---
title: Security Operations - Isolate Host Flow
description: The Security Operations - Isolate Host flow is a high-level flow independent of integrations. It uses the configured queries to search for a set of configuration items. Use it to fulfill an integration, such as Carbon Black.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/secops-integration-isolate-host-workflow.html
release: australia
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Security Operations Integration- Isolate Host capability, Integration capabilities, Security Operations Integration Reference, Security Operations common functionality, Security Operations]
---

# Security Operations - Isolate Host Flow

The **Security Operations - Isolate Host** flow is a high-level flow independent of integrations. It uses the configured queries to search for a set of configuration items. Use it to fulfill an integration, such as Carbon Black.

## Before you begin

Role required: sn\_si.analyst

## About this task

This flow is triggered from the **Configuration Items** tab on a security incident related list.

\[Omitted image "isolate-host-flow.png"\] Alt text: Flow Designer for Security Operations - Isolate Host

Activities specific to this flow are described here. For more information on other activities, see [Common Security Operations integration flows and orchestration activities](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/common-wf-activities.md).

**Parent Topic:**[Security Operations Integration- Isolate Host capability](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/isolate-host-capability.md)