Isolate Endpoint

Disconnects an endpoint from the network.

Required API key role permissions:

• Response Management - view, filter, search
• Response Management - isolate endpoint

External Documentation

To learn more, visit the Trend Vision One documentation.

Parameters

Parameter	Description
Agent GUID	The ID of an installed agent on an endpoint. For example: 9c94bd33-c589-48c4-9431-dace397b0067. Can be obtained by using the List Endpoints action.
Endpoint Name	The endpoint name of the target endpoint. Can be obtained by using the List Endpoints action.
Target By	You can specify either the Endpoint Name or the GUID of the installed agent program - Agent GUID.
Task Description	The description of the response task.

Example Output

[
    {
        "status": 202,
        "headers": [
            {
                "name": "Operation-Location",
                "value": "https://api.xdr.trendmicro.com/v3.0/xdr/response/tasks/00000001"
            }
        ]
    }
]

Workflow Library Example

Isolate Endpoint with Trend Vision One and Send Results Via Email

Preview this Workflow on desktop