External DocumentationTo learn more, visit the Cortex XDR documentation.
Parameters
| Parameter | Description |
|---|---|
| Comment | Additional information regarding the action. |
| File Hashes List | A comma-separated list of file hashes which will be added to a block list. |
| Incident ID | String representing the incident ID. When included in the request, the Isolate Endpoints action will appear in the Cortex XDR Incident View Timeline tab. |
Example Output
Workflow Library Example
Add Files to Block List with Cortex Xdr and Send Results Via Email