All Huntress Blog Posts

Threat actors rarely innovate. This one did. A November 2024 Huntress SOC investigation uncovered novel tradecraft for persistence and remote access that hadn't been documented before.

Microsoft itself was hit by Midnight Blizzard's password spraying. Huntress covers what the technique looks like in Microsoft 365 telemetry, and how to hunt for it in your own environment.

Backup software is trusted, widely deployed, and rarely monitored for misuse. Huntress analysts observed it being weaponized for data exfiltration. Here's the technique and how to detect it.