Канал: Huntress

The Product Lab: Future of SIEM Detections

The Product Lab: Future of SIEM Detections

September 2024 Community Fireside Chat: Hiring for Culture

September 2024 Community Fireside Chat: Hiring for Culture

Protecting Our Ass..ets #threathunting #cybersecurity #msp #hackingprevention #cybercrime #ITDR

Protecting Our Ass..ets #threathunting #cybersecurity #msp #hackingprevention #cybercrime #ITDR

Unmasking OceanLotus: Defending the Defenders | Tradecraft Tuesday

Unmasking OceanLotus: Defending the Defenders | Tradecraft Tuesday

How can Escalations Improve ITDR? | Product Lab

How can Escalations Improve ITDR? | Product Lab

The Product Lab: Elevating the Unexpected: EDR, SIEM, ITDR & Billing

The Product Lab: Elevating the Unexpected: EDR, SIEM, ITDR & Billing

How to triage LukaLocker Ransomware | Tradecraft Tuesday

How to triage LukaLocker Ransomware | Tradecraft Tuesday

Breaking Down the 2024 Cyber Threat Report

Breaking Down the 2024 Cyber Threat Report

August 2024 Community Fireside Chat: Cybersecurity Table Stakes

August 2024 Community Fireside Chat: Cybersecurity Table Stakes

Unraveling LukaLocker Ransomware | Tradecraft Tuesday

Unraveling LukaLocker Ransomware | Tradecraft Tuesday

Why are cyber insurance claims denied? | Community Fireside Chat

Why are cyber insurance claims denied? | Community Fireside Chat

How to Almost do Hacking Crimes: Understanding Attacks for Better Defense

How to Almost do Hacking Crimes: Understanding Attacks for Better Defense

Understanding Business Email Compromise: Tradecraft Tuesday | Huntress

Understanding Business Email Compromise: Tradecraft Tuesday | Huntress

July 2024 Community Fireside Chat: Cyber Insurance Office Hours

July 2024 Community Fireside Chat: Cyber Insurance Office Hours

Identity Crisis: Combating M365 Account Takeover at Scale

Identity Crisis: Combating M365 Account Takeover at Scale

Backup and Recovery: A Look into the Future by Examining the Past | Product Lab

Backup and Recovery: A Look into the Future by Examining the Past | Product Lab

How to Think Like an Attacker #cybersecurity #threathunting #redteaming #blueteam

How to Think Like an Attacker #cybersecurity #threathunting #redteaming #blueteam

How to talk to your clients about Incident Response plans | Community Fireside Chat

How to talk to your clients about Incident Response plans | Community Fireside Chat

MacOS Myths: Macs Don’t Get Viruses

MacOS Myths: Macs Don’t Get Viruses

macOS Myths: Enterprises Only Run Windows

macOS Myths: Enterprises Only Run Windows

macOS Myths:macOS Is (Inherently) More Secure than Windows

macOS Myths:macOS Is (Inherently) More Secure than Windows

macOS Myths: Ransomware Is a Large Threat to macOS

macOS Myths: Ransomware Is a Large Threat to macOS

macOS Myths: macOS Faces the Same Threats as Windows

macOS Myths: macOS Faces the Same Threats as Windows

How to Spot Vishing | Tradecraft Tuesday

How to Spot Vishing | Tradecraft Tuesday

The Product Lab: A Peek into the Future (Our Product Roadmap)

The Product Lab: A Peek into the Future (Our Product Roadmap)

June 2024 Community Fireside Chat: Incident Response Planning

June 2024 Community Fireside Chat: Incident Response Planning

What Product Lab is About #ProductLab #cybersecurity #startup

What Product Lab is About #ProductLab #cybersecurity #startup

Stop Mac Hacks in Their Tracks

Stop Mac Hacks in Their Tracks

Phishing in the Fast Lane

Phishing in the Fast Lane

Smuggler's Gambit: HTML Smuggling AitM Tradecraft

Smuggler's Gambit: HTML Smuggling AitM Tradecraft

The Product Lab: M365 Capabilities & Automated Response

The Product Lab: M365 Capabilities & Automated Response

The Product Lab: Slash and Grab - ConnectWise CVE-2024-1709

The Product Lab: Slash and Grab - ConnectWise CVE-2024-1709

May 2024 Community Fireside Chat: Why MSPs Should Have a Lawyer in their Corner

May 2024 Community Fireside Chat: Why MSPs Should Have a Lawyer in their Corner

Famous AMOS: Protecting Your Cookies

Famous AMOS: Protecting Your Cookies

Lessons From Change Healthcare and System Interoperability

Lessons From Change Healthcare and System Interoperability

The Product Lab: Proactive Response, Mac, SIEM and More

The Product Lab: Proactive Response, Mac, SIEM and More

Navigating the M365 Battlefield

Navigating the M365 Battlefield

The Product Lab: Combining Tradecraft & Storytelling with SAT

The Product Lab: Combining Tradecraft & Storytelling with SAT

The Product Lab: M365, SIEM, and Huntress Command Center Updates

The Product Lab: M365, SIEM, and Huntress Command Center Updates

April 2024 Community Fireside Chat: FifthWall Solutions Cyber Insurance Office Hours

April 2024 Community Fireside Chat: FifthWall Solutions Cyber Insurance Office Hours

An Insider's Guide to Choosing an EDR

An Insider's Guide to Choosing an EDR

Protecting Your Endpoints: A Closer Look at Huntress Managed EDR

Protecting Your Endpoints: A Closer Look at Huntress Managed EDR

Key Capabilities to Look for in an EDR Provider

Key Capabilities to Look for in an EDR Provider

How to Choose the Best MDR Provider: Key Questions You Should Ask

How to Choose the Best MDR Provider: Key Questions You Should Ask

Detecting Malicious Behavior: The Key to Effective Endpoint Detection and Response

Detecting Malicious Behavior: The Key to Effective Endpoint Detection and Response

500,000 Phishing Emails in One Hour

500,000 Phishing Emails in One Hour

Improved Patient Experience: What that means for your cybersecurity posture

Improved Patient Experience: What that means for your cybersecurity posture

Financial Impact of a Threat

Financial Impact of a Threat

SlashandGrab: The Rapid Rise of Cyber Exploits...Are We Prepared?

SlashandGrab: The Rapid Rise of Cyber Exploits...Are We Prepared?

SlashandGrab: How to Detect and Respond to Compromised Admin Accounts in Screen Connect

SlashandGrab: How to Detect and Respond to Compromised Admin Accounts in Screen Connect

Huntress Live Stream

Huntress Live Stream

Cybercrime, SAT, Phishing and Wire Transfers

Cybercrime, SAT, Phishing and Wire Transfers

Carriers Have Very Specific Controls

Carriers Have Very Specific Controls

RATS - Remote Management Software with HuskyHacks and Max Rogers

RATS - Remote Management Software with HuskyHacks and Max Rogers

Using an RMM vs C2 Framework

Using an RMM vs C2 Framework

RMMs & RATs are Command & Control

RMMs & RATs are Command & Control

Cyber Insurance Carriers Continue To Treat Security As Black And White When It's Not

Cyber Insurance Carriers Continue To Treat Security As Black And White When It's Not

How Defenders Analyze RMM Compromises

How Defenders Analyze RMM Compromises

Bitter Pill: Third-Party Pharmaceutical Vendor Linked to Pharmacy and Health Clinic Cyberattack

Bitter Pill: Third-Party Pharmaceutical Vendor Linked to Pharmacy and Health Clinic Cyberattack

Token Theft from Office Desktop Applications

Token Theft from Office Desktop Applications

Spooky Skeleton Keys

Spooky Skeleton Keys

Evilginx Scariness

Evilginx Scariness

Business Email Compromise (BEC) with HuskyHacks

Business Email Compromise (BEC) with HuskyHacks

Investigating macOS Malware with Patrick Wardle

Investigating macOS Malware with Patrick Wardle

How Huntress Uses Data to Improve Security

How Huntress Uses Data to Improve Security

Cyber Insurance Masterclass Office Hours

Cyber Insurance Masterclass Office Hours

Nov 2023 | Huntress Security Awareness Training Reports

Nov 2023 | Huntress Security Awareness Training Reports

Must Know SMB Threat Insights

Must Know SMB Threat Insights

Part 3: A Winning Strategy: The Business Review

Part 3: A Winning Strategy: The Business Review

Nov 2023 | Internal SOC Improvements

Nov 2023 | Internal SOC Improvements

How Hackers Are “Blending In” to Evade Detection

How Hackers Are “Blending In” to Evade Detection

Part 2: Smooth Talking: Tackling Objections

Part 2: Smooth Talking: Tackling Objections

The Current State of Mac Malware

The Current State of Mac Malware

macOS Malware Persistence

macOS Malware Persistence

Investigating macOS Malware Using Open Source Tools

Investigating macOS Malware Using Open Source Tools

The Importance of Crash Reports

The Importance of Crash Reports

Part 1: Closing the Gap: Is My Stack Insurance Ready?

Part 1: Closing the Gap: Is My Stack Insurance Ready?

Auto Remediations

Auto Remediations

Cybersecurity Horror Stories: Introducing Huntress MDR for Microsoft 365

Cybersecurity Horror Stories: Introducing Huntress MDR for Microsoft 365

Oct 2023 | Security Awareness Training Updates

Oct 2023 | Security Awareness Training Updates

Oct 2023 | Microsoft 365 Bug Fixes

Oct 2023 | Microsoft 365 Bug Fixes

Oct 2023 | Auto-Remediations

Oct 2023 | Auto-Remediations

CTF Finale Live Stream

CTF Finale Live Stream

Building Context with Structured Analysis

Building Context with Structured Analysis

DLL Sideloading of Security Tools

DLL Sideloading of Security Tools

Using Memory Forensics to Bring Your Investigations Back from the Dead

Using Memory Forensics to Bring Your Investigations Back from the Dead

Huntress CTF Halftime Update

Huntress CTF Halftime Update

Tools of the Trade

Tools of the Trade

What Is an Advanced Persistent Threat (APT)?

What Is an Advanced Persistent Threat (APT)?

Structured Vs Unstructured Threat Hunts

Structured Vs Unstructured Threat Hunts

What Is a Cybercrime Group?

What Is a Cybercrime Group?

Qakbot Malware Takedown

Qakbot Malware Takedown

What is a Script Kiddie?

What is a Script Kiddie?

Different Types of Threat Hunts

Different Types of Threat Hunts

What Is Defense Evasion?

What Is Defense Evasion?

Hackers are Entrepreneurs Too

Hackers are Entrepreneurs Too

Episode 3: Trust the Process

Episode 3: Trust the Process

ThreatOps Stories: Rogue ScreenConnect

ThreatOps Stories: Rogue ScreenConnect

The Importance of Community in the Hunt

The Importance of Community in the Hunt

Formulating an Intelligence-Driven Threat Hunting Methodology

Formulating an Intelligence-Driven Threat Hunting Methodology

What is the Threat Hunting Process?

What is the Threat Hunting Process?

BehindTheHunt | Episode 2: Know Thy Enemy

BehindTheHunt | Episode 2: Know Thy Enemy

What Even Makes Something Malware?

What Even Makes Something Malware?

Hacker Trends in Social Engineering

Hacker Trends in Social Engineering

Cyber Hygiene Basics

Cyber Hygiene Basics

Who Is the Modern Hacker?

Who Is the Modern Hacker?

What is "Attack Surface"?

What is "Attack Surface"?

BehindTheHunt | Episode 1: What Is Threat Hunting?

BehindTheHunt | Episode 1: What Is Threat Hunting?

Asset Inventory Explained

Asset Inventory Explained

The Difference Between Hacker vs. Hunter

The Difference Between Hacker vs. Hunter

Threat Hunting Explained

Threat Hunting Explained

Abusing Admin Privs

Abusing Admin Privs

Ransomware as a Service

Ransomware as a Service

Thinking Like an Attacker

Thinking Like an Attacker

MSP Threat Landscape

MSP Threat Landscape

MOVEit: Response and Remediation Tips

MOVEit: Response and Remediation Tips

MOVEit Transfer: Uncovering the CVE

MOVEit Transfer: Uncovering the CVE

MOVEit Transfer Critical Vulnerability Recap

MOVEit Transfer Critical Vulnerability Recap

What's Happening In The News? - June '23

What's Happening In The News? - June '23

Breaking research on the MOVEit Transfer Critical Vulnerability CVE-2023-34362 Rapid Response [No 🔈]

Breaking research on the MOVEit Transfer Critical Vulnerability CVE-2023-34362 Rapid Response [No 🔈]

The Ultimate Guide to EDR

The Ultimate Guide to EDR

What Happens When Theres An Incident PT 02: The Investigation

What Happens When Theres An Incident PT 02: The Investigation

What Happens When Theres An Incident PT 01: The ThreatOps Process

What Happens When Theres An Incident PT 01: The ThreatOps Process

A Brief History of EDR

A Brief History of EDR

Huntress EDR versus 3CX, a novel compromise

Huntress EDR versus 3CX, a novel compromise

Do you have an Incident Response Plan?

Do you have an Incident Response Plan?

Huntress EDR versus Privilege Escalation

Huntress EDR versus Privilege Escalation

What is Huntress?

What is Huntress?

Huntress EDR versus Adversarial Remote Access

Huntress EDR versus Adversarial Remote Access

Huntress EDR versus Masquerading Malware

Huntress EDR versus Masquerading Malware

What's the difference between Managed and Unmanaged EDR services?

What's the difference between Managed and Unmanaged EDR services?

What is EDR?

What is EDR?

Securing Our Human Vulnerabilities

Securing Our Human Vulnerabilities

James VanderWier of F1 solutions

James VanderWier of F1 solutions

Cyber Breaches Are Expensive

Cyber Breaches Are Expensive

5 MUST HAVE Security Controls

5 MUST HAVE Security Controls

Cyber Insurance Should be Comprehensive

Cyber Insurance Should be Comprehensive

Do Insurance Carriers Give Discounts?

Do Insurance Carriers Give Discounts?

Understanding EDR Webinar

Understanding EDR Webinar

ProxyNotShell Explained

ProxyNotShell Explained

Microsoft vs. LAPSUS$

Microsoft vs. LAPSUS$

Making Sense of the LastPass Situation

Making Sense of the LastPass Situation

What will 2023 bring for the cybersecurity industry?

What will 2023 bring for the cybersecurity industry?

How TAB Computer Systems leveraged Huntress to assist his business.

How TAB Computer Systems leveraged Huntress to assist his business.

hack_it 22 - Hacking Hijinks & DLL Hijacks

hack_it 22 - Hacking Hijinks & DLL Hijacks

hack_it 22 - 0% Chance of 100% Coverage

hack_it 22 - 0% Chance of 100% Coverage

hack_it 22 - Whose Crime is it Anyway?

hack_it 22 - Whose Crime is it Anyway?

Blue Tree Technology: Fighting off an Active Exploit With Managed EDR

Blue Tree Technology: Fighting off an Active Exploit With Managed EDR

Clear Guidance Partners: Managed EDR vs. An Active Ransomware Attack

Clear Guidance Partners: Managed EDR vs. An Active Ransomware Attack

What is Threat Hunting?

What is Threat Hunting?

AssumeCompromise

AssumeCompromise

Huntress vs. A Real Cyber Threat

Huntress vs. A Real Cyber Threat

How should an MSP approach this the Cyber Defense Matrix?

How should an MSP approach this the Cyber Defense Matrix?

What exactly is the Cyber Defense Matrix?

What exactly is the Cyber Defense Matrix?

What is the Community Defense Model?

What is the Community Defense Model?

A Quick History of IT and Security

A Quick History of IT and Security

The Huntress Managed Security Platform

The Huntress Managed Security Platform

Back to basics...

Back to basics...

How to create digestible, understandable, actionable cyber security content

How to create digestible, understandable, actionable cyber security content

Managed EDR That's Easy to Implement

Managed EDR That's Easy to Implement

The Use-Case for EDR and Introducing Process Insights

The Use-Case for EDR and Introducing Process Insights

DeNISTifying NIST Part V: Recover

DeNISTifying NIST Part V: Recover

DeNISTifying NIST Part IV: Respond

DeNISTifying NIST Part IV: Respond

DeNISTifying NIST Part III: Detect

DeNISTifying NIST Part III: Detect

DeNISTifying NIST Part II: Protect

DeNISTifying NIST Part II: Protect

Don't sleep on the PowerShell history.

Don't sleep on the PowerShell history.

DeNISTifying NIST Part I: IDENTIFY

DeNISTifying NIST Part I: IDENTIFY

What the Heck is a CVE?

What the Heck is a CVE?

Babyshark (the malware strain not the song) - What about the maldoc?

Babyshark (the malware strain not the song) - What about the maldoc?

Brute force a password for a zip file...? Weird right?

Brute force a password for a zip file...? Weird right?

Is starting with ATT&CK or D3FEND the new chicken or egg question?

Is starting with ATT&CK or D3FEND the new chicken or egg question?

John Hammond’s Advice on How Businesses/Individuals Can Prepare for Cyberattacks

John Hammond’s Advice on How Businesses/Individuals Can Prepare for Cyberattacks

The MITRE ATT&CK framework...but where should you start?

The MITRE ATT&CK framework...but where should you start?

We don't get fooled again [by MAC Defender]

We don't get fooled again [by MAC Defender]

Is the Apple M1 chip really that secure?

Is the Apple M1 chip really that secure?

Top 5 Cyber Trends We Saw In 2021

Top 5 Cyber Trends We Saw In 2021

Huntress is donating $100,000 to DIVD’s bug bounty program—here’s how you can get involved

Huntress is donating $100,000 to DIVD’s bug bounty program—here’s how you can get involved

The Hacker's Perspective: Installing Persistence

The Hacker's Perspective: Installing Persistence

What are cookies?

What are cookies?

Stealing an O365 cookie from Edge to "bypass" authentication and 2FA [with commentary]

Stealing an O365 cookie from Edge to "bypass" authentication and 2FA [with commentary]

We Are Huntress

We Are Huntress

Stealing an O365 cookie from Edge to "bypass" authentication and 2FA

Stealing an O365 cookie from Edge to "bypass" authentication and 2FA

ScreenConnect Abused to Deploy Ransomware & Steal Credentials

ScreenConnect Abused to Deploy Ransomware & Steal Credentials

hack_it 2021.2

hack_it 2021.2

John Hammond's Top 3 Tips to #BeCyberSmart

John Hammond's Top 3 Tips to #BeCyberSmart

Huntress Product Launch 2021

Huntress Product Launch 2021

Senior Security Researcher John Hammond On Potential Cyberattacks Over The Labor Day Weekend

Senior Security Researcher John Hammond On Potential Cyberattacks Over The Labor Day Weekend

How Attackers Sneak Past Automated Security Systems

How Attackers Sneak Past Automated Security Systems

Kaseya VSA Exploit POC - Authentication Bypass, Arbitrary File Upload and Command Injection

Kaseya VSA Exploit POC - Authentication Bypass, Arbitrary File Upload and Command Injection

CVE-2021-34527 - PrintNightmare - PoC with Print Spooler Connection GPO Applied

CVE-2021-34527 - PrintNightmare - PoC with Print Spooler Connection GPO Applied

CVE-2021-34527 - PrintNightmare - PoC with Truesec ACL Applied

CVE-2021-34527 - PrintNightmare - PoC with Truesec ACL Applied

CVE-2021-34527 - PrintNightmare - Server 2016 PoC Demonstration

CVE-2021-34527 - PrintNightmare - Server 2016 PoC Demonstration

CVE-2021-34527 - PrintNightmare - Server 2019 PoC Demonstration

CVE-2021-34527 - PrintNightmare - Server 2019 PoC Demonstration

Scale Your Security Operations

Scale Your Security Operations

Tradecraft Tuesday - No Honor Among Thieves

Tradecraft Tuesday - No Honor Among Thieves

How to Have the Cybersecurity Talk with Your Clients

How to Have the Cybersecurity Talk with Your Clients

Human Threat Hunters

Human Threat Hunters

Understanding the Cybersecurity Needs of SMBs

Understanding the Cybersecurity Needs of SMBs

Series B Announcement Video

Series B Announcement Video

Tradecraft Tuesday - Orion Malware, MSP Targeting & 2021 Predictions - January 2021

Tradecraft Tuesday - Orion Malware, MSP Targeting & 2021 Predictions - January 2021