This action will delete a host. After the host is deleted, no new detections for that host will be reported via UI or APIs.
External DocumentationTo learn more, visit the CrowdStrike documentation.

Parameters

ParameterDescription
Device IDThe host agent ID (AID) of the host you want to contain. Can be obtained via the List Detections action.

Workflow Library Example

Remove Crowdstrike Falcon Sensors Inactive in The Last 12 Hours
Workflow LibraryPreview this Workflow on desktop