Endpoint Isolation

Noun · Security & Infosec

Definitions

  1. A response action that cuts a suspicious or compromised device off from most network communication while preserving enough access for investigation or management. Security teams use endpoint isolation to stop spread without immediately powering the system down.

    In plain English: Separating a device from the network so an attack cannot spread.

    Example: "The SOC triggered endpoint isolation as soon as ransomware-like behavior appeared on the host."

Related Terms