Lift host containment

On Windows hosts that use Agent and the Arctic Wolf® Agent Containment Driver, host containment is managed by Arctic Wolf.

When Arctic Wolf lifts containment from a Windows host, this notification appears on the host: "This machine's quarantine has been lifted."
To verify that the agent is no longer contained:
  1. Sign in to the Arctic Wolf Unified Portal.
  1. In the navigation menu, click Data Collection > Agents.
    The Status column of the host no longer displays Contained.