Most people have never heard of Windows ProjFS. Attackers are starting to notice. This deep dive covers exactly how the Projected File System works and why that matters for security.

Feature parity across Windows, macOS, and Linux sounds simple on a product roadmap. Actually building it means reconciling fundamentally different operating systems. Here's how Huntress is approaching it.

Once attackers are inside, lateral movement is how they deepen a compromise and make removal much harder. Here's exactly how Huntress detects and disrupts it before it spreads.

Attackers know that adding a MDAV exclusion for their malicious binary is easier than disabling Defender entirely. Huntress covers how this overlooked technique works, and how to detect it.

EDR tampering is one of the most desirable capabilities for attackers, and vendors have largely ignored it. A Huntress researcher covers the techniques used to blind EDR products, and what can be done about it.