On Windows hosts that use Agent, the Arctic Wolf® Agent Containment Driver is installed by default so that Arctic Wolf can contain a host during an incident or at your request.

For more information, see Arctic Wolf Agent Containment Driver.