Allow SIEM-only organizations
planned
G
Grant Thomson
Some of our customers have EDR that is forced on them by HQ or a parent company, but they want to add Huntress SIEM. I was told that because already have customers using EDR, there's no way to add a new organization with SIEM only.
I realize that there's a single Huntress agent that must be installed. But in the same way that you can currently have EDR without SIEM through overrides, I'd like to be able to do the reverse (SIEM without EDR).
We didn't realize this issue existed until we migrated SIEM from another provider and now we're stuck with organizations that needs this feature.
Rich Mozeleski
Merged in a post:
Option to Turn Off MDR Feature for SEIM Use
B
Brian Flanagan
I would like the ability to turn off the MDR feature in Huntress, even though we have already purchased it, to use it for SEIM purposes. This would allow the agent to funnel logs and insights to the SOC on your side, ensuring we can still utilize Huntress effectively without interference from SentinelOne.
M
Martin Twerski
Likely a dup of https://feedback.huntress.com/siem/p/allow-siem-only-organizations
Chris Bisnett
planned
We're working on the multi-product functionality that would allow you to specify which products you want to enable for each Organization or Endpoint. This is planned for Q1 2025.