Isolate Machine

6 min

description initiates isolation of a specified machine in microsoft defender using its unique id and requires a comment endpoint url /api/machines/{{id}}/isolate method post inputs path parameters (object) – required id (string) – required json body (object) – required comment (string) – required comment to associate with the action isolationtype (string) type of the isolation allowed values are full or selective isolationtype controls the type of isolation to perform and can be one of the following full full isolation selective restrict only limited set of applications from accessing the network output example \[ { "status code" 405, "response headers" { "date" "thu, 04 may 2023 18 07 32 gmt", "content length" "0", "connection" "keep alive", "allow" "post", "strict transport security" "max age=15724800; includesubdomains" }, "reason" "method not allowed", "response text" "" } ] output parameters status code (number) reason (string) response text (string) response headers header type date string content length string connection string allow string strict transport security string