Managed EDR

We would like for the SOC analyst that performs an org-wide host isolation action to then call each number listed on the "Incident Notification Contacts" list at least once to speak to someone that can let the SOC analyst know if something unique might be happening in the customer environment that could warrant having the SOC analyst fully or partially roll back the org-wide host isolation. It would also be good for the SOC analyst to give the organization contact a quick run-down of what they saw in the environment in case the org contact hasn't seen any details about new incidents being entered into the Huntress platform yet.

Is there a way that a filter could just be automatically applied when i click on for example the "1 Unknown" under the MFA section on the home dashboard? This would save us all time and confusion of this happening

We know if an agent isn't checking in and how long, but Rio, the process insights, doesn't display this information for that add on module. I wish the portal would show me if rio was up or not as I keep finding rio agents stopped. I have setup a monitor for this in my RMM but wish huntress did this for me instead since you guys rely on this valuable data it provides.

Show installed software and any CVEs attached to that version of software. This is handy when checking machines which require updates for things like Cyber Essentials.

Would be nice to have a easily clickable link to shodan for each open port

I would like to see the following enhancements to External Recon: A way to create a printable report on a per tenant basis showing Recon results The ability to send a PSA alert to Autotask and others if a new port is opened or changed. The ability to pull Recon data via API for reporting to clients in monthly/quarterly reporting. The ability to annotate the results with notes or reasons why this port is open

Enable the control of Bitlocker from the huntress portal. Also Bitlocker Key storage.

Partner would like for organizational Security Engineers/Admins to access the Escalations tab. Currently the link at the account level and Organizational level are inaccessible for Security Engineers/Admins at the Org level to resolve/look into. If they can customize the permissions that would also work. Currently it looks like any organizational role is not able to access the link to investigate and resolve the issue.

With an ITDR or EDR Incident, I want to be able to add to the remediation action list such as Disable an Identity or Isolate an end point. Huntress does not need to be able to match computers with users, but allow us to add an action as apart of the remediation so that its auditable in Huntress

A Search bar at the top that allows you to search/switch organizations that stays up at the top no matter where you are. Right now, it's just hovering over the portal name at the top left and then having pick the customer, or clicking the organization tab, which disappears after clicking within any organization.