FireEye HX - Unisolate Endpoint

This playbook unisolates endpoints according to the hostname/endpoint ID that is provided by the playbook input.

FireEye HX · 7 tasks · 2 inputs · 0 outputs

Inputs

  • Endpoint_id — The endpoint ID/device ID that you want to unisolate.
  • Hostname — The hostname that you want to unisolate.

Commands used

fireeye-hx-cancel-containment fireeye-hx-get-host-information

Flowchart

no yes yes yes Start Start Is FireEye HX enabled? - IsIntegrationAvailable Is FireEye HX enabled? IsIntegrationAvailable Done Done Is there endpoint id? Is there endpoint id? Get host info - fireeye-hx-get-host-information Get host info fireeye-hx-get-host-information Is the device ready for unisolation? Is the device ready for u... Unisolate endpoint - fireeye-hx-cancel-containment Unisolate endpoint fireeye-hx-cancel-containment