Security Automation

Device/Endpoint

Actions
- Disable Driver
- Get File Information
- Isolate Device
- Quarantine File
- Remove Registry Key
- Remove Scheduled Task
- Restrict Code Execution
- Running Anti-Virus Scan
- Stop Service
Targets
- Device
- Device File

Email

Actions
- Remove Email
- Soft-Deleting Email Messages
- Blocking URLs
- Turning Off External Mail Forwarding
Targets
- message
- message attachment
- message body artifacts
  - url
  - phone-number
  - email address