The analyst needs to develop a remediation plan. An Endpoint Security (HX) containment action prevents the affected asset from interacting with the artifacts. For example, if the analyst contains the host (Joe's laptop), Joe will no longer be able to use the word.exe program on his laptop. The analyst clicks Actions > Request > Containment.
.png "Helix_RequestContainment.png")