Playbook: CrowdStrike OAuth API Network Isolation
Description
Accepts a hostname or device id as input and attempts to isolate (quarantine) the device in Crowdstrike. We then generate an observable report as well as a Markdown formatted report from the results. Both reports can be customized based on user preference.
Apps
How To Implement
This input playbook requires the CrowdStrike OAuth API connector to be configured. It is designed to work with an endpoint hostname or device id and contain the corresponding endpoint for use in automation playbooks.
Explore Playbook
Click the playbook screenshot to explore in more detail!
Required fields
- device
Reference
source | version: 1