SentinelOneV2

Packs/SentinelOne/Integrations/SentinelOne-V2/SentinelOne-V2.py

@@ -940,9 +940,23 @@ def run_remote_script_request(self,
                 "requiresApproval": requires_approval
             }
         }
+        payload["data"] = self.remove_empty_fields(payload.get("data", {}))
         response = self._http_request(method='POST', url_suffix=endpoint_url, json_data=payload)
         return response.get('data', {})
 
+    def remove_empty_fields(self, json_payload):
+        """
+        Removes empty fields from a JSON payload and returns a new JSON object with non-empty fields.
+
+        Parameters:
+        - json_payload (dict): The input JSON payload.
+
+        Returns:
+        - dict: A new JSON object containing only non-empty fields.
+        """
+        # Returning updated dictionary with non-empty fields
+        return {key: value for key, value in json_payload.items() if str(value)}
+
 
 ''' COMMANDS + REQUESTS FUNCTIONS '''
 

Packs/SentinelOne/ReleaseNotes/3_2_15.md

@@ -0,0 +1,6 @@
+
+#### Integrations
+
+##### SentinelOne v2
+
+Fixed bug for the ***sentinelone-run-remote-script*** command, removing the empty values from the payload of an API call.

Packs/SentinelOne/pack_metadata.json

@@ -2,7 +2,7 @@
     "name": "SentinelOne",
     "description": "Endpoint protection",
     "support": "partner",
-    "currentVersion": "3.2.14",
+    "currentVersion": "3.2.15",
     "author": "SentinelOne",
     "url": "https://www.sentinelone.com/support/",
     "email": "support@sentinelone.com",