[Request] Document the availability of processes response actions for SentinelOne hosts

[paul-tavares]

Description

The processes response action is being enabled for SentinelOne Hosts and thus we need to add/update documentation to indicate support for this EDR system.

Background & resources

• Issues/metas: https://github.com/elastic/security-team/issues/8131
• Point of contact: Paul Tavares

To test, create a cloud env. from latest SNAPSHOT and enable the responseActionsSentinelOneProcessesEnabled feature flag

Which documentation set does this change impact?

ESS and serverless

ESS release

8.16

Serverless release

Week of August 20 — tracked in PR #5659 (Serverless-pub field emptied on this issue to avoid duplicating)

Feature differences

The processes response action has the same input as the one for Endpoint. However, the response displayed when the command is successful is different - specifically:

1. For SentinelOne, the output of the processes response action command will not be displayed in the console's output. Instead, a file download link will be provided (just like in SentinelOne) that allows the user to download the action's results and look at the output.
2. The file download for a SentinelOne processes command does not need a passcode to access the contents of the zip file, thus one will not be displayed in the UI next to the download button.

API docs impact

processes response console command will now be available for use against SentinelOne hosts

Prerequisites, privileges, feature flags

No response