cschwab

I am looking at needing to update a number of our endpoints to install the newest endpoint agent software. The issue that I have is that we have production machines that the endpoint agent software is installed on, that I have to schedule with users in parts of our organization. In attempting to do this, I was relying on the groups that have been created and use those as a means to draw up a list of machines that I can put together as a scheduled update push, so if there is an issue or reboot of these systems, is okayed through our change management process. The problem that I seem to have in using both the Nebula GUI or the excel add in tool is getting a listing of what endpoints are in each group. As a note here, I am taking over admin of install that has been in place for about a year. So, is there something that I am missing, or is there no easy means to be able to draw out what endpoints belong in a group??? The only thing I can find in the groups section is to be able to tell it what policies to apply to that group, nothing listing out what endpoints are in that group. Charlie

Thank you for the reply, however the ticket that I had open is not related to my posted question. I am looking for a means to be able to automate response to alerts from malwarebytes nebula cloud that is not the manual process of having to sort through individual emails. Charlie

I have tried to ask this of my support liason with Malwarebytes and have not gotten anything back in over a week, so I thought I might post something here to get some ideas from community. I have been looking at ways to automate alerts our of Malwarebytes Nebula cloud instance to be able to create help desk tickets that can be acted upon by our help desk staff or escalated depending on the type of alert. I have looked at using the webhook tool as a means to do this, however I have not seen any concrete examples on how this mechanism works, and there appears to be little documentation that I can find on using it. I have gone through the malwarebytes API documentation, but there is not much there that really provides much detail on instances of being able to use it. I have also thought about leveraging the mail notifications to be able to do an automation, this however seems to be a solid means of doing automation, just alot more work than leveraging the webhook mechanisms. Wanted to ask what kind of methods (if any) someone in the community base maybe using for help desk automation. I look forward to hearing any ideas or thoughts on the issue,.