FireEye HX - Isolate Endpoint

This playbook will auto isolate endpoints by the endpoint ID that was provided in the playbook.

Pack

FireEyeHX

Tasks

7

Inputs

• Endpoint_id — The endpoint ID or device ID to isolate.
• Hostname — The hostname to isolate.

Commands used

• fireeye-hx-get-host-information
• fireeye-hx-host-containment