[{"_1":2,"_1900":-5,"_1901":-5},"loaderData",{"_3":4,"_7":8},"root",{"_5":6},"preprod",false,"routes/blog/index",{"_9":10,"_157":255,"_273":274,"_335":336,"_337":338,"_1203":1204,"_1205":51,"_1206":1207,"_1208":1209},"page",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":19,"_20":21,"_34":35,"_45":46,"_47":48,"_49":12,"_50":51,"_52":53,"_54":55,"_56":57,"_58":59,"_60":61,"_172":252,"_253":254},"createdDate",1737878647415,"id","65f3299e49a461b4b9c7296a","name","Blog","modelId","3fa669f9656b425bbe84446dd9c5a7cd","published","meta",{"_22":23,"_24":6,"_25":9,"_26":27},"lastPreviewUrl","https://prod.huntress.com/blog?builder.space=3eb6f92aedf74f109c7b4b0897ec39a8&builder.user.permissions=read%2Ccreate%2Cpublish%2CeditCode%2CeditDesigns%2Cadmin%2CeditLayouts%2CeditLayers%2CeditContentPriority&builder.user.role.name=Admin&builder.user.role.id=admin&builder.cachebust=true&builder.preview=page&builder.noCache=true&builder.allowTextEdit=true&__builder_editing__=true&builder.overrides.page=65f3299e49a461b4b9c7296a&builder.overrides.65f3299e49a461b4b9c7296a=65f3299e49a461b4b9c7296a&builder.overrides.page:/blog=65f3299e49a461b4b9c7296a&builder.options.includeRefs=true&builder.options.enrich=true&builder.options.locale=Default","hasLinks","kind","breakpoints",{"_28":29,"_30":31,"_32":33},"xsmall",479,"small",767,"medium",991,"query",[36],{"_37":38,"_39":40,"_41":42,"_43":44},"@type","@builder.io/core:Query","property","urlPath","operator","is","value","/blog","variations",{},"lastUpdated",1747062560084,"firstPublished","testRatio",1,"screenshot","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fb7f93b4988dd4be9b2f279c5db6b8eda","createdBy","Kz459QsZDzNpORbTSiA9L6WRQc23","lastUpdatedBy","XBN8lOXr7QMH6JvQimte3OCtO6c2","folders",[],"data",{"_62":63,"_64":65,"_66":67,"_68":63,"_69":70,"_71":63,"_72":73,"_77":44,"_74":63,"_78":79,"_80":81,"_82":83,"_84":85,"_100":101,"_243":244},"title","","openGraphImage","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F28e05784f2584d25824e4b27c802f97a","openGraphDescription","Cybersecurity is dynamic and ever-changing. Stay up-to-date with the latest information about cyber threats, vulnerabilities, and news on the Huntress blog.","metaDescription","slug","blog","titleTag","metadata",{"_74":67,"_64":75,"_62":76},"description","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F78060584ce444ba5a726170f7951a8ec","Huntress Blog","url","sitemapIndexing",true,"openGraphTitle","Huntress Blog | Huntress","contentTagCategories","DEPRECATED","contentTags",{"_86":87,"_88":89,"_90":91,"_92":93,"_94":95,"_96":97,"_98":99},"funnelStageTags",[],"regionTags",[],"aiGeneratedContentTags",[],"audienceTags",[],"industryTags",[],"productTags",[],"repurposedContentTags",[],"blocks",[102,188,197,220],{"_37":103,"_104":105,"_13":106,"_107":108,"_174":175},"@builder.io/sdk:Element","@version",2,"builder-4304305f148848f68b3ca6d6c71746ce","component",{"_15":109,"_110":111},"BlogFeatureBannerSection","options",{"_112":113,"_120":76,"_121":122,"_123":79,"_124":125},"breadcrumbs",[114,119],{"_115":116,"_117":118},"levelText","Home","levelLinkUrl","/",{"_115":16},"heading","summary","

Welcome to the Huntress Cybersecurity Blog, your go-to spot for staying ahead of\n hackers and boosting your cybersecurity savviness. Our\n blog contributors have focused on\n making cybersecurity education engaging and accessible for everyone.

","showFeaturedBlog","featuredBlog",{"_37":126,"_13":127,"_128":129,"_43":130},"@builder.io/core:Reference","67a67e43a1912da0aa6bde9c","model","blog-posts",{"_34":131,"_58":132,"_11":133,"_13":127,"_15":134,"_17":135,"_19":19,"_20":136,"_60":138,"_45":170,"_47":171,"_49":133,"_50":51,"_54":55,"_56":55,"_172":173},[],[],1742717076617,"Huntress 2025 Cyber Threat Report: Proliferating RATs, Evolving Ransomware, and Other Findings","beafe50240af45639f2b59e6aefd89f9",{"_26":137,"_22":63,"_25":60},{"_28":29,"_30":31,"_32":33},{"_139":-5,"_15":134,"_140":141,"_142":79,"_72":143,"_148":149,"_155":156,"_157":158,"_164":165,"_69":166,"_167":168,"_121":169},"lastUpdatedDate","canonicalUrl","https://www.huntress.com/blog/huntress-2025-cyber-threat-report-proliferating-rats-evolving-ransomware-and-other-findings","featured",{"_144":6,"_62":145,"_146":6,"_74":147},"noFollow","2025 Cybersecurity Threat Report: Proliferating RATs, Evolving Ransomware, and Other Findings | Huntress","noIndex","Huntress’ 2025 Cyber Threat Report is here! Explore the year's biggest threats—RATs, phishing, ransomware—and how evolving tactics demand smarter defense.","authors",[150],{"_151":152},"author",{"_37":126,"_13":153,"_128":154},"66048598851912ddf28adf1a","people","publishDate","2025-02-11T00:00:00.000Z","categories",[159],{"_160":161},"category",{"_37":126,"_13":162,"_128":163},"65f3299e49a461b4b9c72e4d","blog-categories","thumbnail","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ffc25dbb530b84cb79bc232519d83b123?format=webp","huntress-2025-cyber-threat-report-proliferating-rats-evolving-ransomware-and-other-findings","content","

At Huntress, we like to wreck hackers. But to take them down, we first have to understand how they operate. That’s why we created the 2025 Cyber Threat Report—an in-depth exploration of the nasty tactics, trends, and techniques reshaping cybersecurity today.

Here, we highlight key findings from the past year, offering a snapshot of the malicious strategies our analysts uncovered. Whether you’re an IT professional, cybersecurity practitioner, or business owner, these insights can provide actionable guidance to help you stay one step ahead of ever-evolving cyber threats.

Top takeaways from the 2025 Cyber Threat Report

Throughout 2024, Huntress' threat analysts looked at data from thousands of organizations and millions of endpoints, revealing the key trends that show how adaptable and relentless today’s malicious hackers are.

