EDR

Sentinel Disabled

Navigate to Integrations > EDR > Profiles/Policies
Select a Profile/Policy
Click the Endpoints Tab
Check the box against the affected endpoints
Click Actions > Troubleshooting > Disable Agent
Click Actions > Troubleshooting > Enable Agent

Via CLI:

  1. In the CMD, go to the folder of sentinelctl. In your case > cd “C:\Program Files\SentinelOne\Sentinel Agent version” (Where version is the complete Agent version. Use TAB to autocomplete the version number, or see the Agent UI.)
  2. Run the command: sentinelctl disable_agent
  3. Run the command: sentinelctl enable_agent

To check the action, you can go to the Command Prompt

  1. In the CMD, go to the folder of sentinelctl. In your case > cd “C:\Program Files\SentinelOne\Sentinel Agent version” (Where version is the complete Agent version. Use TAB to autocomplete the version number, or see the Agent UI.)
  2. Run the command: sentinelctl status
    You should see the Self-Protection Status: ON