Security & Identity · CONNECTIONSearch Carbon Black Cloud alerts and endpoints, read alert history and notes, and add alert notes.
Explore 7 workflow actions for Carbon Black Cloud, including account permissions and operation limits.
Choose an action in the workflow builder, connect an account, and map its inputs. These actions are available in the catalog; your account access and a successful test determine whether they work for your setup.
Add a note to an alert, optionally as a reply.
A repeated request may repeat the external action. Review the previous result before retrying a write.
Read one alert.
Read an alert's workflow and note history.
Read one endpoint.
Read an alert's notes.
Find alerts by query, criteria and time range (two weeks by default); up to 10,000 results are reachable.
Find endpoints by query and criteria such as OS, status or policy.
Use the account and permissions required for your process. Review the connection check before configuring a workflow action.
Select a listed operation and map its required inputs. Use test records and add a human approval before writes that need review.
Inspect step outputs and confirm the result in Carbon Black Cloud. A saved workflow is not a completed provider action.
