Managed EDR

Adding a new ability to detect phishing when a user connects to a fake web page with a spoofed favicon that does not match the Microsoft favicon

EDR Capabilities for specific flavors of Linux, offering the same level of security and protection as our Windows and MacOS agents.

Huntress can show in each agent whether Defender tamper protection is enabled or not. To find & remediate these, it is impractical to check each one individually. A single page or report that shows all these devices would allow us to keep on top of this much more efficiently.

It would be invaluble for huntress to be able to mark a file as tamper-proof/offer tamper protection for various system files. We had a TA bypass DUO by pushing changes to the host file and flooding the API to localhost .

After fixing "Unmanged" clients, it can take up to 24 hours for the portal to update. Support said that they need to send a force survey command. I would like to see a "Force Survey" button added to the client portal.

We have a client who manages his own clients, and likes the branding to be his. However, the name of our main account shows up at the bottom of the "Isolation messages" which are displayed for his clients. I see that the report are banded. Can the isolation messages, (and any other branding visible to the end user), be branded for our client?

Partner would like to have the ability in Huntress to restrict access to certain files/paths and a way to monitor/alert them in the event that these files are accessed/modified by users.

Ability similar to SentinelOne to be able to remove a Huntress Agent via a Huntress controlled script from safe mode. Avoiding issues where previous IT has passed away, disappeared, or is refusing to comply with the clients request even after legal action. Or potentially a legal form/request the client themself can make to Huntress with a legal proof they've terminated services with the other provider.

Ability to track new sign-in from a device not running the Huntress agent.

Tracking and recording user logon and logoff events on a protected Endpoint to monitor access, ensure security, and detect unauthorized activities