latestSwagger 2.02026-08-109450223.9 KB
94acb422c07d
Agents
Isolate Agent
Schedules host isolation for a single Agent, cutting the host off from the network while leaving Huntress connectivity intact. Isolation is asynchronous: a successful request returns the Agent with a firewall_status of "Pending Isolation" until the endpoint confirms isolation.
This endpoint requires an API key with permission to isolate agents. Note that the default account API key is read-only, so you'll need to create a user-based API key with the appropriate permissions to access this endpoint.
post/v1/agents/{id}/isolation
Path parameters
idinteger required
Request body
Response
Isolate Agent
Example response
{
"agent": {
"id": 1,
"account_id": 5,
"arch": "x86_64",
"created_at": "2022-03-01T20:05:10Z",
"domain_name": "WORKGROUP",
"edr_version": "0.3.20",
"external_ip": "198.51.100.42",
"hostname": "laptop01",
"defender_policy_status": "Compliant",
"defender_status": "Healthy",
"defender_substatus": "Up to date",
"firewall_status": "Disabled",
"tamper_protection_configured": true,
"tamper_protection_actual": true,
"ipv4_address": "146.134.139.9",
"ipv4_addresses": [
"10.5.80.97",
"172.27.240.1"
],
"last_callback_at": "2022-03-01T20:05:10Z",
"last_survey_at": "2022-03-01T20:05:10Z",
"mac_addresses": [
"7c:a7:b0:16:2f:78"
],
"organization_id": 7,
"os": "Windows 8 Pro",
"os_build_version": "19044",
"os_major": 6,
"os_minor": 2,
"platform": "windows",
"serial_number": "wtIe1bvDbh",
"tags": [
"Server",
"Production"
],
"updated_at": "2022-03-01T20:05:10Z",
"version": "0.11.3",
"version_number": 720899,
"win_build_number": 19044
}
}