Huntress logo
Huntress
Create
Roadmap
Feedback
ITDR (MDR for Microsoft 365)
178
Changelog

    Boards

  • Managed EDR

  • Integrations

  • Security Awareness Training

  • ITDR (MDR for Microsoft 365)

  • Reporting

  • macOS

  • UI/UX

  • MAV (Managed AV - Microsoft Defender)

  • Ransomware Canaries

  • Managed SIEM

  • API

  • SOC/Incident/Investigations/Escalations

  • Account/Organization/User Management

Powered by Canny

ITDR (MDR for Microsoft 365)

Category

      • Bug
      • Major
      • Minor
      • New Escalations
      • Unwanted Access Improvements
      • Shadow Workflows Improvements
      • Rogue Apps Improvements
      • Evasive Behaviors Improvements
      • New Functionality
      • Uncategorized
Additional context for installed apps
It would be super helpful to have some additional context around the installed apps section of the ITDR portal. For example, if Huntress can determine the publisher of a particular installed app, it would be useful information to know so that it could be filtered out. It looks like Microsoft publishes a ton of apps that work in the background on Azure/M365, but they are not identified as Microsoft apps. At this point we could probably just filter those out and focus on the third party ones. Any additional information gathered would be super helpful too!
1
·

planned

Allow Admins to add apps to Rogue Apps
We would like to be able to add Enterprise apps to Rogue Apps for our own alerting, for example if we know the applications an old MSP has used for a new client, we can add it to alert for in their M365 environment and allow us to find and remove the leftover apps.
0
Powered by Canny