Remote access trojans (RATs) are more popular: Over 75% of remote access incidents utilized RATs such as AsyncRAT and Jupyter. These tools are becoming more sophisticated, making multilayered defenses like endpoint detection and response (EDR) essential.
Remote monitoring and management (RMM) tools are being exploited. Attackers are weaponizing legitimate software like TeamViewer and LogMeIn to facilitate lateral movement and maintain long-term access to systems. For environments that use RMM tools, we highly suggest increasing vigilance, enhancing access controls, and closely monitoring your tools.
Ransomware strategies are evolving: Attacks are shifting from traditional encryption to data theft and extortion. Groups like RansomHub and Akira now incentivize stolen data with big rewards, making these tactics quite lucrative. The future may see ransomware operators leaning even more into extortion (or double extortion) strategies—a trend driven by the efficacy of EDR solutions and mounting pressure from government takedown efforts.
“Living off the land” techniques are on the rise: Threat actors are doubling down on using legitimate tools like Sysinternals Suite and LOLBins to evade detection. Organizations must remove unnecessary software and enforce strict execution policies to mitigate this threat.
Phishing tactics are becoming more advanced: From QR code phishing to brand impersonation, threat actors are deploying clever methods to outsmart traditional email security. Improving security awareness training and implementing layered defenses are more essential than ever to counter these sophisticated techniques.

How these trends took shape in 2024

The findings from our 2025 Cyber Threat Report are grounded in real-world data with a comprehensive view of how malicious hackers operate today. Our threat analysts observed patterns across industries like healthcare, education, government, and manufacturing, and these growing trends stood out:

Infostealers are gaining momentum: Nearly 24% of incidents involved infostealers designed to extract sensitive credentials, financial data, and other private information.
Malicious scripts are surging: Scripts made up 22% of detected attacks, using PowerShell, VBScript, and JavaScript to perform stealthy, efficient attacks.
Ransomware is fragmenting: Despite takedowns of large groups like Hive and LockBit, smaller, flexible affiliates have risen to fill the gap. Unfortunately, this led to more unpredictable, widespread attacks.

\"Industries — Industries targeted by percentage

Why these findings matter

The 2024 cybersecurity landscape exposes a simple yet alarming truth: threat actors aren’t slowing down. Because hackers' tactics and tools are evolving, you must take a proactive approach that prioritizes awareness, preparation, and consistent upgrades to defense strategies.

Understanding the tactics outlined in this report is the first essential step. By educating your teams, using multiple layers of security, and staying informed about emerging risks, you and your organization will be ready to take on any challenges that come your way.

\"Huntress — *Huntress 2025 Cyber Threat Report*

Get more from the report and stay one step ahead

The insights from our 2025 Cyber Threat Report spotlight the critical need to stay ahead of malicious hackers. With tools like RMM software and phishing techniques becoming more advanced, protecting data, systems, and users is an ongoing battle—but one you can win.

While there’s no one-size-fits-all solution, embracing layered defenses, removing unnecessary vulnerabilities, and training your team to spot threats are actionable steps everyone should take right now.

Download the entire 2025 Cyber Threat Report to gain a deeper understanding of these trends and learn more strategies for keeping your organization safe.

","

",{},1744303952880,"rev","3war62ijo83","responsiveStyles",{"_176":177},"large",{"_178":179,"_180":181,"_182":183,"_184":185,"_186":187},"display","flex","flexDirection","column","position","relative","flexShrink","0","boxSizing","border-box",{"_37":103,"_104":105,"_13":189,"_107":190,"_174":195},"builder-4c139472c097464e87c1ec73f00f7381",{"_15":191,"_110":192},"BlogListSection",{"_193":194},"pageSize",15,{"_176":196},{"_178":179,"_180":181,"_182":183,"_184":185,"_186":187},{"_37":103,"_104":105,"_13":198,"_107":199,"_174":218},"builder-09dcd692cdf94623b83c105f1fac9802",{"_15":200,"_110":201},"BlogSignupSection",{"_120":202,"_121":203,"_204":205,"_206":207},"Sign Up for Huntress Updates","Get insider access to Huntress tradecraft, killer events, and the freshest blog updates.","image","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fcb5efa5143804ba59d530a903d29fe5f","blogSignupForm",{"_208":209,"_210":6,"_211":212,"_213":214,"_215":6,"_216":6,"_217":6},"formId","wf-form-Blog-Signup-Form","showFormTitle","submitButtonText","Submit","hubspotFormId","5198e52f-a296-4d78-935d-fe864d69a67a","showBlueGreenGradient","showBluePurpleGradient","useNeverBounce",{"_176":219},{"_178":179,"_180":181,"_182":183,"_184":185,"_186":187},{"_13":221,"_37":103,"_222":223,"_224":225,"_174":235},"builder-pixel-c3yp2bl7b4h","tagName","img","properties",{"_226":227,"_228":229,"_230":63,"_231":232,"_233":185,"_234":185},"src","https://cdn.builder.io/api/v1/pixel?apiKey=3eb6f92aedf74f109c7b4b0897ec39a8","aria-hidden","true","alt","role","presentation","width","height",{"_176":236},{"_234":185,"_233":185,"_178":237,"_238":185,"_239":240,"_241":242},"block","opacity","overflow","hidden","pointerEvents","none","state",{"_245":176,"_246":247},"deviceSize","location",{"_248":44,"_249":250,"_34":251},"pathname","path",[70],{},"m4rwhgy2l8","template","huntress",[256,259,261,264,267,270],{"_13":257,"_15":258},"65f3299e49a461b4b9c72e33","Business Growth",{"_13":162,"_15":260},"Cybersecurity Education",{"_13":262,"_15":263},"65f3299e49a461b4b9c72e34","Cybersecurity Trends",{"_13":265,"_15":266},"65f3299e49a461b4b9c72e8a","Huntress News",{"_13":268,"_15":269},"65f3299e49a461b4b9c72e32","Response to Incidents",{"_13":271,"_15":272},"65f3299e49a461b4b9c72e31","Threat Analysis","featuredBlogPost",{"_13":275,"_15":276,"_60":277},"65f3299e49a461b4b9c7292a","Navigating the SMB Threat Landscape: Key Insights from Huntress’ SMB Threat Report",{"_69":278,"_164":279,"_157":280,"_155":307,"_139":-5,"_148":308,"_142":79},"navigating-the-smb-threat-landscape-key-insights-from-huntress-smb-threat-report","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F25d75ed735a34023a4e0b3e874210f25",[281,295],{"_160":282},{"_37":126,"_13":162,"_128":163,"_43":283},{"_13":162,"_15":260,"_19":19,"_11":284,"_17":285,"_60":286,"_172":294},1739997399371,"b7b51689bde4424484bccde4b9ee6d6b",{"_15":260,"_69":287,"_72":288,"_291":289,"_68":290,"_140":292,"_74":293},"cybersecurity-education",{"_62":289,"_74":290},"Cybersecurity Education Blog Posts | Huntress","Read more about Cybersecurity Education in these Huntress blog posts. ","metaTitle","https://www.huntress.com/blog-categories/cybersecurity-education","

Cybersecurity education should be accessible and actionable, not jargony. Welcome to your hub for mastering the fundamentals and beyond. Get education and advice from our experts to deepen your knowledge and stay ahead of cyber threats—made for all levels.

