Managed EDR

Partners could establish what RMM they use and if another RMM appears on a machine under their management, an alert/isolation could take place. This could prevent an attacker from leveraging what's typically viewed as trusted RMM software as a persistence mechanism other than an autorun.

Ability to map Office 365 Groups for MDR to other organisations in Huntress. For example Office 365 Mapped to Head Office Organization. 365 Group A mapped to Sub Organization 1, 365 Group B mapped to Sub Organization 2

Partner would like to have the ability in Huntress to restrict access to certain files/paths and a way to monitor/alert them in the event that these files are accessed/modified by users.

It would be great if we can flag bad ports and alert on them. 3389 should never be open, and many other are very problematic. Insurance companies like Coalition are doing this and Huntress can too. https://control.coalitioninc.com/login/

Would be nice to have a easily clickable link to shodan for each open port

For the EDR listing of Agents, there is currently no ability to view a changelog - in other words: this month Organization "Acme Anvils" might have 50 Agents. In two months from now they have 47. What changed to bring us to 47? What Agents/Hostnames were added? Which ones were removed? This data is either untracked or unavailable to us through the web interfaces. Use case: if one of my customers asks me "why did my bill change?" I would love to not have to sleuth around in my own systems, not have to throw up my hands and say "they didn't tell me", but rather to have access to this data and prove myself and the systems I use competent at knowing the answer to the reasonable question "what changed and when?" Thank you for your consideration.

Can we have an External Recon rescan button please to test an IP address after adjusting Firewall rules to confirm the port is no longer open from the outside world instead of having to wait up to 2 weeks for Shodan to rescan the IP.

I would like to see the following enhancements to External Recon: A way to create a printable report on a per tenant basis showing Recon results The ability to send a PSA alert to Autotask and others if a new port is opened or changed. The ability to pull Recon data via API for reporting to clients in monthly/quarterly reporting. The ability to annotate the results with notes or reasons why this port is open

Show installed software and any CVEs attached to that version of software. This is handy when checking machines which require updates for things like Cyber Essentials.

An app for huntress to enable direct notifications rather than via email for example and give quick access to see what the issue is or be able to manage remediation steps