2021-17-21:

Escalations

Huntress Escalations are Here!

• A Huntress Escalation is used to notify Huntress account administrators that something in their account requires attention. 
• The first supported Escalation type will be for misconfigured PSAs. Huntress will notify you via email if we cannot send an incident report.
• Escalations are not incident reports however they do have severities (low, high, critical) associated with them that dictate an expected response time. If no response is received account administrators will be re-notified.
• Click here to learn more about Huntress Escalation

Single Sign-On

• Added a link to Single Sign On (SSO) on the Huntress login page. SSO-enabled users can now log in using the link to "Sign in with SSO" from the Huntress login page. SSO is currently behind a feature flag and target to be released for GA in 2022Q1.  If you are interested in enabling SSO (currently in beta), please reach out to Huntress Support.   

ServiceNow

• Removed ServiceNow integration to await further development

2021-12-03:

Host Isolation

• Added a ‘Host Isolation Recommended’ filter option to the Incident Report table which allows users to search for all incident reports where Huntress recommended host isolation. Note: host isolation does not always occur due to account opt-outs, host exclusions and Threatops overrides.

Canaries

• Ransomware Canaries is now enabled by default for all new customer accounts and trials with additional functionality. This new functionality includes:  
  
  • Additional canary file types: PDF and XLSX in addition to DOCX
  • System profile canaries
  • Embedding partner logos and URLs into each canary file
  • EFS detection
  • An ability to disable canaries at an account level 
• A future rollout is planned for existing partners to receive new functionality.  

Portal User Experience

Bug Fixes:

• Added frontend validation to require the e-mail address field to be filled out when partner admins add new users to their account.
• Fixed a problem where Partners would see “You are not authorized to perform that action” when viewing host details pages