","dvtlxa4kaw",{"_160":296},{"_37":126,"_13":262,"_128":163,"_43":297},{"_13":262,"_15":263,"_19":19,"_11":298,"_17":285,"_60":299,"_172":306},1739997399701,{"_15":263,"_69":300,"_72":301,"_291":302,"_68":303,"_140":304,"_74":305},"cybersecurity-trends",{"_62":302,"_74":303},"Cybersecurity Trends Blog Posts | Huntress","Read more about Cybersecurity Trends in these Huntress blog posts. ","https://www.huntress.com/blog-categories/cybersecurity-trends","

Stay a step ahead with insights into the latest developments shaping the cybersecurity landscape. From emerging threats to breakthrough technologies, we analyze how these trends impact your security strategy so you can adapt your defenses accordingly.

","uk19w6td64p","November 21, 2023",[309],{"_151":310},{"_37":126,"_13":153,"_128":154,"_43":311},{"_13":153,"_15":312,"_19":19,"_11":313,"_17":314,"_60":315,"_172":334},"Team Huntress",1742719371598,"d50b5ec346a64579b280b4104dca236e",{"_15":312,"_69":316,"_72":317,"_320":321,"_322":-5,"_323":324,"_325":326},"team-huntress",{"_62":318,"_74":319,"_146":6,"_144":6},"Team Huntress | Huntress","Read blog posts written by the amazing Huntress team on the Huntress Blog.","profileImage","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F94d27b5ca67c40d698b6b9f3f52bc4dc","profileImageAltText","bioDetail","

These resources have been written by some of the fantastic experts on our team. And if they’re at Huntress they’re probably ethical badasses who enjoy working every day to protect small and medium-sized businesses.

Our authors often come from backgrounds in gaming, tech innovation, IT, military intelligence, and a mix of unrelated but awesome careers like teaching, baking, music, law, and graphic design, just to name a few.

We’re a diverse team of pros who love hunting down threats, identifying trends, and writing about what we’re seeing so that everyone can benefit.

Meet more Huntress authors here.

‍

","groups",[327,331],{"_328":329},"group",{"_37":126,"_13":330,"_128":325},"00d1d80145b14a6b87c45567b169a8f4",{"_328":332},{"_37":126,"_13":333,"_128":325},"babc0d8823f34ab894a4431d5b302dc7","iv62qcccws","builderApiKey","3eb6f92aedf74f109c7b4b0897ec39a8","blogPosts",[339,391,439,477,527,586,650,702,746,772,837,973,1060,1116,1161],{"_13":340,"_15":341,"_60":342},"f39c4b6335a04b33ae531401e5c624d2","Huntress Acquires Inside Agent: A New Era for Identity Protection ",{"_69":343,"_164":344,"_157":345,"_155":358,"_148":359,"_139":-5,"_389":390},"huntress-acquires-inside-agent","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fca71e222249c4230b0afb4dcbf6cb337",[346],{"_160":347},{"_37":126,"_13":265,"_128":163,"_43":348},{"_13":265,"_15":266,"_19":19,"_11":349,"_17":285,"_60":350,"_172":357},1739997399001,{"_15":266,"_69":351,"_72":352,"_291":353,"_68":354,"_140":355,"_74":356},"huntress-news",{"_62":353,"_74":354},"Huntress News - Blog | Huntress","Read more about Huntress in the News in these Huntress blog posts. ","https://www.huntress.com/blog-categories/huntress-news","

Get the latest news, updates, and announcements from the Huntress team, including product launches, company milestones, and notable achievements.

","roxcybsn7u","November 18, 2025",[360],{"_151":361},{"_37":126,"_13":362,"_128":154,"_43":363},"67101522e09be4dfed920d95",{"_11":364,"_13":362,"_15":365,"_17":314,"_19":19,"_34":366,"_60":367,"_45":381,"_47":382,"_49":364,"_50":51,"_54":383,"_56":383,"_58":384,"_20":385,"_172":388},1742719426357,"Prakash Ramamurthy",[],{"_325":368,"_374":375,"_376":377,"_15":365,"_69":378,"_72":379,"_320":380},[369,372],{"_328":370},{"_37":126,"_13":371,"_128":325},"12d37b73dc7741cf9f31f877c1b42086",{"_328":373},{"_37":126,"_13":330,"_128":325},"jobTitle","Chief Product Officer","linkedInUrl","https://www.linkedin.com/in/prakashramamurthy/","prakash-ramamurthy",{},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F4882e544705d4aec92a10f2e66da351b",{},1762876826237,"ksrtPDlNQGhJESnopKjn4sdUP2x1",[],{"_26":386,"_25":60,"_22":63,"_387":6},{"_28":29,"_30":31,"_32":33},"hasAutosaves","mwjjejftkpg","sortDate",["D",1763485200000],{"_13":392,"_15":393,"_60":394},"ed2ba91a6ff740349f4c0fd6d43d6598","Huntress Lands on the Microsoft Marketplace",{"_69":395,"_164":396,"_157":397,"_155":403,"_148":404,"_139":-5,"_389":438},"huntress-available-on-marketplace-microsoft","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fe212b1b9af414e11851cdab80c823531",[398],{"_160":399},{"_37":126,"_13":265,"_128":163,"_43":400},{"_13":265,"_15":266,"_19":19,"_11":349,"_17":285,"_60":401,"_172":357},{"_15":266,"_69":351,"_72":402,"_291":353,"_68":354,"_140":355,"_74":356},{"_62":353,"_74":354},"November 17, 2025",[405],{"_151":406},{"_37":126,"_13":407,"_128":154,"_43":408},"d28d6e3ca75f4003ae36c1e4866bbd4d",{"_11":409,"_13":407,"_15":410,"_17":314,"_19":19,"_20":411,"_34":413,"_60":414,"_45":432,"_47":433,"_49":434,"_50":51,"_54":435,"_56":383,"_58":436,"_172":437},1744049019332,"Aimee Simpson",{"_26":412,"_25":60,"_22":63},{"_28":29,"_30":31,"_32":33},[],{"_320":415,"_416":417,"_325":418,"_322":421,"_72":422,"_15":410,"_424":425,"_426":427,"_376":428,"_69":429,"_374":430,"_323":431},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F1ad76c8cc09c4ec6bacabb266bd16cde","firstName","Aimee",[419],{"_328":420},{"_37":126,"_13":330,"_128":325},"Aimee Simpson Huntress",{"_74":423,"_62":410},"Read blog posts from Aimee Simpson on the Huntress Blog.","lastName","Simpson","companyName","Huntress ","https://www.linkedin.com/in/aimeesimpson/","aimee-simpson","Director, Product Marketing","

Aimee is a Director of Product Marketing at Huntress. She acts as the critical bridge between product development and the market, translating technical innovations into tangible value for security and IT professionals. She's responsible for orchestrating successful product launches, conducting deep market research to inform product strategy, and crafting compelling narratives that resonate with the challenges faced by today's security teams. Previously, she held product and solutions marketing roles at other security and technology companies, including Mimecast, Code42, and Dell.

Aimee's favorite cybersecurity tip is to adopt the mindset of a hacker. It's easy to talk about best practices and think you've learned how to stay safe, but the more you learn about hacker motivations and techniques, the easier it is to spot them in the wild. This is extra true when it comes to how security awareness training should be approached for learners.

",{},1755181282547,1744049133929,"rqPhimgdOfVCrDCbaxcCVZPJeJc2",[],"1il3vi00ysz",["D",1763388000000],{"_13":440,"_15":441,"_60":442},"65f3299e49a461b4b9c72de2","What Should A Modern Cybersecurity Stack Look Like?",{"_69":443,"_164":444,"_157":445,"_155":452,"_139":403,"_148":453,"_142":6,"_389":476},"what-should-a-modern-cybersecurity-stack-look-like","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fd1fcdf54b592449ea70356d8a9e9decb",[446],{"_160":447},{"_37":126,"_13":162,"_128":163,"_43":448},{"_13":162,"_15":260,"_19":19,"_11":284,"_17":285,"_60":449,"_172":451},{"_15":260,"_69":287,"_72":450,"_291":289,"_68":290,"_140":292,"_74":293},{"_62":289,"_74":290},"ekjaig61nnf","February 22, 2022",[454],{"_151":455},{"_37":126,"_13":456,"_128":154,"_43":457},"66048bf72556b5ac127e6cc3",{"_13":456,"_15":458,"_19":19,"_11":459,"_17":314,"_60":460,"_172":475},"Shane Rose",1742719352790,{"_15":458,"_69":461,"_72":462,"_320":465,"_322":-5,"_374":466,"_323":467,"_426":468,"_376":469,"_325":470},"shane-rose",{"_62":463,"_74":464,"_146":6,"_144":6},"Shane Rose | Huntress","Read blog posts from Shane Rose on the Huntress Blog.","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F8af5aa18e40b49f0aff7e11ffa9c15ba","Manager, Sales Engineering","

Formerly a Huntress customer, Shane was so impressed by Huntress’s solutions that he joined our team.

Shane Rose’s journey into cybersecurity began after nearly 20 years in IT consulting, primarily focusing on small and mid-enterprise clients. He noticed that many businesses struggled with security due to a lack of understanding or resources. “I spent much of my time designing and building networks as securely as possible while still seeing bad actors be successful versus the typical tools and equipment on the market designed to stop them at the time,” Shane explains. His perspective shifted when his firm started using Huntress, a move that ultimately led him to join the Huntress Sales Engineering team.

Specializing in a broad range of security tools, from firewalls and IDS/IPS to endpoint software, Shane leverages his extensive consulting background in his role. He engages in consultative conversations around various cyber topics, acting as a trusted advisor to partners and customers. “I try to use my background and experience to help educate people on what effective security stacks look like and how they function to mitigate risk,” says Shane.

Shane holds certifications including MCSE, CCNA, and CCNP. His favorite part of working at Huntress? The ability to make a tangible difference in improving security posture for under-served businesses. “We can see the difference we are making out there in a very under-served portion of business when it comes to cyber awareness and preparedness,” Shane says.

Before joining Huntress, Shane worked in MSP and IT consulting. Outside of work, he enjoys aviation, having earned his private pilot's license a few years ago. He is also a member of a Cyber Guild in Tampa called Neon Temple, which helps grow people in their professional cybersecurity journey. In his free time, Shane enjoys gaming, technology, and continuous learning.

What's your favorite cybersecurity tip, Shane?

“Stay curious and stay skeptical of everything!”

Can’t argue with that. While you’re here, give Shane a follow on LinkedIn.

‍

","Huntress","https://www.linkedin.com/in/shane-rose-6482594/",[471,473],{"_328":472},{"_37":126,"_13":330,"_128":325},{"_328":474},{"_37":126,"_13":333,"_128":325},"asbpxzqb29",["D",1763384400000],{"_13":478,"_15":479,"_60":480},"dbf5f1e2c4da47e491b501c625658172","Sector Spotlight: Threats Plaguing Education",{"_69":481,"_164":482,"_157":483,"_155":490,"_148":491,"_139":-5,"_389":526},"threats-against-education","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fab91aae300894d7ebcafde08ed3e900d",[484],{"_160":485},{"_37":126,"_13":162,"_128":163,"_43":486},{"_13":162,"_15":260,"_19":19,"_11":284,"_17":285,"_60":487,"_172":489},{"_15":260,"_69":287,"_72":488,"_291":289,"_68":290,"_140":292,"_74":293},{"_62":289,"_74":290},"5v0wv16int","November 13, 2025",[492],{"_151":493},{"_37":126,"_13":494,"_128":154,"_43":495},"7fb779bf8ddf42fda6c8463ccdf60a68",{"_11":496,"_13":494,"_15":497,"_17":314,"_19":19,"_20":498,"_34":500,"_60":501,"_45":520,"_47":521,"_49":522,"_50":51,"_54":523,"_56":57,"_58":524,"_172":525},1744385801818,"Lindsey O'Donnell-Welch",{"_25":60,"_22":63,"_26":499},{"_28":29,"_30":31,"_32":33},[],{"_376":502,"_320":503,"_323":504,"_424":505,"_506":507,"_72":508,"_416":510,"_374":511,"_322":512,"_69":513,"_426":468,"_325":514,"_15":497},"https://www.linkedin.com/in/lindsey-o-donnell-welch-abb72b4a/","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F037877a541484d86ac239373c502608a","

With more than a decade of experience translating complex security topics into compelling stories, Lindsey brings a sharp editorial eye and a passion for clarity to the Huntress team. Her mission? Breaking down the intricate world of cybersecurity to make it accessible for everyone. It’s one of the many reasons she loves being part of Huntress, where educating the public about threats takes center stage.

Before joining Huntress, Lindsey built her reputation in journalism, covering the intersection of technology and businesses. She’s reported for top cybersecurity publications like Threatpost and Decipher, delivering trusted coverage on everything from the SolarWinds supply chain breach to the SEC’s cybersecurity disclosure rules.

Lindsey’s go-to security advice? “Enable MFA and use a password manager—your future self will thank you.”

When she’s not writing about cyber threats, you’ll likely find her on the tennis court or exploring new trails with her endlessly energetic pup.

","O'Donnell-Welch","altText","Huntress Default Headshot Image",{"_62":497,"_74":509},"Read blog posts from Lindsey O'Donnell-Welch on the Huntress Blog.","Lindsey ","Staff Technical Community Engagement Writer","Lindsey O'Donnell-Welch Huntress ","lindsey-odonnell-welch",[515,517],{"_328":516},{"_37":126,"_13":330,"_128":325},{"_328":518},{"_37":126,"_13":519,"_128":325},"797c68793452421a98fcd85d40aa6d84",{},1754428413667,1744404673182,"0dThli925XPdcsMI4MRs7L7KCv22",[],"xzq256glqrj",["D",1763013600000],{"_13":528,"_15":529,"_60":530},"e42553b551cc4fe18859399a17c6b365","Demystifying Multi-Factor Authentication for Businesses ",{"_69":531,"_164":532,"_157":533,"_155":539,"_139":540,"_148":541,"_389":585},"demystifying-multi-factor-authentication-for-businesses","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F0d68dc32a7674d9eafbddab202506d10",[534],{"_160":535},{"_37":126,"_13":162,"_128":163,"_43":536},{"_13":162,"_15":260,"_19":19,"_11":284,"_17":285,"_60":537,"_172":489},{"_15":260,"_69":287,"_72":538,"_291":289,"_68":290,"_140":292,"_74":293},{"_62":289,"_74":290},"July 23, 2025","November 7, 2025",[542,557],{"_151":543},{"_37":126,"_13":494,"_128":154,"_43":544},{"_11":496,"_13":494,"_15":497,"_17":314,"_19":19,"_20":545,"_34":547,"_60":548,"_45":555,"_47":521,"_49":522,"_50":51,"_54":523,"_56":57,"_58":556,"_172":525},{"_25":60,"_22":63,"_26":546},{"_28":29,"_30":31,"_32":33},[],{"_376":502,"_320":503,"_323":504,"_424":505,"_506":507,"_72":549,"_416":510,"_374":511,"_322":512,"_69":513,"_426":468,"_325":550,"_15":497},{"_62":497,"_74":509},[551,553],{"_328":552},{"_37":126,"_13":330,"_128":325},{"_328":554},{"_37":126,"_13":519,"_128":325},{},[],{"_151":558},{"_37":126,"_13":559,"_128":154,"_43":560},"132288e7391b453db19780e2d72554c2",{"_11":561,"_13":559,"_15":562,"_17":314,"_19":19,"_20":563,"_34":565,"_60":566,"_45":580,"_47":581,"_49":582,"_50":51,"_54":523,"_56":383,"_58":583,"_172":584},1744305098372,"Beth Robinson",{"_22":63,"_25":60,"_26":564},{"_28":29,"_30":31,"_32":33},[],{"_416":567,"_325":568,"_424":571,"_322":572,"_69":573,"_376":574,"_374":575,"_72":576,"_15":562,"_426":468,"_506":507,"_323":578,"_320":579},"Beth ",[569],{"_328":570},{"_37":126,"_13":330,"_128":325},"Robinson ","Beth Robinson - Huntress Brand Technical Writer ","beth-robinson","https://www.linkedin.com/in/elizabeth-robinson-cybersecurity/","Brand Technical Writer",{"_74":577,"_62":562},"Read blog posts from Beth Robinson on the Huntress Blog.\n","

Beth Robinson’s cybersecurity journey started at the NSA, where she spent 4 years immersed in computer network exploitation (CNE). Since then, she’s stacked up over a decade of experience in security, including roles at the NSA, CIA, Mandiant, Bishop Fox, and runZero. Now, as part of the incredible Huntress Marketing team, Beth thrives on the company’s incredible mission—and, of course, the awesome people who make it happen.

Armed with a Master’s degree in International Policy Studies, Beth knows her way around complexity, but keeps things approachable. Her favorite cybersecurity tip? \"Don't click the link!\" (Simple, yet brilliant.) Love to see our Security Awareness Training working wonders.

Outside of work, Beth likes to stay connected to the Italian she learned years ago (grazie mille to a study abroad program in Bologna) and can often be found watching Formula One races with her son, cooking, traveling, hiking, or skiing. Fun fact: she even worked as a travel agent for a stint after college!

","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F20454dd8c66d49f89c342d07715f97f6",{},1754513383049,1744306946802,[],"m04kmeeohod",["D",1762491600000],{"_13":587,"_15":588,"_60":589},"2f85979acf694f97aafc9934ac721595","Deobfuscating Files for Flags: Huntress CTF 2025 Retro",{"_69":590,"_164":591,"_157":592,"_155":598,"_148":599,"_139":-5,"_389":649},"huntress-ctf-2025-retro","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F7035797483dd41b587baac30060be485",[593],{"_160":594},{"_37":126,"_13":162,"_128":163,"_43":595},{"_13":162,"_15":260,"_19":19,"_11":284,"_17":285,"_60":596,"_172":489},{"_15":260,"_69":287,"_72":597,"_291":289,"_68":290,"_140":292,"_74":293},{"_62":289,"_74":290},"November 6, 2025",[600,634],{"_151":601},{"_37":126,"_13":602,"_128":154,"_43":603},"66048bf51de5bd420f2f2608",{"_11":604,"_13":602,"_15":605,"_17":314,"_19":19,"_20":606,"_34":608,"_60":609,"_45":629,"_47":630,"_49":604,"_50":51,"_54":631,"_56":631,"_58":632,"_172":633},1742719359732,"John Hammond",{"_26":607,"_25":60,"_22":63},{"_28":29,"_30":31,"_32":33},[],{"_320":610,"_374":611,"_323":612,"_69":613,"_15":605,"_376":614,"_325":615,"_620":621,"_426":468,"_622":623,"_72":624,"_322":-5,"_627":628},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F0ebcc8e098b842e3b6c5d44ae153b485","Principal Security Researcher","

Capturing flags, thwarting threats, and making cybersecurity accessible one endpoint at a time.

John Hammond, a Principal Security Researcher at Huntress, discovered his passion for cybersecurity as an undergraduate at the US Coast Guard Academy, where competing in a “Cyberstakes” capture the flag event opened his eyes to vulnerabilities, exploits, and hacker tradecraft. At Huntress, he focuses on endpoint security, digging into living-off-the-land techniques and obfuscated scripting payloads.

With a stack of certifications—including LFCS, PCAP, CompTIA Security+, CEH, eJPT, eCPPT, OSCP, OSCE (classic and 3), OSWP, OSEP, OSED, and OSWE—John brings serious technical prowess to the team. He’s honored to have received the RITA Award at Wild West Hacking Fest from Black Hills Information Security, and he credits the supportive, mission-driven environment at Huntress for enabling him to do meaningful work.

John is also an active voice in the community, sharing his experience through these Huntress on-demand webinars:

Before joining Huntress, John served as an instructor and curriculum developer with the Department of Defense Cyber Crime Center and Cyber Training Academy, and later as a Red Team Cyber Operator at the Defense Threat Reduction Agency.

His top cybersecurity tip is a simple one: “Use a password manager—seriously!!”

Outside of work, John loves spending time with his family and taking the rest he needs to stay sharp. He also shares his life with two dogs, Bam Bam and Pebbles—named after the beloved Flintstones characters, of course.

Give John a follow on his socials:

‍

","john-hammond","https://www.linkedin.com/in/johnhammond010/",[616,618],{"_328":617},{"_37":126,"_13":330,"_128":325},{"_328":619},{"_37":126,"_13":333,"_128":325},"instagramUrl","https://www.instagram.com/_johnhammond/","xTwitterUrl","https://twitter.com/_johnhammond",{"_144":6,"_74":625,"_62":626,"_146":6},"Read blog posts from John Hammond on the Huntress Blog.","John Hammond - Principal Security Researcher | Huntress","portraitImage","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F7743d3ad18734d4697f9e4aa467e670b",{},1752677471317,"0XU3rreLLCPzgsmuIQDqjlW9xhs2",[],"3bo32yqxa78",{"_151":635},{"_37":126,"_13":494,"_128":154,"_43":636},{"_11":496,"_13":494,"_15":497,"_17":314,"_19":19,"_20":637,"_34":639,"_60":640,"_45":647,"_47":521,"_49":522,"_50":51,"_54":523,"_56":57,"_58":648,"_172":525},{"_25":60,"_22":63,"_26":638},{"_28":29,"_30":31,"_32":33},[],{"_376":502,"_320":503,"_323":504,"_424":505,"_506":507,"_72":641,"_416":510,"_374":511,"_322":512,"_69":513,"_426":468,"_325":642,"_15":497},{"_62":497,"_74":509},[643,645],{"_328":644},{"_37":126,"_13":330,"_128":325},{"_328":646},{"_37":126,"_13":519,"_128":325},{},[],["D",1762437600000],{"_13":651,"_15":652,"_60":653},"3390301a4bdf48568966ae4c06042e7d","Gootloader Returns: What Goodies Did They Bring?",{"_69":654,"_164":655,"_157":656,"_155":669,"_148":670,"_139":-5,"_389":701},"gootloader-threat-detection-woff2-obfuscation","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fc5ca2c6f28994ad1877490baf68255c5",[657],{"_160":658},{"_37":126,"_13":271,"_128":163,"_43":659},{"_13":271,"_15":272,"_19":19,"_11":660,"_17":285,"_60":661,"_172":668},1739997400726,{"_15":272,"_69":662,"_72":663,"_291":664,"_68":665,"_140":666,"_74":667},"threat-analysis",{"_62":664,"_74":665},"Threat Analysis Blog Posts | Huntress","Read our Threat Analyses in these Huntress blog posts. ","https://www.huntress.com/blog-categories/threat-analysis","

Dive in and nerd out with us on current and emerging cybersecurity threats. We cover attack vectors, threat actors, and new vulnerabilities, providing insights to help you understand and counteract these risks.

","sfnqk0ba6wi","November 5, 2025",[671],{"_151":672},{"_37":126,"_13":673,"_128":154,"_43":674},"dae057447f3d420e8155f696ef55e2f7",{"_11":675,"_13":673,"_15":676,"_17":314,"_19":19,"_20":677,"_34":679,"_60":680,"_45":696,"_47":697,"_49":698,"_50":51,"_54":383,"_56":383,"_58":699,"_172":700},1756905625674,"Anna Pham ",{"_22":63,"_26":678,"_25":60},{"_28":29,"_30":31,"_32":33},[],{"_320":681,"_69":682,"_15":676,"_424":683,"_322":684,"_374":685,"_426":427,"_72":686,"_416":689,"_325":690,"_323":693,"_376":694,"_622":695},"https://ca.slack-edge.com/T095F397A-U092QEW6D8S-f16503dc82b8-512","anna-pham","Pham ","Anna Pham","Senior Hunt & Response Analyst",{"_62":687,"_74":688},"Anna Pham | Huntress ","Read blog posts from Anna Pham on the Huntress Blog. ","Anna",[691],{"_328":692},{"_37":126,"_13":330,"_128":325},"

Anna is a seasoned cybersecurity professional specializing in malware reverse engineering, threat hunting, and response. With a GIAC Reverse Engineering Malware Certification (GREM) and a career spanning roles at eSentire, Toyota, and Palo Alto, Anna brings a wealth of expertise and relentless drive to protect businesses from cyber threats.

At Huntress, Anna thrives on the proactive approach of hunting down threats before they can harm businesses of all sizes, finding immense satisfaction in making a tangible difference.

Her favorite cybersecurity tip? “Modern attackers don’t hack systems—they hack people. Be your own firewall.”

Outside of work, Anna is a self-proclaimed malware detective, capable of identifying malware families by their file artifacts. When she’s not researching cybercriminals, she’s perfecting her medium-rare steak.

Connect with her on LinkedIn, X, or her blog, TRAC Labs.

","https://www.linkedin.com/in/anna-p-868921105/","https://x.com/RussianPanda9xx",{},1757520275382,1756905768218,[],"mxyi7b4i6oc",["D",1762354800000],{"_13":703,"_15":704,"_60":705},"e8ebc3d178fa46909becb0a725d4c114","How Huntress & DEFCERT Are Streamlining CMMC Assessment Prep",{"_69":706,"_164":707,"_157":708,"_155":669,"_148":714,"_139":-5,"_389":745},"huntress-defcert-streamline-cmmc-assessment-prep","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fe17f0d3efdaa409db5d7b9e2483bd1a9",[709],{"_160":710},{"_37":126,"_13":265,"_128":163,"_43":711},{"_13":265,"_15":266,"_19":19,"_11":349,"_17":285,"_60":712,"_172":357},{"_15":266,"_69":351,"_72":713,"_291":353,"_68":354,"_140":355,"_74":356},{"_62":353,"_74":354},[715],{"_151":716},{"_37":126,"_13":717,"_128":154,"_43":718},"7037dd114d16428e88cd2b05f5523dae",{"_11":719,"_13":717,"_15":720,"_17":314,"_19":19,"_20":721,"_34":723,"_60":724,"_45":740,"_47":741,"_49":742,"_50":51,"_54":383,"_56":435,"_58":743,"_172":744},1761662159681,"Ryan Bonner",{"_25":60,"_387":6,"_22":63,"_26":722},{"_28":29,"_30":31,"_32":33},[],{"_424":725,"_416":726,"_15":720,"_320":727,"_728":729,"_69":730,"_374":731,"_323":732,"_426":733,"_322":720,"_325":734,"_72":737},"Bonner","Ryan","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fda6468a8b3e747a68aaadc8cd7fd2248","jsonLd",{},"ryan-bonner","Founder and CEO, DEFCERT","

Ryan Bonner is the founder and CEO of DEFCERT where he has led DFARS and CMMC compliance transformation projects for over 150 manufacturers in the Defense Industrial Base. Ryan specializes in designing CMMC implementation plans for small and medium-sized manufacturers who utilize third-party IT service providers.

Ryan is a Marine Corps veteran with over 13 years of experience in IT security. As one of the first CMMC Provisional Assessors, Ryan has leveraged his unique insight and experience to bring context to CMMC in manufacturing environments.

Ryan has partnered extensively with the NIST Manufacturing Extension Partnership (MEP) National Network in developing and teaching DFARS and CMMC compliance training programs across the country.

","DEFCERT",[735],{"_328":736},{"_37":126,"_13":330,"_128":325},{"_74":738,"_62":739},"Read blog posts from Ryan Bonner on the Huntress Blog. ","Ryan Bonner | DEFCERT",{},1762299869858,1761662696393,[],"dzjkh04krv",["D",1762351200000],{"_13":747,"_15":748,"_60":749},"0e689dff96a841259779198126b9cad3","Live Hacking Into Microsoft 365 with Kyle Hanslovan",{"_69":750,"_164":751,"_157":752,"_155":758,"_148":759,"_139":-5,"_389":771},"live-hacking-microsoft-365-kyle-hanslovan","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F34d2a3d104da450292197702d60c4cb4",[753],{"_160":754},{"_37":126,"_13":265,"_128":163,"_43":755},{"_13":265,"_15":266,"_19":19,"_11":349,"_17":285,"_60":756,"_172":357},{"_15":266,"_69":351,"_72":757,"_291":353,"_68":354,"_140":355,"_74":356},{"_62":353,"_74":354},"November 4, 2025",[760],{"_151":761},{"_37":126,"_13":153,"_128":154,"_43":762},{"_13":153,"_15":312,"_19":19,"_11":313,"_17":314,"_60":763,"_172":770},{"_15":312,"_69":316,"_72":764,"_320":321,"_322":-5,"_323":324,"_325":765},{"_62":318,"_74":319,"_146":6,"_144":6},[766,768],{"_328":767},{"_37":126,"_13":330,"_128":325},{"_328":769},{"_37":126,"_13":333,"_128":325},"2j73atv63gb",["D",1762272000000],{"_13":773,"_15":774,"_60":775},"65f3299e49a461b4b9c72e02","What Is the Zero Trust Security Model?",{"_69":776,"_164":777,"_157":778,"_155":784,"_139":785,"_148":786,"_142":6,"_389":836},"what-is-the-zero-trust-security-model","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fad8f5c0e8ddf4a9f99564557daa048e0",[779],{"_160":780},{"_37":126,"_13":162,"_128":163,"_43":781},{"_13":162,"_15":260,"_19":19,"_11":284,"_17":285,"_60":782,"_172":451},{"_15":260,"_69":287,"_72":783,"_291":289,"_68":290,"_140":292,"_74":293},{"_62":289,"_74":290},"August 31, 2021","October 28, 2025",[787,807],{"_151":788},{"_37":126,"_13":789,"_128":154,"_43":790},"66048bf75c4994feef17a08a",{"_13":789,"_15":791,"_19":19,"_11":792,"_17":314,"_60":793,"_172":806},"Rachel Bishop",1742719354803,{"_15":791,"_69":794,"_72":795,"_320":798,"_322":-5,"_323":799,"_376":800,"_325":801},"rachel-bishop",{"_62":796,"_74":797,"_146":6,"_144":6},"Rachel Bishop | Huntress","Read blog posts from Rachel Bishop on the Huntress Blog.","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fcda6ab72dddc4da0b2ab8cb32343b758","

Coffee Consumer. Cybersecurity Enthusiast. Former Content Strategist at Huntress.

‍

","https://www.linkedin.com/in/rachelbishop723/",[802,804],{"_328":803},{"_37":126,"_13":330,"_128":325},{"_328":805},{"_37":126,"_13":333,"_128":325},"4rqt6ww8hfq",{"_151":808},{"_37":126,"_13":809,"_128":154,"_43":810},"7eadf16770164b6e8f7d3b13cc7c8c55",{"_11":811,"_13":809,"_15":812,"_17":314,"_19":19,"_20":813,"_34":815,"_60":816,"_45":831,"_47":832,"_49":833,"_50":51,"_54":383,"_56":383,"_58":834,"_172":835},1747774576925,"Lizzie Danielson",{"_22":63,"_25":60,"_26":814},{"_28":29,"_30":31,"_32":33},[],{"_416":817,"_15":812,"_424":818,"_376":819,"_374":820,"_325":821,"_322":824,"_69":825,"_426":468,"_72":826,"_320":829,"_323":830},"Lizzie","Danielson","https://www.linkedin.com/in/lizzie-danielson/","SEO Manager, Content",[822],{"_328":823},{"_37":126,"_13":330,"_128":325},"Lizzie Danielson Huntress ","lizzie-danielson",{"_74":827,"_62":828},"Read blog posts from Lizzie Danielson on the Huntress Blog. ","Lizzie Danielson | Huntress ","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fd18d166790984250b1b7e693c58662df","

Lizzie Danielson brings a sharp eye for strategy and a deep love for storytelling to her role at Huntress. She first discovered her passion for cybersecurity while working at a digital marketing agency that specialized in supporting MSPs and MSSPs. What started as a curiosity quickly became a calling, leading her to dive deeper into the industry, eventually landing at a leading MSSP, before returning to her roots in marketing.

At Huntress, Lizzie blends technical insight with creative execution to help make cybersecurity knowledge accessible for businesses of all sizes. She’s driven by the company’s mission to protect all businesses in an increasingly hostile cyber landscape—and energized by the brilliant minds she gets to collaborate with every day.

When she’s not crafting content, Lizzie enjoys bird watching, thrifting, baking sourdough, and exploring Florida with her fiancé and three beloved “barketing assistants.”

",{},1752685085567,1747775018230,[],"u8x2ojqance",["D",1761624000000],{"_13":838,"_15":839,"_60":840},"7c372c9753f44b7a858f43874ef1d7cb","Exploitation of Windows Server Update Services Remote Code Execution Vulnerability (CVE-2025-59287) ",{"_69":841,"_164":842,"_157":843,"_155":856,"_148":857,"_139":-5,"_389":972},"exploitation-of-windows-server-update-services-remote-code-execution-vulnerability","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F86b7b3417b154f40bf10bbb4d5ac05d6",[844],{"_160":845},{"_37":126,"_13":268,"_128":163,"_43":846},{"_13":268,"_15":269,"_19":19,"_11":847,"_17":285,"_60":848,"_172":855},1739997400367,{"_15":269,"_69":849,"_72":850,"_291":851,"_68":852,"_140":853,"_74":854},"response-to-incidents",{"_62":851,"_74":852},"Incident Responses Blog Posts | Huntress","Read more about Incident Responses in these Huntress blog posts. ","https://www.huntress.com/blog-categories/response-to-incidents","

Be the first to know about CVEs and threat advisories that we're seeing on the front lines. We'll break down how these threats or attacks work, do in-depth analysis, and provide mitigation guidance.

