Would love to pop a SplashScreen for the end user when host isolation triggers. Make it brandable to the MSP.
"Your machine has experienced a cybersecurity issue and has been isolated from the network. Please call {MSP} @ xxx-xxx-xxxx
This would give the end user information to inform us on, as they will be calling us because they can't access something.