| Vendor | Available Actions |
|---|---|
| Crowdstrike | Isolate Host, Lift Host Containment, Blocklist File |
| SentinelOne | Isolate Host, Lift Host Containment, Quarantine File, Blocklist File, Terminate Process |
| MS Defender Endpoint | Isolate Host, Lift Host Containment, Quarantine File |
| Watchguard | Isolate Host, Lift Host Containment, Quarantine File |
| Arctic Wolf Aurora | Isolate Host, Blocklist File |
| TrendAI EDR | Isolate Host, Lift Host Containment, Blocklist File |
| MS Entra | Revoke Sessions, Reset Password, Disable Account, Enable Account |
| Google Alert Center | Revoke Sessions, Reset Password |
| Sublime | Quarantine Message, Spam Message, Restore Message |
| Mimecast | Reject Message, Release Message |
Response Actions
Vendor Specific Automations
List of Actions for Each Vendor Integration
⌘I