Isolates a single endpoint. The following permission is required to run this action:
  • Hosts: Write.
External DocumentationTo learn more, visit the CrowdStrike documentation.

​
Basic Parameters

ParameterDescription
Host IDThe ID of the host to perform the action on. Can be obtained via the List Devices action.

​
Advanced Parameters

ParameterDescription
Action ParametersA comma-separated list of the parameters for the prospective action.
Example value:
{"name": "name1", "value": "value1"}, {"name": "name2", "value": "value2"}

​
Example Output

{
	"meta": {
		"query_time": 630.71,
		"powered_by": "<string>",
		"trace_id": "<string>"
	},
	"resources": [
		{
			"id": "<string>",
			"path": "<string>"
		}
	],
	"errors": []
}

​
Workflow Library Example

Isolate Endpoint with Crowdstrike and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop