The Carbon Black Cloud Alert History Alert Action gets the alert history, including the create time, workflow and determination changes, notes, and Carbon Black Managed Detection and Response Analyst comments.

Configuration:

Alert ID Field
The field name in the search results that contains the alert ID for which to run a history.
Org Key Field
The field name that contains the org key that is associated with the credential.