Windows Defender Detection Notifications | Voters

Windows Defender Detection Notifications

Adam Matthews

To enable better reporting via RMM, it would be nice to enable notifications for Defender detections. Including those which are low-severity or automatically remediated.

November 4, 2021

Lawrence Blankenship

I would add this isn't a "nice to have" but a necessity in a RMM/MSP world.

Patrick Sofo [Security Product Manager]

Merged in a post:

get notified on Defender detections

Mike Goldenberg

It would be extremely helpful if we could be notified of a threat detected by Windows Defender. Just found that a trojan was blocked on one of the endpoints and we did not лотщц about it. Would be great time to have a chat with the user.

March 6, 2024

Ren Niania

This is a must

Jason Lehman

This would be very useful. Kind of a shame it is on the road map and not there yet

Peter O'Hara

This is a must. I have clients asking me why are they getting alerted about defender finding something, but I have no visibility unless i log into huntress and find there machine. some defender alerts in huntress have not resolved the issue, so even a low sev incident to say defender found something and cleaned it, nothing to do... or defender failed to remove, take some action.

Kevin Marshall

Agreed! 100% would love to heave reports for any defender notifications.

Alex Payne

Heath Beavers

Nathan Hunt

I learned that PUA defender notifications are not reviewed by Huntress so it would be great to have automated email notifications or PSA notifications when there is a defender detection that is not reviewed so I can manually investigate. Although the best course of action would be for all detections to be reviewed by Huntress threat ops

Justin Strate

Agreed here, we had a trojan blocked today but would have never known if we didnt happen to log in and browse the site....kind of a big miss to me that we could not know there was an attack if defender was the only one blocking/fighting it.

Dan Parzanese

Seeing issues where the same detection is repeated on a daily basis and there is no alert. This really needs to be implemented.

Kyle Hanslovan

Dan Parzanese: I’ve have the team look into this for you, but I’m willing to bet you’re benefiting from the human managed aspect of Managed Antivirus. We see false positives with all AVs and it wouldn’t surprise me to see the team isn’t bothering/creating more work for you.

Should hear a proper comment back here shortly ;)

→