commonfields:
  id: CoreIsolateEndpoint
  version: -1
name: CoreIsolateEndpoint
script: ''
type: python
tags:
- Utilities
comment: A polling wrapper script; Isolates the specified endpoint.
enabled: true
args:
- description: Links the response action to the triggered incident.
  name: incident_id
- description: The endpoint ID (string) to isolate. Retrieve the string from the core-get-endpoints command.
  name: endpoint_id
  required: true
- auto: PREDEFINED
  defaultValue: 'false'
  description: Suppress an error when trying to isolate a disconnected endpoint. When set to false, an error is returned.
  name: suppress_disconnected_endpoint_error
  predefined:
  - 'true'
  - 'false'
outputs:
- contextPath: Core.Isolation.endpoint_id
  description: The endpoint ID.
  type: String
scripttarget: 0
subtype: python3
dockerimage: demisto/python3:3.12.13.10116658
dependson:
  must:
  - core-isolate-endpoint
fromversion: 6.1.0
isInternal: true
tests:
- No tests (auto formatted)
marketplaces:
- platform
supportedModules:
- xsiam
- cloud_runtime_security
- edr