SentinelOne.Activity log schema change in Panther v1.119

In Panther version 1.119 (scheduled for deployment the week of March 2, 2026), Panther will change the activityType field of the SentinelOne.Activity log schema from int to string.

To prepare for this change, please:

• Update your detections and Saved/Scheduled Searches to handle both int and string types.

After the v1.119 update is deployed, you can remove any logic that handles the int type.

If you have questions, please reach out to the Panther support team.