Carbon Black Cloud: When is the Observations (or Enriched Events) feature available in a Carbon Black Cloud Web Console?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

When is the Observations (or Enriched Events) feature available in a Carbon Black Cloud Console?

Environment

• Carbon Black Cloud Web Console: All supported versions
  • Enterprise EDR
    • XDR Add-On
  • Endpoint Standard

Resolution

When either of the following products are enabled for a CBC product instance:

• Endpoint Standard
• Enterprise EDR + XDR

Additional Information

• The XDR Add-On is required for Observations to be available in Enterprise EDR orgs
• Observations replaced Enriched Events in September of 2023