MAC assets User Isolation

InsightIDR
1

Hello Everyone,

I have a question about MAC assets. Let’s assume we have 2 user on mac asset and we want to Isolate only virus affected or compromise user. Is there any possibilities about isolate this user?

I read this document but it says we can only directly isolate whole asset.

Quarantine an Asset | InsightIDR Documentation (rapid7.com)

2

@testuser our isolation capabilities do not apply to local accounts, only AD users

1 Like
3

Thanks for your help David