MAV (Managed AV - Microsoft Defender)

One of the key components of Windows Defender is the Attack Surface Reduction (ASR) Rules. In my opinion, the ASR rules is what makes Defender such a powerful platform. It would be great if we could include the ability to turn on, manage, and add exclusions for the ASR rules in huntress. Other competitor platforms can do this and it works quite well. These rules exponentially expand the effectiveness of Defender.

https://docs.microsoft.com/en-NZ/microsoft-365/security/defender-business/?view=o365-worldwide

When applying Managed AV policies through the Huntress agent, if the agent attempts to push a policy and is blocked an alert with potentially some error may help. Or potentially some type of Non-Compliant substatus could be created like how there are Defender unheathy substatuses

Currently, Managed AV policies can be set on the Account, Organization, and Host levels. To take it a step further, it would be nice to see AV profiles for different device types, such as server profiles, workstation profiles, etc.

It would be nice if you could restore files that Microsoft Defender quarantines from Huntress.

Requesting Managed AV for Mac Devices so that our MSP partners can have AV across operating systems.

Looking to have any/all Antivirus Event create a ticket via PSA. With opt-in and opt-out of this. Would be nice to include details as to if it was removed or not.

Be able to force enable defender when defender is disabled.

Ability to audit when and/or what account added MAV exclusions at the different levels.

Please add Tamper Protection Status to the MAV table view, MAV Dashboard and CSV export. When managing devices at scale it would make it easier to see which devices have Tamper Protection disabled with the above suggested features added.