Skip to main content

Isolate desktop command for Nebula and Cortex XSOAR integration

This article describes how to initiate a Desktop Isolation action on an endpoint based on IP address or hostname using Palo Alto Networks Cortex™ XSOAR command line interface.

Base command

malwarebytes-isolate-desktop


Input

Argument name Description Required
hostname The hostname of an endpoint in Nebula. Optional
ip The IP address of an endpoint in Nebula. Optional


Context Output

Path Type Description
Malwarebytes.Scan.Machine_ID string The endpoint ID of the host.
Malwarebytes.Scan.Job_ID string The job ID of the scanned host.


Command example

!malwarebytes-isolate-endpoint hostname=TA-AZ-CLT1


Context example

{
 "Malwarebytes.Scan": {
     "Machine_ID": "017febb6-ae68-4c15-9918-d911c72d062a",
     "Job_ID": "2e9894bf-d0ef-4618-a8bb-40193b1e250a"
  }
}


Human readable output

Desktop Isolation action has been successfully started on the Endpoint: TA-AZ-CLT1 with the job_id: 2e9894bf-d0ef-4618-a8bb-40193b1e250a. Use job_id in malwarebytes-get-job-status command to view results

 

Return to the table of contents.

Related articles