Some of our customers have EDR that is forced on them by HQ or a parent company, but they want to add Huntress SIEM. I was told that because already have customers using EDR, there's no way to add a new organization with SIEM only. I realize that there's a single Huntress agent that must be installed. But in the same way that you can currently have EDR without SIEM through overrides, I'd like to be able to do the reverse (SIEM without EDR). We didn't realize this issue existed until we migrated SIEM from another provider and now we're stuck with organizations that needs this feature.
