Forum Discussion
smelias
Nov 08, 2023Copper Contributor
Defender PC Isolation Questions
Hi, We know we can "isolate" a PC using defender if there's a detected comprise. However how does this actually work? Is it using the existing software firewall on the PC to accomplish this via p...
jbmartin6
Jul 12, 2024Iron Contributor
It may be possible, but what would the use of isolate be in that case? Just trigger the auto-rebuild directly. That process takes it offline so I don't see where MDE isolation adds anything. The whole point of MDE isolation is to be able to continue investigating the host, such as for files or memory artifacts, without allowing it to be used by an attacker.