Use Huntress EDR/ITDR in the new UI

Select the client and open Engage > Deliverables. You need access to that client's advanced Deliverable sections, the relevant connected integration, and permission to edit the Deliverable.

1. Open an unpublished Deliverable, or create one. Return a published Deliverable to its unpublished state before changing report content.
2. Add or open the Risk Management section. Open Configure Risk Management section to review enabled integrations and enable Huntress EDR/ITDR where the client's connection is available.
3. Open the Huntress EDR/ITDR report's More actions > Configure menu. Adjust the available display choices, report heading, filters and PDF options in the side panel. There is no separate Save button for these changes; check the saved status before leaving.
4. Allow report preparation to finish, review the result, and publish the Deliverable before presenting, sharing or downloading it.

Review endpoint events, investigated signals, incidents and agent coverage for the selected reporting period. Identity panels depend on the connected Huntress account and returned ITDR data. Unavailable identity coverage is not proof that no identities are protected.

Report data is captured when the section is generated or refreshed. Opening an existing report does not fetch new vendor data. A published report keeps its saved snapshot; return it to the unpublished state and refresh its data when you need a newer report. Missing or unavailable data is not a measured zero.

See Adding and configuring Deliverables sections for the current editor workflow.

For the classic interface, see About the Huntress EDR/ITDR Deliverable report — classic UI.

Need help? Contact ScalePad Support.