[FR] Add SentinelOne XDR support

[xC0uNt3r7hr34t]

Which category is the feature part of?

• Definition File
• Code/Logic Feature
• Other (please explain)

Which product is the feature part of?

• All Products
• Carbon Black Response
• Carbon Black Threat Hunter
• Defender for Endpoints
• SentinelOne
• Cortex
• Other

Use Cases

• Query and fetch results from SentinelOne XDR
• Query and fetch results from SentinelOne Powerqueries

Proposal

Support to query SentinelOne's newest XDR platform is needed. This new platform uses a different URL and API tokens. It might make sense to integrate a new product for S1 XDR due to the major changes. However, much of the code and query language does overlap with the existing PQ code, but uses a completely different API. This new XDR platform supports both powerqueries and a similar XDR query language.

Additional Context

In depth documentation is available for anyone with access to a SentinelOne console or the SentinelOne support site.