FireEye HX - Unisolate Endpoint

This playbook unisolates endpoints according to the hostname/endpoint ID that is provided by the playbook input.

Pack

FireEyeHX

Tasks

7

Inputs

• Endpoint_id — The endpoint ID/device ID that you want to unisolate.
• Hostname — The hostname that you want to unisolate.

Commands used

• fireeye-hx-cancel-containment
• fireeye-hx-get-host-information