Get Started with Auto Remediations

• About Auto Remediations
• Enable an Auto Remediation in Workbench
• Auto Remediation Manual Fallback

Block Bad Hashes

• Carbon Black Cloud: Block Bad Hashes
• CrowdStrike: Block Bad Hashes
• Elastic Security: Block Bad Hashes
• Microsoft Defender for Endpoint: Block Bad Hashes
• Palo Alto Cortex XDR: Block Bad Hashes
• SentinelOne: Block Bad Hashes

Contain Hosts

• Carbon Black Cloud: Contain Hosts
• Cortex XDR: Contain Hosts
• CrowdStrike: Contain Hosts
• Cybereason: Contain Hosts
• Elastic Security: Contain Hosts
• Microsoft Defender for Endpoint: Contain Hosts
See all 8 articles

Deactivate Access Keys

• AWS CloudTrail: Deactivate Access Keys
• AWS GuardDuty: Deactivate Access Keys

Delete Malicious Files

• Microsoft Defender for Endpoint: Delete Malicious Files
• Crowdstrike: Delete Malicious Files

Delete Registry Key

• CrowdStrike: Delete Registry Key

Disable Accounts

• Azure Cloud Direct: Disable Accounts
• Duo Cloud: Disable Accounts
• GitHub: Disable Accounts
• Google Workspace: Disable Accounts
• Microsoft 365: Disable Accounts
• Microsoft Defender for Endpoint: Disable Accounts
See all 7 articles

Kill Processes

• Crowdstrike: Kill Processes
• Microsoft Defender for Endpoint: Kill Processes

Remove Malicious Email

• Google Workspace (Formerly G Suite): Remove Malicious Email
• Microsoft 365: Remove Malicious Email

Reset Credentials

• Microsoft 365: Reset Credentials
• Okta: Reset Credentials