🧰 Huntress Managed EDR

The items that name it 16

• How Huntress Detects and Responds to a ClickFix Attack
  writeupas tools2026-10-05

  Endpoint detection and response product; hosts the Attack Disruption engine used to detect and kill ClickFix chains in real time.

• Defender Exclusion Abuse: How Attackers Hide Malware from MDAV
  writeupas tools2026-09-30

  Endpoint detection and response product; collects telemetry on registry-based exclusion changes and the HideExclusionsFromLocalAdmins setting, and includes built-in detections for suspicious exclusions and that registry setting

• Next-Gen Phishing Tactics Users Aren’t Ready For | Huntress
  articleas tools2026-08-28

  Endpoint detection and response giving Huntress SOC visibility into attacker tactics across millions of endpoints

• RMM Abuse: How Attackers Exploit Remote Access Tools | Huntress
  articleas tools2026-08-21

  Endpoint detection and response product; free trial offered as a way to access RMM Guard.

• Critical N-able N-central Vulnerability and Active Exploitation
  writeupas classification.key entities2026-08-03
• 5 Modern Threats You Need to Watch
  articleas tools2026-07-14

  Endpoint detection and response; part of Huntress's identity-as-connective-tissue approach across its managed services.

• Lateral Movement Attack: Techniques, Detection & Prevention
  writeupas tools2026-07-01

  Collects telemetry on remote authentication and remote code execution pillars to detect lateral movement, ties authentication and execution into single high-fidelity events

• Threat Actor Defense Evasion: How Attackers Disable AV & EDR
  writeupas tools2026-05-18

  Endpoint detection and response product; detects BYOVD abuse, Windows Firewall tampering, and includes Tamper Protection to prevent agent from being disabled or uninstalled

• Komari Red: The Monitoring Tool with a Built-in Reverse Shell
  writeupas tools2026-04-30

  Detection/monitoring platform that generated the high-severity detection cluster and SOC alerts used to investigate the intrusion

• Untangling a Linux Incident With an OpenAI Twist
  writeupas tools2026-04-17

  Endpoint Detection and Response agent used by the Huntress SOC to detect malicious activity on the endpoint, generate signal events/detections, and provide telemetry for incident investigation.

• Something Phishy in the /tmp Folder
  writeupas tools2026-03-18

  Endpoint detection and response for macOS; detected the infostealer's suspicious process activity and use of LOOBins, enabled host isolation to stop the attack.

• How the Huntress SOC Stopped a VPN-Based Ransomware Attack
  writeupas tools2026-03-13

  Endpoint detection and response that first flagged shady activity, tipping off the SOC

• Cross-Platform Unity in EDR
  articleas tools2026-01-13

  Huntress's Endpoint Detection and Response product supporting Windows, macOS, and Linux

• Rogue RMMs: Common Social Engineering Tactics We Saw in 2025
  writeupas tools2025-12-31

  Endpoint detection and response service used to determine if a ScreenConnect instance is legitimate or malicious, including inspecting installation call-backs to domains and performing domain reputation analysis.

• Threats Plague Educational Organizations
  writeupas tools2025-11-13

  Endpoint detection and response used to identify malicious authentication and isolate compromised systems in school district incident

• Cleo Software Actively Being Exploited in the Wild | Huntress
  advisoryas tools2025-01-06

  Detects and neutralizes malicious Cleo-related activity on endpoints; used to depict parent-child process relationships and block threat actor IPs.