Undo isolation of a device. The following permission is required to run this action:
  • Machine.Isolate
External DocumentationTo learn more, visit the Microsoft Defender For Endpoints documentation.

​
Parameters

ParameterDescription
CommentComment to associate with the action.
Machine IDThe ID of the machine. Can be obtained using the List Machines action.

​
Example Output

{
	"id": "5382f7ea-7557-4ab7-9782-d50480024a4e",
	"type": "Unisolate",
	"scope": "Selective",
	"requestor": "Analyst@TestPrd.onmicrosoft.com",
	"requestorComment": "test for docs",
	"status": "Succeeded",
	"machineId": "7b1f4967d9728e5aa3c06a9e617a22a4a5a17378",
	"computerDnsName": "desktop-test",
	"creationDateTimeUtc": "2019-01-02T14:39:38.2262283Z",
	"lastUpdateDateTimeUtc": "2019-01-02T14:40:44.6596267Z",
	"relatedFileInfo": null
}

​
Workflow Library Example

Release Machine Isolation with Microsoft Defender for Endpoints and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop