Parameter | Description |
---|---|
Endpoint | The endpoint from which the files will be retrieved. Select the endpoint’s hostname or manually type its ID. |
File Paths | A comma-separated list of file paths which will be retrieved from the endpoint. |
Incident ID | String representing the incident ID. When included in the request, the Isolate Endpoints action will appear in the Cortex XDR Incident View Timeline tab. |
{
"reply": {
"action_id": "string",
"status": "string",
"endpoints_count": "string"
}
}
Was this page helpful?