macOS

Prevent the Huntress app and other important Huntress files from being deleted, moved, or otherwise tampered with.

Would be good to collect the Mac logs into the SIEM its a requirement for some of our clients right now and makes sense to be in Huntress.

Adding more persistence techniques to have Huntress EDR for MacOS increase efficacy within MacOS detections

Additional MDM providers added to make the deployment of Huntress EDR for MacOS seamless. Currently vetting out vendors so leaving agnostic. Please do suggest MDM vendors you'd like to see us working with!

Adding additional insights into file and application based malware/attacks

This update to the EDR Agent software for MacOS will stop unauthorized removal as well as making any attempt to stop associated processes or elements more difficult, which would render the EDR non-functional.

Does anyone have a recommendation on how to monitor a Mac endpoint running Huntress, that the Huntress agent is functional and healthy? Like on Windows we use our RMM to check that the Huntress service is running and run a powershell script daily to check for if the agent became orphaned.

Adding support for the MacOS EDR Agent to be deployed seamlessly through Addigy MDM

Currently the Huntress Agent Deployment [MAC] component for Datto RMM installs the base version of Huntress, but doesn't install the System Extension. Could this be added to the existing quick job?

The partner would like to be alerted when possible macOS policies are conflicting for installing/updating Huntress. Currently, support can look into surveys on their end to see if there are any possible conflicts with the policies listed in the survey and comparing them to our mobileconfig file or use this info to notify the partner that the deployment is outdated.