Currently, if an EDR Escalation generates a ticket in Halo PSA, updates to the escalation are not reflected in the ticket. Once the initial escalation is resolved, the ticket closes. If new hosts are added to the escalation, notification is only sent via email and the ticket system has no visibility into the unprotected/escalated hosts. This leaves endpoints unprotected due to lack of visibility.