{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":44217,"path":"security-management/secops-integration-cb-isolate-host-workflow.md","title":"Security Operations Carbon Black Integration - Isolate Host Flow","bundle":null,"doc_type":null,"release":"australia","body":"\n# Security Operations Carbon Black Integration - Isolate Host Flow\n\nThe Security Operations Carbon Black Integration - Isolate Host is the implementation for the Carbon Black integration launched by the Security Operations Integration - Isolate Host flow.\n\n## Before you begin\n\nRole required: sn\\_si.analyst\n\n## About this task\n\nThe flow process activities include:\n\n-   [Legacy: Execution Tracking - Begin \\(CIs\\) Flow Action](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/execution-tracking-begins-cis-activity.md)\n-   [Get IP from CI](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/get-ip-from-ci-activity.md)\n-   [Collect Carbon Black configurations](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/collect-cb-config-activity.md)\n-   [Legacy: Capability Execution Tracking- Failure Flow Action](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/capability-execution-tracking-failure.md)\n-   [Get Sensor ID](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/get-sensor-id-activity.md)\n-   [Set Network Isolation Enabled activity](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown)\n-   [Update Sensor](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/update-sensor-activity.md) - returns Isolate Host result.\n-   [Legacy: Capability Execution Tracking - Complete Flow Action](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/capability-execution-tracking-complete.md)\n\n\\[Omitted image \"carbon-black-integration-isolate-host-flow-v1.png\"\\] Alt text: Flow designer for Security Operations Carbon Black Integration - Isolate Host\\[Omitted image \"carbon-black-integration-isolate-host-flow-v1-2.png\"\\] Alt text: Flow designer for Security Operations Carbon Black Integration - Isolate Host\n\nActivities specific to this flow are described here. For more information on other activities, see [Common Security Operations integration flows and orchestration activities](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/common-wf-activities.md).\n\n-   **[Get Sensor ID Flow Action](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/get-sensor-id-activity.md)**  \nThe Get Sensor ID flow action gathers sensor identifiers to use in the flow.\n-   **[Set Network Isolation Enabled activity](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown)**  \nThe Set Network Isolation Enabled workflow activity enables network isolation.\n-   **[Update Sensor activity](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/update-sensor-activity.md)**  \nThe Update Sensor workflow activity updates the sensor to isolate hosts or endpoints.\n\n**Parent Topic:**[Security Operations Integration- Isolate Host capability](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/isolate-host-capability.md)\n\n"}}