We are looking for a way on how to leverage BigFix to perform ad hoc quarantine, and we found the below link regarding the quarantine command, how does this work?
https://developer.bigfix.com/action-script/reference/agent2agent/quarantine.html
If you have BigFix Compliance, it contains some tooling and an API for automating quarantine of Windows machines. You may find some ideas there. See also: BigFix Client Compliance Windows IPSec Framework