CsFalconLiftHostContainment

A polling wrapper script; lifts containment on the host, returning its network communications to normal.

Details

ID	`CsFalconLiftHostContainment`
Language	python
From Version	6.1.0
Docker Image	`demisto/python3:3.12.13.10116658`
Tags	Utilities

Source

CsFalconLiftHostContainment.py CsFalconLiftHostContainment_test.py CsFalconLiftHostContainment.yml

Download History Raw

commonfields:
  id: CsFalconLiftHostContainment
  version: -1
name: CsFalconLiftHostContainment
script: ''
type: python
tags:
  - Utilities
comment: A polling wrapper script; lifts containment on the host, returning its network communications to normal.
enabled: true
args:
  - description: A comma-separated list of host agent IDs (AIDs) of the hosts to contain. Get agent IDs from detections.
    isArray: true
    name: ids
    required: true
scripttarget: 0
subtype: python3
dockerimage: demisto/python3:3.12.13.10116658
dependson:
  must:
  - cs-falcon-lift-host-containment
fromversion: 6.1.0
isInternal: true
tests:
  - No tests (auto formatted)
marketplaces:
  - platform
supportedModules:
- agentix
- xsiam
- edr
- cloud
- cloud_runtime_security