Automating Device Quarantine for Critical Risks: From Manual Isolation to Scalable Response
IT Ops regularly needs to isolate endpoints posing critical risk — severe vulnerabilities, unpatched systems beyond remediation, theft, or loss — with isolated devices then requiring physical shipment or direct technician follow-up. Tanium's quarantine capability was the natural mechanism to enforce isolation, but on peak days hundreds of devices can need quarantining at once, making manual handling impractical and error-prone. The team is automating the quarantine workflow so it scales reliably without sacrificing response time or accuracy.
Additional details
Session Type
In-Person, Breakout
Session Tag
Core, Endpoint Management, Security Operations
Role
Automation Engineer, Incident Responder, Security Engineer, Systems Architect