Differentiate Microsoft vs Google ITDR Escalations
complete
N
Naftuli Herzog
Google ITDR escalations are using Microsoft alert wording and templates. For example, Google login alerts show messages like “usage location provided by Microsoft”.
This is confusing in all environments:
If only Google is used, the Microsoft wording is misleading
If both are used, technicians cannot tell which identity provider triggered the alert without checking the portal
Google alerts should use Google-specific wording and clearly indicate the source (Google vs Microsoft) in the alert itself.
Rich Mozeleski
updated the status to
complete
We found a copy error in ITDR Unexpected Login PSA ticket bodies that incorrectly states "Microsoft" as the identity provider when in some instances "Google Workspace" is the identity provider.
We've also added copy to the PSA ticket body to indicate whether the tenant in question is M365 or GWS. This should allow customers to triage the ticket without having to log into Huntress to determine the source of the escalation.
N
Naftuli Herzog
Rich Mozeleski I don't believe support is the correct approach for this. Just update the message wording if it hasn't been fixed yet.
Rich Mozeleski
Naftuli Herzog hello! I need a support ticket to help us find exactly where this text exists. I am not seeing it in any of our Google escalations. You can also email me direct at rich.mozeleski@huntresslabs.com
Rich Mozeleski
updated the status to
closed
Rich Mozeleski
Hey there Naftuli Herzog, can you file a support ticket so we can get the team looking at this?
Rich Mozeleski
updated the status to
under review