Contain a host

On Windows hosts that use Agent and the Arctic Wolf® Agent Containment Driver, host containment is managed by Arctic Wolf.

When Arctic Wolf contains a Windows host, this notification appears on the host: "This machine has been quarantined."
To verify that the agent is contained:
  1. Sign in to the Arctic Wolf Unified Portal.
  2. In the navigation menu, click Data Collection > Agents.
    The Status column for the host displays Contained.