MicrosoftAtpUnisolateMachine

commonfields:
  id: MicrosoftAtpUnisolateMachine
  version: -1
name: MicrosoftAtpUnisolateMachine
script: ''
type: python
tags:
  - Utilities
comment: A polling wrapper script; isolates a machine from accessing external networks.
enabled: true
args:
  - description: "A comma-separated list of machine IDs to be used to stop the isolation. For example: 0a3250e0693a109f1affc9217be9459028aa8426,0a3250e0693a109f1affc9217be9459028aa8424."
    isArray: true
    name: machine_id
    required: true
  - description: Comment to associate with the action.
    name: comment
    required: true
  - description: Flag for the rate limit retry.
    name: ran_once_flag
    deprecated: true
outputs:
  - contextPath: MicrosoftATP.Machine.Isolation.Requestor
    description: Machine un-isolation requestor.
    type: string
  - contextPath: MicrosoftATP.Machine.Isolation.RequestorComment
    description: Machine un-isolation requestor comment.
    type: string
  - contextPath: MicrosoftATP.MachineAction.ID
    description: Unique identifier of the machine action performed (e.g., unisolation).
    type: string
  - contextPath: MicrosoftATP.MachineAction.Scope
    description: The scope or extent of the action applied. May include user-level or machine-wide context.
    type: string
  - contextPath: MicrosoftATP.MachineAction.Status
    description: Current status of the action (e.g., Pending, Succeeded, Failed).
    type: string
  - contextPath: MicrosoftATP.MachineAction.ComputerDNSName
    description: DNS name of the machine on which the action was executed.
    type: string
  - contextPath: MicrosoftATP.MachineAction.CreationDateTimeUtc
    description: Timestamp (in UTC) when the action was created.
    type: date
  - contextPath: MicrosoftATP.MachineAction.LastUpdateTimeUtc
    description: Timestamp (in UTC) when the status of the action was last updated.
    type: date
  - contextPath: MicrosoftATP.MachineAction.RelatedFileInfo.FileIdentifier
    description: Unique identifier (e.g., hash) of the file related to the action, if applicable.
    type: string
  - contextPath: MicrosoftATP.MachineAction.RelatedFileInfo.FileIdentifierType
    description: Type of the file identifier used (e.g., "SHA1", "SHA256", or "MD5").
    type: string
scripttarget: 0
subtype: python3
dockerimage: demisto/python3:3.12.13.10116658
dependson:
  must:
  - microsoft-atp-unisolate-machine
fromversion: 6.1.0
isInternal: true
tests:
  - No tests (auto formatted)
marketplaces:
  - platform