Desperately need to be able to bulk select unauthorised countries in ITDR. This way a conditional access policy that allows only 3 countries for example can be replicated in Huntress very easily. Currently, this is a very laborious task in selecting country by country.

Would like to see the ability to escalate by location more granular than country. For example, by US state. We have a user with reported logins from states and locations where they are not physically present and need to be alerted to this.

I would love to see the ability to schedule a time frame for expected travel rules, stead of having them start from the time I make the rule. We currently have clients that give us travel plans months out and we have to schedule ourselves so far in advance to set the rule.

I'd love to see it integrate better with Microsoft Entra Conditional Access. For instance, if a conditional access policy restricting/allowing access from certain countries is set, Huntress should follow that and not alert if it sees logins from any of the countries specified in the CA. Thanks