🧰 EDR telemetry

The items that name it 2

• Field Notes: Reconstructing an Attacker’s Workflow
  writeup2026-10-22It is written here as EDR telemetry: detects suspicious PowerShell execution and unusual process relationships.
• The Not So Silent Miner: Threat Actor Compiles Cryptominer on the Endpoint
  writeup2026-09-24It is written here as EDR telemetry: Huntress SOC analysts detected the activity.