Send ticket for every host isolation
complete
A
Alex Payne
We receive a ticket now for hosts isolated by the Huntress team as a part of an investigation, but we'd also like a ticket for any manual host isolations performed. If someone calls in because their device can't access the internet, I want a tech to be able to easily identify that as the reason within our ticketing system. If they weren't the tech that isolated within Huntress, they'd have no way of knowing it was triggered there unless they had credentials to the Huntress dashboard and thought to look there.
S
Spencer Engleson
complete
S
Spencer Engleson
Hey Alex Payne! We recently released a new feature that delivers a Preliminary Incident Report as soon as a manual host or identity isolation task is performed by Huntress SOC. The Preliminary Incident Report explains that we are investigating an incident and a complete Incident Report with Investigative Summary and Remediations will be coming soon. When we post the complete Incident Report, the Preliminary Report is updated with appropriate title, Investigative Summary, and Remediations.
Hope this helps! Please shout with any further feedback.
A
Alex Payne
Lee Gribbin