When looking to identify and isolate compromised network hosts, the following questions are important to answer promptly and accurately:

• What are all the possible paths attackers can take from the compromised host?
• What ports can they access?
• What objects are along these paths, and what do those devices touch?
• Is it possible for the attackers to move laterally in the network to reach critical systems or exfiltrate data to the internet?
  

Once the exposure is identified, isolating the devices is a much simpler and faster process. Read the use case for more details, including an example of how the blast radius feature can locate the host device and document in seconds every destination, protocol, and L4 port it could possibly reach.