MAV (Managed AV - Microsoft Defender)

Looking to have any/all Antivirus Event create a ticket via PSA. With opt-in and opt-out of this. Would be nice to include details as to if it was removed or not.

Ability to audit when and/or what account added MAV exclusions at the different levels.

One of the key components of Windows Defender is the Attack Surface Reduction (ASR) Rules. In my opinion, the ASR rules is what makes Defender such a powerful platform. It would be great if we could include the ability to turn on, manage, and add exclusions for the ASR rules in huntress. Other competitor platforms can do this and it works quite well. These rules exponentially expand the effectiveness of Defender.

Be able to force enable defender when defender is disabled.

Please add Tamper Protection Status to the MAV table view, MAV Dashboard and CSV export. When managing devices at scale it would make it easier to see which devices have Tamper Protection disabled with the above suggested features added.

https://docs.microsoft.com/en-NZ/microsoft-365/security/defender-business/?view=o365-worldwide

This Feature Request is on behalf of a customer. They'd like the option to ignore GPO policies when reading firewall settings, and instead go based off of the actual current firewall setting (GPO or manually configured). This will prevent false positives where group policy fails to apply and the firewall is disabled.

It would be nice if you could restore files that Microsoft Defender quarantines from Huntress.

Hi team, would love the ability to control tamper protection for MAV via Huntress. We have a few clients that use it and it can get turned off for a variety of reasons and would love to have that control in a policy.

Requesting Managed AV for Mac Devices so that our MSP partners can have AV across operating systems.