Security Operations - Isolate Host Flow

  • Release version: Zurich
  • Updated July 31, 2025
  • 1 minute to read

    • The Security Operations - Isolate Host flow is a high-level flow independent of integrations. It uses the configured queries to search for a set of configuration items. Use it to fulfill an integration, such as Carbon Black.

    Before you begin

    Role required: sn_si.analyst

    About this task

    This flow is triggered from the Configuration Items tab on a security incident related list.

    Figure 1. Isolate Host
    Flow Designer for Security Operations - Isolate Host

    Activities specific to this flow are described here. For more information on other activities, see Common Security Operations integration flows and orchestration activities.