First draft

Author: nastasha-solomon

docs/management/admin/host-isolation-ov.asciidoc

@@ -41,10 +41,11 @@ All actions executed on a host are tracked in the host’s response actions hist
 [[isolate-a-host]]
 == Isolate a host
 
-.Isolate a host from a detection alert
+.Isolate a host from an event or a detection alert
 [%collapsible]
 ====
-. Open a detection alert:
+. Open an event or a detection alert:
+* From the event analyzer view: Click an event.
 * From the Alerts table or Timeline: Click *View details* (image:images/view-details-icon.png[View details icon,16,15]).
 * From a case with an attached alert: Click *Show alert details* (*>*).
 . Click *Take action -> Isolate host*.