For the purposes of our IR documentation, I think it may be prudent to add a testing feature where you can automatically isolate a host to test alerting.