Feature Requests

Hi Team, we require a new column under the system details of Microsoft 365 inspector where it displays the name of the device that end user is registered or using. Instead we have two different columns, one for users and other for devices. It is difficult to find which device is registered to which user

Directsend feature is used to send internally bulk email without authentication from a trusted domain. This domain can have SPF enabled so that the spoofing can be prevented. I would like to have Liongard monitor if Directsend feature is enabled on environment or not from Cyber risk dashboard. Microsoft has this feature enabled under "Reject Direct Send"

It'd be nice if there was an inspector for ThreatLocker to load in data about application and file history as well as admin actions in regards to permitting or denying applications for an environment.

I am using HP Aruba switches and have encountered issues with the current HP ProCurve Inspector, which only supports ProCurve devices. It would be beneficial to have an Aruba Inspector that supports HP Aruba switches, as this would allow for seamless integration and inspection of these devices. I recommend submitting this as a feature request for consideration.

Watchguard's multi-tenant management interface is now the watchguard cloud, and covers other products such as their TDR etc. It has API access, and may provide a great way to add a parent inspector, plus some additional integrations, etc.

Please can you add inspectors for HPE OfficeConnect/Aruba switches?

Doesn't have an API, but does have CLI.

Sophos Central Endpoint licensing only applies to devices seen in the last 30 days, with any devices older than 30 days no longer consuming any seats. Additionally, Sophos recommend not removing old devices from Central incase they come back online in the future and require the Tamper Protection code which cannot be recovered once a device is deleted after 90 days. Liongard does not surface the lastSeenAt object from Sophos Central, and thus we cannot filter out devices that are older than 30 days and no longer consuming a license. Reference: https://developer.sophos.com/docs/endpoint-v1/1/routes/endpoints/%7BendpointId%7D/get lastSeenAt string Date and time (UTC) when the endpoint last communicated with Sophos Central.