This action will delete a host. After the host is deleted, no new detections for that host will be reported via UI or APIs.
External DocumentationTo learn more, visit the CrowdStrike documentation.

​
Parameters

ParameterDescription
Device IDThe host agent ID (AID) of the host you want to contain. Can be obtained via the List Detections action.

​
Workflow Library Example

Remove Crowdstrike Falcon Sensors Inactive in The Last 12 Hours
Workflow LibraryPreview this Workflow on desktop