Security Operations Carbon Black Integration - Isolate Host workflow The Security Operations Carbon Black Integration - Isolate Host is the implementation for the Carbon Black integration launched by the Security Operations Integration - Isolate Host workflow. Before you beginRole required: sn_si.analyst About this task Workflow process activities include: Execution Tracking - Begin (CIs) activity Get IP from CI Collect Carbon Black configurations Capability Execution Tracking - Failure activity Get Sensor ID Set Network Isolation Enabled Update Sensor - returns Isolate Host result. Capability Execution Tracking - Complete activity Execution Tracking - Begin activityThe Execution Tracking - Begin workflow activity starts the auditing process for a Security Operations Integration workflow that operates on observables. Get IP from CI activityThe Get IP from CI workflow activity gathers the IP address from configuration items (CIs) to use in the workflow. Collect Carbon Black Configurations activityThe Collect Carbon Black Configurations workflow activity gathers configuration information to use in the workflow. Get Sensor ID activityThe Get Sensor ID workflow activity gathers sensor identifiers to use in the workflow.Set Network Isolation Enabled activityThe Set Network Isolation Enabled workflow activity enables network isolation.Update Sensor activityThe Update Sensor workflow activity updates the sensor to isolate hosts or endpoints.Capability Execution Tracking - Complete activityThe Capability Execution Tracking - Complete workflow activity updates the audit record when the workflow is complete.Security Operations Carbon Black Integration - Remove Host Isolation workflowThe Security Operations Carbon Black Integration - Remove Host Isolation workflow unblocks communication with a specified host or endpoint in a Carbon Black system.
Security Operations Carbon Black Integration - Isolate Host workflow The Security Operations Carbon Black Integration - Isolate Host is the implementation for the Carbon Black integration launched by the Security Operations Integration - Isolate Host workflow. Before you beginRole required: sn_si.analyst About this task Workflow process activities include: Execution Tracking - Begin (CIs) activity Get IP from CI Collect Carbon Black configurations Capability Execution Tracking - Failure activity Get Sensor ID Set Network Isolation Enabled Update Sensor - returns Isolate Host result. Capability Execution Tracking - Complete activity Execution Tracking - Begin activityThe Execution Tracking - Begin workflow activity starts the auditing process for a Security Operations Integration workflow that operates on observables. Get IP from CI activityThe Get IP from CI workflow activity gathers the IP address from configuration items (CIs) to use in the workflow. Collect Carbon Black Configurations activityThe Collect Carbon Black Configurations workflow activity gathers configuration information to use in the workflow. Get Sensor ID activityThe Get Sensor ID workflow activity gathers sensor identifiers to use in the workflow.Set Network Isolation Enabled activityThe Set Network Isolation Enabled workflow activity enables network isolation.Update Sensor activityThe Update Sensor workflow activity updates the sensor to isolate hosts or endpoints.Capability Execution Tracking - Complete activityThe Capability Execution Tracking - Complete workflow activity updates the audit record when the workflow is complete.Security Operations Carbon Black Integration - Remove Host Isolation workflowThe Security Operations Carbon Black Integration - Remove Host Isolation workflow unblocks communication with a specified host or endpoint in a Carbon Black system.
