Cortex XDR - Unisolate Endpoint

This playbook unisolates endpoints according to the endpoint ID that is provided in the playbook input.

Cortex XDR by Palo Alto Networks · 7 tasks · 3 inputs · 0 outputs

Inputs

  • Endpoint_ID — The endpoint ID that you want to be unisolated.
  • Hostname — The endpoint's hostname that you want to be unisolated.
  • IP — The endpoint's IP that you want to be unisolated.

Commands used

xdr-endpoint-unisolate xdr-get-endpoints

Flowchart

no yes yes yes Start Start Is cortex XDR available - IsIntegrationAvailable Is cortex XDR available IsIntegrationAvailable Is there an endpoint to unisolate? Is there an endpoint to u... Done Done Unisolate endpoint - xdr-endpoint-unisolate Unisolate endpoint xdr-endpoint-unisolate Get endpoint status - xdr-get-endpoints Get endpoint status xdr-get-endpoints Is the endpoint is isolated? Is the endpoint is isolated?