Skip to main content
Use this page to review Huntress security items for your companies. It is for company users and MSP staff.

​
Before you start

  • You need Security read access.
  • Huntress must be connected and its organizations mapped to companies. Unmapped organizations are left out. Without Huntress, the Huntress tab does not appear. See Enable the Huntress integration.
  • Opening a record in Huntress needs your own Huntress sign-in.

​
Find a security item

1

Open Huntress

Open Security > Huntress and check the company selector.
2

Read the summary cards

The cards at the top cover your selected companies. See the table below.
3

Filter the items

Use the column filters on the Huntress security items table. Item searches by title. Type picks Escalation, Incident, or Remediation. Status and Severity take text. Company searches companies. Filtering returns you to page 1.
4

Read a row

Each row shows Item (with its category and organization underneath), Type, Status, Severity, Company, and Detected. Choose 25, 50, or 100 rows per page at the bottom of the table.
5

Open the record in Huntress

Click the link icon in the Open column (Open in Huntress). It opens in a new tab. A dash means Huntress supplied no link.
You can also use the column menu to show or hide columns. You cannot approve a remediation or close an escalation here.

​
Read the summary cards

The cards follow your company selection. They do not change when you filter the table. An agent counts as active when its status is active, online, healthy, or installed, when it is flagged online, or when it called back within the last 30 days. Active does not mean online right now. An item with no status counts as open or pending. Detected means different things by type. For an escalation it is the occurrence time. For an incident report it is the report time. Either can fall back to the created date. For a remediation it can be the last sync date. It is not always the time of the original incident. One escalation can involve several organizations. In a multi-company view it can show several company names.

​
Troubleshooting

​
Frequently asked questions

The cards summarize your selected companies. Table filters only narrow the rows.
No. An agent also counts as active when it called back in the last 30 days.
No. Use Huntress.
No. Those actions exist for Cork findings and EDR incidents only.
Tell the Home AI Assistant the item title, company, type, status, and date, then confirm the request when prompted.