To make it easier to filter and use automations, email and PSA subject lines now include the Huntress product and organization name.
Huntress [Product - EDR, ITDR, SIEM, ISPM, ESPM, SAT] [Severity] [Category] | [Description] ([Organization])
Example: Huntress EDR Critical Escalation | Suspicious Process on HOST01 (Acme Corp)
  • The product name applies to all notification categories (i.e., Incident Reports, Escalations, Platform Actions, and Account Notices). The name is omitted when the product cannot be determined.
  • Organization name is new for Escalations and Platform Actions, matching the existing Incident Report convention. The organization name is omitted when the notification spans multiple organizations or has no organization association.
  • Both changes affect email subject lines and PSA ticket titles across all supported integrations. If you parse notification subjects for routing or using automation, please update your rules to account for the new format.