MAV (Managed AV - Microsoft Defender)

Looking to have any/all Antivirus Event create a ticket via PSA. With opt-in and opt-out of this. Would be nice to include details as to if it was removed or not.

Being able to group endpoints within an organization (i.e Servers and Workstations) would be very helpful when managing AV.

Posting on behalf of a partner I worked with. This pertains to the Managed Exclusions UI: "can't sort alphabetically. filter has to be the exact string of the exclusion, can't be just a keyword. Exact string is also case sensitive. No ability to export exclusions into excel as a workaround. does not show how many pages of exclusions there are (only shows a "next page button" and what page number the next page will be. You "unlock" the next page by clicking on that button) reviewing what we have in there is a nightmare. It used to be better, what happened?"

With the new MAV integration of macOS Defender installations, we can see missing permissions on individual Macs. Identifying Macs with missing Defender permissions would require checking individual Macs one by one. Add a way to identify Macs that have Defender installed but are missing permissions in the Command Center dashboard (similar to the macOS Fleet Readiness or Managed Antivirus widgets)

To enable better reporting via RMM, it would be nice to enable notifications for Defender detections. Including those which are low-severity or automatically remediated.

Hi team, would love the ability to control tamper protection for MAV via Huntress. We have a few clients that use it and it can get turned off for a variety of reasons and would love to have that control in a policy.

Hi, As a part of regular checks of servers we ensure both the Huntress Agent and Huntress Rio are reporting as installed on devices. When exporting the list of devices from the Managed Antivirus dashboard into a CSV/XLSX format, the Huntress Agent version is listed but the Rio version isnt. Would it be possible for the export to also include the Rio version of the Huntress software aswell so from this report we can see both the Huntress Agent and Rio service are detected/operational?

There's a genuine demand for including what the "otherav" is in the csv that is generated when you pull from the managed av section of the dashboard. In the "Health Substatus" column, we already have the AV listed at the host level view. Please add it here inplace of "OtherAV"

Situation: My company is rolling out the MAV to most off our clients. I have a few dozen machines with status "Defender State Unknown" which I am told is being fixed in a new Huntress agent version. However, the MAV status page, when I see the machine list, there is no column for the Huntress agent version. This means I have to click on each device one at a time to see if it has gotten the update. Proposed fix: Add more columns to this page. Basically, anything that is a column on the main Agent page, should be a column on the MAV page, and likely vice versa. To avoid cluttering the page, enable a 'column chooser' function so we can add/remove columns to fit our needs in the moment. These choices should be available as well when exporting machine lists.

Please add Tamper Protection Status to the MAV table view, MAV Dashboard and CSV export. When managing devices at scale it would make it easier to see which devices have Tamper Protection disabled with the above suggested features added.