macOS

Prevent the Huntress app and other important Huntress files from being deleted, moved, or otherwise tampered with.

We're 95% macOS and Huntress' EDR agent has a maddening inability to get the hostname right. On about 40% of my fleet, the hostname comes back as something like "mac", "Mac", or "macbookpro". This makes it extremely difficult to reconcile which machine these correspond to. It forces me to open my MDM and cross-reference with information there. I propose one of two solutions. . .and doing both would be ideal. 1 - Get macOS hostnames right. Virtually every other SaaS product I use seems to be able to do this. Why can't Huntress? 2 - In the Huntress console, allow me to modify the hostname or a corresponding field that could be displayed in the EDR agents list.

Adding more persistence techniques to have Huntress EDR for MacOS increase efficacy within MacOS detections

This update to the EDR Agent software for MacOS will stop unauthorized removal as well as making any attempt to stop associated processes or elements more difficult, which would render the EDR non-functional.

Would be good to collect the Mac logs into the SIEM its a requirement for some of our clients right now and makes sense to be in Huntress.

I've discovered that most of the MacOS agents lack the proper permissions to access the disk and need a system extension installed. Is there a way to deploy these updates in mass, rather than selecting each agent independently? This would greatly streamline the process and improve efficiency.

Additional MDM providers added to make the deployment of Huntress EDR for MacOS seamless. Currently vetting out vendors so leaving agnostic. Please do suggest MDM vendors you'd like to see us working with!

Adding additional insights into file and application based malware/attacks

Does anyone have a recommendation on how to monitor a Mac endpoint running Huntress, that the Huntress agent is functional and healthy? Like on Windows we use our RMM to check that the Huntress service is running and run a powershell script daily to check for if the agent became orphaned.

Adding support for the MacOS EDR Agent to be deployed seamlessly through Addigy MDM