Just got bit by the lack of this. Need some way to at least report on past auto-healed incidents. Arguably we should have a toggle to enable actual tickets and not just historical info.

The official response is "to reduce noise we don't tell you". I'd counter by saying any malware encounter is one too many, even if handled/blocked. At minimum we should council the user and suggest SAT.

Agree!!

We're in the process of transitioning from Webroot with no EDR to Huntress EDR and Microsoft defender - I was under the impression that Huntress would fill in the gaps here and create a ticket through our PSA integration for an incident if there was one, however this does not appear to be the case. Please add it as an option - This is all but a dealbreaker to our plan to can webroot in lieu of using Microsoft defender with Huntress looking over it's shoulder.

This is definitely needed as we can spend a lot of time troubleshooting an issue never to realize defender blocked something and we never knew. This just happened to us today.

Just had an incident where this happened. Upvoting.

Really need this, just spent a bunch of time chasing an issue with a vendor to find out the files was being quarantined (after digging in multiple levels to find the alert).

I would really like this feature. If I am not in the portal 24/7 it is nice for a heads up alert to look closer or talk to an individual to have them stop downloading this bad file that they think they need that keeps getting blocked..

An absolute must!

I would add this isn't a "nice to have" but a necessity in a RMM/MSP world.