Security Operations Carbon Black Integration - Isolate Host Flow

The Security Operations Carbon Black Integration - Isolate Host is the implementation for the Carbon Black integration launched by the Security Operations Integration - Isolate Host flow.

Before you begin

Role required: sn_si.analyst

About this task

The flow process flow action include:

• Execution Tracking - Begin (CIs) Flow Action
• Get IP from CI
• Collect Carbon Black configurations
• Capability Execution Tracking- Failure Flow Action
• Get Sensor ID
• Set Network Isolation Enabled Flow Action
• Update Sensor - returns Isolate Host result.

• Get Sensor ID Flow Action
  The Get Sensor ID flow action gathers sensor identifiers to use in the flow.
• Set Network Isolation Enabled Flow Action
  The Set Network Isolation Enabled flow action enables network isolation.
• Update Sensor Flow Action
  The Update Sensor flow action updates the sensor to isolate hosts or endpoints.