
Workflow Library Example

Abort Scan with Sentinelone and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop