From the Front Lines

The best security lessons aren't hypothetical — they come from cases that actually happened. From the Front Lines covers real intrusion investigations, partner case studies, and post-incident narratives from the Huntress SOC. No theory. No product pitches. Just what we found, how the attacker got in, and what stopped them.


The Unwanted Guest

Most account intrusions use stolen credentials. This one used Windows' built-in Guest account — a variation that's easy to overlook and hard to detect without the right telemetry.
Apr 2, 2025

The Latest From the Front Lines Blog Posts