A First Detected field showing a timestamp of when Reco first identified a posture check (preferably by entity) so that teams are able to extract this field for data analytics.
This allows for...
Currently we have a way to exclude a user from an Alert, how about include or include a group. That could help orgs track when a user is soon to be off-boarded
The alert that comes up as critical when someone is elevated to Global admin should have context from the PIM event that enabled that elevation. If elevation happens with a PIM event, then it should...