Additional context for installed apps
planned
W
Warren Gamley
It would be super helpful to have some additional context around the installed apps section of the ITDR portal. For example, if Huntress can determine the publisher of a particular installed app, it would be useful information to know so that it could be filtered out. It looks like Microsoft publishes a ton of apps that work in the background on Azure/M365, but they are not identified as Microsoft apps. At this point we could probably just filter those out and focus on the third party ones. Any additional information gathered would be super helpful too!
Autopilot
Merged in a post:
Rogue apps installed apps list add basic info, like if it's Microsoft 1st party
A
Andy Dodge
The full list of installed apps under Rogue Apps is enormous and mostly seems to be Microsoft 1st party, default activated apps. Presumably the majority of them are needed for basic functions, but if some of those apps are 3rd party things and not Microsoft normal things I wouldn’t have any way to know other than if Huntress flags them.
My suggestion is if you could have that list show another column with minimal basic information for known apps, such as “Microsoft 1st party, enabled by default on new 365 tenants” that would help me to narrow down which ones I should actually look at and which can be safely ignored as normal legitimate apps. Presumably you have at least one person at your company who really does know what all these apps are and could provide a lot of this information without too much effort.
Rich Mozeleski
marked this post as
planned
Warren Gamley we plan on making quite a few enhancements to Rogue Apps UX in the near future!