Cybereason - Unisolate Host
Details
This atomic belongs to the Cybereason atomic group.
Sends a request to Cybereason to remove a host from isolation by its Pylum ID. The Pylum ID can be retrieved with the "Search Sensors" atomic.
Target: Cybereason integration target or HTTP Endpoint for "your-tenant.cybereason.net" with a path of "/rest"
Account Key: None if using an integration-provided target, authorization cookie if using an HTTP Endpoint target
Steps:
[] Build the request payload
[] Request to remove the host from isolation
[] Check if the request was successful:
[]> If it was, set the output variable
[]> If it wasn't, output an error
More information about this API: https://nest.cybereason.com/documentation/api-documentation/all-versions/remove-machine-isolation
About
Integration
Authorship
Cisco Managed