Huntress Managed Endpoint Detection and Response (EDR)

Agent Management

• ▶ Agent Configuration and Status
• ▶ Agent Features
• ▶ Agent Troubleshooting

Incidents and Isolation

• ▶ Detections
• ▶ Isolation
• ▶ Remediations
• ▶ Simulations and Testing

Managed Antivirus

• ▶ Status, Policy, and Configuration
• ▶ Exclusion Management
• ▶ Microsoft Defender for Endpoint
• ▶ Other Antivirus Solutions
• ▶ Scans

• Support Limitations for Microsoft Defender

Process Insights

• High CPU Utilization and Spikes
• Huntress Watchdog Functionality
• Exclude Endpoint or Organizations from Process Insights
• Export Process Insights Data to AWS
• Potentially Unsecured Credentials

Ransomware Canaries

• Limitations of Ransomware Canaries
• How to Disable or Re-Enable Ransomware Canaries
• Add Your Company Branding to Huntress Reports and Ransomware Canaries

Reports

• Agent Data Export to CSV or Excel
• Weekly and Monthly Account Summary Reports
• Monthly and Quarterly Process Insights Reports
• Monthly and Quarterly Threat Reports

Platform and Other Vendor Considerations

• ScreenConnect Instances in the Huntress Platform
• Why Reboots are sometimes necessary.

Firewall

• Microsoft Defender Firewall Status
• Troubleshooting Defender Firewall Profiles & Group Policy