Carbon Black Cloud: How to automatically open the source organization when opening an alert as an MSSP.

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Can an MSSP open an alert without having to log into the customers Org?

Environment

• Carbon Black Cloud (Formerly PSC) Console: All supported versions
• Orgs attached to an MSSP account
• Alerts managed by an MSSP account

Resolution

Append the following to the alert URL, replacing [orgID] with the source organization ID:

&orgId=[orgID]

 

Additional Information

Organization keys will be supported in a future backend release.