Escalations for Command Center Banner notifications for EDR deployment (MacOS agents)
S
Sam Arora
At the moment we do not seem to provide escalations for MacOS agents that have not been fully integrated or installed. A red banner will appear in the command center to communicate this to partners.
This banner notification in the command center currently does not generate any escalation or communication to the partner (expected that the partner will see the banner in the portal)
Feedback has been provided that having just the banner, with no form of additional communication/escalation/notification of the issue is not helpful. Particularly where they have integrations in place and do not regularly access the portal as a result.
Feature request is to add escalations or email communication to the partner advising that there is an issue with EDR Functionality for MacOS agents - particularly if a red banner appears in the command center.
Thomas Reed (Huntress)
Hi, Sam, thanks for the feedback! We're scheduling an escalation to be sent to you now as a one-off.
However, I also wanted to let you know, we are working on plans to start sending automated escalations for this issue, and will be starting work on that next quarter (starting in a few days). I'd be interested in hearing feedback about how often you would want to see an escalation. Would you want repeated alerts for misconfigured agents if they don't get fixed, or just get alerts once and only get new ones if new agents are deployed and not properly configured?