🧰 Huntress EDR

The items that name it 6

• The Tale of Two INC Ransom Notes: A Ransomware Timeline | Huntress
  writeup2026-09-21

  Endpoint detection and response telemetry used to reconstruct the attack timeline post-incident

• Plain Text Passwords: The Risks of Storing Them
  writeup2026-07-06

  Endpoint detection and response agents deployed on managed endpoints; the threat actor attempted to uninstall these agents after compromising the Huntress portal.

• Supply Chain Compromise of axios npm Package
  writeup2026-03-31

  Detected the malicious execution chain across macOS, Windows, and Linux; used to investigate and confirm 135 affected endpoints

• Employee Monitoring and SimpleHelp Software Abused in | Huntress
  writeup2026-02-11

  Endpoint detection and response agent used by Huntress Tactical Response team to observe and investigate the intrusions (noted as having incomplete coverage in Case #1).

• Reflecting on AI in 2025: Faster Attacks, Same Old Tradecraft
  writeup2026-01-12

  Endpoint detection and response used to detect anomalous ScreenConnect-PowerShell process lineage and contain attacker activity.

• Trial, Error & Typos: Malware Isn't Always 'Sophisticated' | Huntress
  writeup2025-12-22

  Endpoint detection and response product used to generate telemetry and timelines for the incidents.