Security Operations - Isolate Host Flow

The Security Operations - Isolate Host flow is a high-level flow independent of integrations. It uses the configured queries to search for a set of configuration items. Use it to fulfill an integration, such as Carbon Black.

Before you begin

Role required: sn_si.analyst

About this task

This flow is triggered from the Configuration Items tab on a security incident related list.

[Omitted image “isolate-host-flow.png”] Alt text: Flow Designer for Security Operations - Isolate Host

Activities specific to this flow are described here. For more information on other activities, see Common Security Operations integration flows and orchestration activities.

Parent Topic:Security Operations Integration- Isolate Host capability