Blog Post
The Phantom File System: Inside the Windows ProjFS
Most people have never heard of Windows ProjFS. Attackers are starting to notice. This deep dive covers exactly how the Projected File System works and why that matters for security.
Blog Posts By This Author
All Categories
- Read more about The Phantom File System: Inside the Windows ProjFS
- Read more about Pursuing Parity: Attempting to Bring Cross-Platform UnityBlog Post
Pursuing Parity: Attempting to Bring Cross-Platform Unity
Feature parity across Windows, macOS, and Linux sounds simple on a product roadmap. Actually building it means reconciling fundamentally different operating systems. Here's how Huntress is approaching it.
- Read more about Where Do You Think You're Going? How Huntress Addresses Lateral MovementBlog Post
Where Do You Think You're Going? How Huntress Addresses Lateral Movement
Once attackers are inside, lateral movement is how they deepen a compromise and make removal much harder. Here's exactly how Huntress detects and disrupts it before it spreads.
- Read more about You Can Run, but You Can’t Hide: Defender ExclusionsBlog Post
You Can Run, but You Can’t Hide: Defender Exclusions
Attackers know that adding a MDAV exclusion for their malicious binary is easier than disabling Defender entirely. Huntress covers how this overlooked technique works, and how to detect it.
- Read more about Silencing the EDR SilencersBlog Post
Silencing the EDR Silencers
EDR tampering is one of the most desirable capabilities for attackers, and vendors have largely ignored it. A Huntress researcher covers the techniques used to blind EDR products, and what can be done about it.
Featured In These Upcoming Events & On-Demand Virtual Events
Read more about What Really Happens Before Ransomware Strikes?
On-Demand Virtual Event
What Really Happens Before Ransomware Strikes?
When it comes to stopping ransomware, you don’t want to wait until the last minute. The earlier you can spot activity in the attack chain, the better. This masterclass will expose the critical early warning signs of an impending ransomware attack and equip you with proven detection strategies.
