Release Machine Isolation - BlinkOps Documentation

Undo isolation of a device. The following permission is required to run this action:

Machine.Isolate

External DocumentationTo learn more, visit the Microsoft Defender for Endpoint documentation.

Parameters

Parameter	Description
Comment	Comment to associate with the action.
Machine ID	The ID of the machine. Can be obtained using the `List Machines` action.

Example Output

{
	"id": "5382f7ea-7557-4ab7-9782-d50480024a4e",
	"type": "Unisolate",
	"scope": "Selective",
	"requestor": "Analyst@TestPrd.onmicrosoft.com",
	"requestorComment": "test for docs",
	"status": "Succeeded",
	"machineId": "7b1f4967d9728e5aa3c06a9e617a22a4a5a17378",
	"computerDnsName": "desktop-test",
	"creationDateTimeUtc": "2019-01-02T14:39:38.2262283Z",
	"lastUpdateDateTimeUtc": "2019-01-02T14:40:44.6596267Z",
	"relatedFileInfo": null
}

Workflow Library Example

Release Machine Isolation with Microsoft Defender for Endpoint and Send Results Via Email

Preview this Workflow on desktop

Put File On Machine Run Antivirus Scan

⌘I

​Parameters

​Example Output

​Workflow Library Example

Parameters

Example Output

Workflow Library Example