Isolate Endpoint - BlinkOps Documentation

Isolates a single endpoint. The following permission is required to run this action:

Hosts: Write.

External DocumentationTo learn more, visit the CrowdStrike documentation.

Basic Parameters

Parameter	Description
Host ID	The ID of the host to perform the action on. Can be obtained via the `List Devices` action.

Advanced Parameters

Parameter	Description
Action Parameters	A comma-separated list of the parameters for the prospective action. Example value: `{“name”: “name1”, “value”: “value1”}, {“name”: “name2”, “value”: “value2”}`

Example Output

{
	"meta": {
		"query_time": 630.71,
		"powered_by": "<string>",
		"trace_id": "<string>"
	},
	"resources": [
		{
			"id": "<string>",
			"path": "<string>"
		}
	],
	"errors": []
}

Workflow Library Example

Isolate Endpoint with Crowdstrike and Send Results Via Email

Preview this Workflow on desktop