FireEye HX - Isolate Endpoint

This playbook will auto isolate endpoints by the endpoint ID that was provided in the playbook.

FireEye HX · 7 tasks · 2 inputs · 0 outputs

Inputs

  • Endpoint_id — The endpoint ID or device ID to isolate.
  • Hostname — The hostname to isolate.

Commands used

fireeye-hx-get-host-information fireeye-hx-host-containment

Flowchart

no yes yes yes Start Start Is FireEye HX enabled? - IsIntegrationAvailable Is FireEye HX enabled? IsIntegrationAvailable Done Done Is there endpoint id? Is there endpoint id? Get host info - fireeye-hx-get-host-information Get host info fireeye-hx-get-host-information Is the device ready for isolation? Is the device ready for i... Isolate endpoint - fireeye-hx-host-containment Isolate endpoint fireeye-hx-host-containment