Tyler Bohlmann

Staff Detection Engineering & Threat Hunting AnalystHuntress

Tyler Bohlmann, Detection Engineer at Huntress, brings a wealth of expertise to the world of cybersecurity. His passion for the field was sparked in an unexpected way—through a failed security internship interview, where he discovered pen testing and the fascinating tactics of red teams. Since then, he has dedicated himself to excelling in detection engineering, gap analysis, adversary emulation, and purple teaming.

With certifications like BTL2 and eJPT under his belt and a standout achievement as a speaker at BSidesSLC 2022, Tyler is no stranger to dissecting complex cybersecurity challenges. His presentation on detecting offensive tools (“Unpacking Impacket”) offered valuable insights into identifying remote execution techniques.

Before joining Huntress, Tyler gained hands-on experience working within the MDR space as a Threat Hunter and Incident Handler at Red Canary and various MSPs, where he tackled everything from IT consulting to desktop and helpdesk support. At Huntress, he thrives on collaborating with the talented teams to help protect organizations he used to serve as an IT technician.

When he’s not conducting research or emulating adversaries, Tyler spends his time with his family, practicing Brazilian jiu-jitsu, experimenting with coffee brewing, or exploring his interests in photography and music.

His favorite cybersecurity tip? “A question well stated is a problem half-solved - Chris Sanders”

Blog Posts By This Author

Read more about Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer
Blog Post
Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer
Threat actors are exploiting AhsayCBS flaws, including CVE-2026-105133 and CVE-2026-105134, to deploy webshells and XMRig cryptominers. Update to 10.3.4 and restrict access now.
Read more about ClickFix Attack: Variants, Detection & How It Works
Blog Post
ClickFix Attack: Variants, Detection & How It Works
ClickFix incidents are up 631% in six months. The technique started with Windows and is spreading. Huntress breaks down every variation we've observed and what actually stops it.
Read more about Where Do You Think You're Going? How Huntress Addresses Lateral Movement
Blog Post
Where Do You Think You're Going? How Huntress Addresses Lateral Movement
Once attackers are inside, lateral movement is how they deepen a compromise and make removal much harder. Here's exactly how Huntress detects and disrupts it before it spreads.
Read more about defendnot? Defend YES! Detecting Malicious Security Product Bypass Techniques
Blog Post
defendnot? Defend YES! Detecting Malicious Security Product Bypass Techniques
A tool called 'defendnot' disables Windows Defender by registering a fake antivirus through undocumented Windows Security Center APIs. Huntress covers the technique and how to detect it.

See All Blog Posts by Tyler Bohlmann

Featured In These Upcoming Events & On-Demand Virtual Events

Tradecraft Tuesday

Welcome to your source for all things hacker tradecraft. Once a month, we host Tradecraft Tuesday: a livestream where you’ll learn from experts about today’s most relevant attacker tradecraft and technical concepts. From breaking CVEs to how attackers are using AI, you’ll dive into the topics you care about most alongside Huntress security experts—no sales pitches or product talk.

Tyler Bohlmann

Blog Posts By This Author

Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer

ClickFix Attack: Variants, Detection & How It Works

Where Do You Think You're Going? How Huntress Addresses Lateral Movement

defendnot? Defend YES! Detecting Malicious Security Product Bypass Techniques

Featured In These Upcoming Events & On-Demand Virtual Events

Tradecraft Tuesday | ClickFix and all the Fixins