SNAC Host Integrity Requirement Template

Hi,

I have a specific requirement of isolating zero day attack machines from production network with-in few munites automaticaly.

I am trying to configure the Host integrity policy to fail so that the machine can be moved to quarantine VLAN by SEPM policy.

Is anybody have a custom template to define a requirement in HI to fail is any machine detect a virus attack.

( the machine woud be installed with symantec AV updated with basic required definition etc..)

It is a business requirement to quarantine those machines.  Can anyone help..

thanks