API

We'd like to automate noting expected user travel (i.e user travelling to Spain for a few days). Requesting an API endpoint to provide user, start date, end date, country would be ideal.

We are working with Rewst for process automation. It'd be great to be able to uninstall agents via API, create/delete users, isolate machines, etc..

Tickets are not created for individual identities for escalation requests. This is causing issues as we cannot track when a new identity has been added and have to review all escalations manually. Ie when we resolve an escalation for an identity it does not resolve the entire escalation.

It would be incredibly useful to be able to obtain the data in the identities table, fields being username, organization, and registered timestamp. It would be most useful as an API feature - whether it be a new 'identities' endpoint that outputs the required fields or adding those fields to the existing 'organizations' endpoint. However I would be happy with any way to obtain that data, even if it is a manual export option.

In its current state, expanding the API to include endpoints for MDR for Microsoft 365 would give partners the ability to lookup user principal names, billable status, and if an account has registered MFA.

We would like to access Potentially Unsecured Credentials through the API. We already use scripts to trigger automation around the signals, however, we must export the list of manually each run. Please make /v1/signals a thing!

Currently, the API only reports the billable count. It would be very helpful to get the list of agents and users that are being billed for each client. Currently, we are manually generating these reports for clients.

Ability to retrieve, through an API endpoint, a list of all defender exclusions/details.

We use a custom browser plugin to pop alert banners when things need attention in Huntress. This works really well for all team members when it comes to incidents but when it comes to escalations there doesn't seem to be any way to review/check for these under the API.

It would be great if there were API endpoints added for SAT and SIEM data. Even just general usage information added to /v1/organizations , as there already is for 'agents_count', and 'microsoft_365_users_count'.