The Impact of Data Breaches
Traced back to a Chinese intelligence group seeking to learn more about U.S. citizens, Marriott’s infamous breach was not uncovered until 2018, four long years…
Category: ThreatIntelligence-IncidentResponse
Hiding In Plain Sight | Huntress
We recently came across something interesting. What do you think this file is? At first glance, it looks like a log for some application. It…
Evolving the Hunt: Removing Obstacles to Innovation
When I first joined Huntress, what drew me to this company was not just the people and their passion for their work; I was enamored…
Investigating suspicious AI workflows in Microsoft Entra Agent ID: Assistive agents
{ "TenantId": "855f09b2-b284-45cb-af48-6d9ee72abb2b", "SourceSystem": "Azure AD", "TimeGenerated": "2026-05-08T15:28:55.5845975Z", "OperationName": "Sign-in activity", "OperationVersion": "1.0", "Category": "NonInteractiveUserSignInLogs", "ResultType": "0", "ResultSignature": "SUCCESS", "ResultDescription": "", "DurationMs": "0", "CorrelationId": "432ea15c-55fa-4132-ae78-cfcfb4405a96",…
Huntress Service: Ransomware Canaries | Huntress
From CryptoLocker to Locky to Sodinokibi to Maze, ransomware has been a staple in the hacker-verse for a long time. For defenders, the solution to…
Huntress Service: External Recon | Huntress
Imagine if the Empire knew that there was a flaw in the Death Star’s thermal exhaust port. How would this change the events of the…
Hiding in Plain Sight: Part 2
We recently uncovered a really peculiar piece of malware, which we’ve jokingly referred to as “the gift that keeps on giving.” And the more we…
Phishing, Office 365 and the Commercialization of Cybercrime
We are no longer battling against the classic Hollywood depiction of cyber criminals. Hackers are now acting at the same maturity level as leading software…
Cybersecurity Lessons We Learned from hack_it 2020
Creating accessible (and actionable) cybersecurity education is a huge part of our mission at Huntress — and last week, we were thrilled to host a…
Huntress Service: Partner Enablement | Huntress
Let’s face it — even the best cybersecurity tools won’t configure and sell themselves. As hackers get smarter and find new ways of sneaking into…
Tried and True Hacker Technique: DOS Obfuscation
In this blog post we shine the spotlight on an obfuscation technique that we see being used in the latest “100th version” of the TrickBot…
I Have a Lot to be Thankful for in 2020
I have a lot to be thankful for in 2020 — and it starts with the MSP community. Thanksgiving 2015: I was a punk with…