Disconnects an endpoint from the network. Required API key role permissions:
  • Response Management - view, filter, search
  • Response Management - isolate endpoint
External DocumentationTo learn more, visit the Trend Vision One documentation.

​
Parameters

ParameterDescription
Agent GUIDThe ID of an installed agent on an endpoint. For example: 9c94bd33-c589-48c4-9431-dace397b0067.

Can be obtained by using the List Endpoints action.
Endpoint NameThe endpoint name of the target endpoint.

Can be obtained by using the List Endpoints action.
Target ByYou can specify either the Endpoint Name or the GUID of the installed agent program - Agent GUID.
Task DescriptionThe description of the response task.

​
Example Output

[
	{
		"status": 202,
		"headers": [
			{
				"name": "Operation-Location",
				"value": "https://api.xdr.trendmicro.com/v3.0/xdr/response/tasks/00000001"
			}
		]
	}
]

​
Workflow Library Example

Isolate Endpoint with Trend Vision One and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop