Security Operations Carbon Black Integration- Remove Host Isolation Flow

Freigeben Version: Australia

Aktualisiert 12. März 2026

1 Minute Lesedauer

The Security Operations Carbon Black Integration - Remove Host Isolation flow unblocks communication with a specified host or endpoint in a Carbon Black system.

Vorbereitungen

Role required: sn_si.analyst

Warum und wann dieser Vorgang ausgeführt wird

This flow is not part of a capability and needs a custom orchestration in order to run.

The flow process activities include:

Get IP from CI activity
If successful- Collect Carbon Black Configurations Flow Action
Get Sensor ID Flow Action Get Sensor ID
If- Device supports isolation- and device is not isolated to disabled.
Update Sensor activity- returns Isolate Host result.

Remove Host Isolation low diagram — Abbildung : 1. Carbon Black Integration- Remove Host Isolation