","wws4fhkvoaa","October 24, 2025",[858,886,913,942,957],{"_151":859},{"_37":126,"_13":860,"_128":154,"_43":861},"66048bf3351a788121c616ae",{"_34":862,"_58":863,"_11":864,"_13":860,"_15":865,"_17":314,"_19":19,"_20":866,"_60":868,"_45":882,"_47":883,"_49":864,"_50":51,"_54":884,"_56":884,"_172":885},[],[],1742719368644,"Chad Hudson",{"_26":867,"_25":60,"_22":63},{"_28":29,"_30":31,"_32":33},{"_374":685,"_15":865,"_322":-5,"_320":869,"_323":870,"_376":871,"_72":872,"_426":468,"_622":875,"_69":876,"_325":877},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F833407826677436f8a7753fbb9f0b3ea","

Turning childhood curiosity into cybersecurity expertise.

Chad Hudson's journey into the world of computers began at a young age, inspired by his father's passion for technology. \"I had always been around computers while growing up,\" Chad recalls. \"My dad was an avid hobbyist into computers and tech. Eventually, it rubbed off onto me and I started copying him as a child and got involved with computers.\"

At Huntress, Chad specializes in the Security Operations Center (SOC) and Hunt & Response. His role involves staying vigilant against cyber threats and responding swiftly to security incidents targeting small and medium-sized businesses. \"Working at Huntress gives me all the warm and fuzzies, knowing we're out here being the cyber 'superheroes' for the SMBs,\" he says. \"It's satisfying waking up each day knowing we're the ones stopping threat actors attempting to punish hardworking companies for a quick buck.\"

What's your favorite cybersecurity tip, Chad?

\"Think before you click. Working in a SOC and contributing to the hunts, a main method I see users falling for is social engineering attacks such as phishing. It's better to take your time when reviewing your emails, going to web pages, and downloading content. In the long run, a few extra seconds of caution can save a world of trouble!\"

Go ahead and give Chad a follow on X: @0xBurgers

‍

","https://www.linkedin.com/in/chadhudsoncybersec/",{"_62":873,"_144":79,"_146":79,"_74":874},"Chad Hudson | Huntress","Read blog posts from Chad Hudson on the Huntress Blog.","https://x.com/0xBurgers","chad-hudson",[878,880],{"_328":879},{"_37":126,"_13":330,"_128":325},{"_328":881},{"_37":126,"_13":333,"_128":325},{},1743718476064,"wAnY6pD8qneav3wmIkWFzKSZXNM2","272v2svmpqz",{"_151":887},{"_37":126,"_13":888,"_128":154,"_43":889},"3c9334d8481345a0ab0a6c9e1ce37f67",{"_11":890,"_13":888,"_15":891,"_17":314,"_19":19,"_20":892,"_34":894,"_60":895,"_45":908,"_47":909,"_49":910,"_50":51,"_54":383,"_56":383,"_58":911,"_172":912},1759242730979,"James Maclachlan",{"_26":893,"_22":63,"_25":60},{"_28":29,"_30":31,"_32":33},[],{"_426":468,"_69":896,"_374":685,"_72":897,"_15":891,"_424":900,"_416":901,"_325":902,"_728":905,"_320":906,"_323":907},"james-maclachlan",{"_74":898,"_62":899},"Read blog posts from James Maclachlan on the Huntress Blog. ","James Maclachlan | Huntress","Maclachlan","James ",[903],{"_328":904},{"_37":126,"_13":330,"_128":325},{},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F81a6bcfd3e324813a5b4a12c38b6d9d7","

James Maclachlan is a dedicated cybersecurity professional with a knack for uncovering threats and responding to incidents. His passion for cybersecurity was sparked at a young age after a malware infection while downloading Minecraft mods, and it grew into a career during his time at the University of Warwick, where he earned an MSc in Cybersecurity Engineering. James also holds certifications like eCTHPv2 and eCMAP, showcasing his expertise in threat hunting and malware analysis.

Before joining Huntress, James honed his skills in Security Operations at Mandiant and Google. At Huntress, he thrives on the mission of protecting businesses of all sizes from cyber threats, hunting APTs, and uncovering zero-days.

Outside of work, James enjoys web development, drumming, and playing ice hockey. He’s a strong advocate for password managers, unique passwords, and 2FA.

Explore his insights on his blog: blog.jaalma.io.

",{},1759842998849,1759242914864,[],"tkedufmzdwl",{"_151":914},{"_37":126,"_13":915,"_128":154,"_43":916},"6619a8c7f5f67fea22937980",{"_11":917,"_13":915,"_15":918,"_17":314,"_19":19,"_20":919,"_34":921,"_60":922,"_45":938,"_47":939,"_49":917,"_50":51,"_54":884,"_56":631,"_58":940,"_172":941},1742719349377,"Jai Minton",{"_26":920,"_25":60,"_22":63},{"_28":29,"_30":31,"_32":33},[],{"_426":468,"_322":-5,"_374":923,"_376":924,"_69":925,"_72":926,"_622":929,"_15":918,"_323":930,"_325":931,"_320":936,"_627":937},"Manager, Hunt & Response - AUS","https://www.linkedin.com/in/jaiminton/","jai-minton",{"_144":6,"_74":927,"_146":6,"_62":928},"Read blog posts from Jai Minton, Principal Security Operations Analyst on the Huntress Blog.","Jai Minton - Principal Security Operations Analyst | Huntress","https://x.com/CyberRaiju/","

Jai Minton’s journey into cybersecurity is as unique as it is inspiring.

Jai's initial foray into cybersecurity began in high school when he \"borrowed\" internet from a neighbor, uncovering vulnerabilities in wireless networks. This curiosity led him to pursue information security in university, despite initial reluctance. A pivotal moment during his final year placement involved identifying and addressing security issues within an organization. This achievement quickly led to the creation of a new role specifically for Jai, marking the beginning of his professional career in the cybersecurity industry.

Describing himself as a \"Jack of all Trades, Master of None,\" Jai has built a versatile skill set that spans Threat Hunting, Security Operations, Malware Analysis, Detection Engineering, Digital Forensics, and Incident Response. While his focus has been primarily on defensive security operations, threat intelligence, and threat hunting, Jai's early career included penetration testing and vulnerability assessments.

“Huntress allows me to have a flexible remote working environment, whilst still being able to use my mind to solve any hurdles encountered. This is all with the knowledge that everything is directly contributing to the ongoing security of small to medium-sized businesses which need protection the most.”

Jai’s academic credentials are impressive: a Bachelor of Information Technology, a Diploma of Government, and certifications such as OSCP, and GIAC iOS and MacOS Examiner (GIME). He has also served as an Academic Advisor for Security Blue Team’s ‘Blue Team Level 2’ (BTL2) certification, with his research being cited in renowned industry courses like SANS FOR500 (Windows Forensic Analysis).

Jai has been recognized with several prestigious awards, including:

2023: SANS Holiday Hack Challenge - Best Overall Answer Grand Prize Winner
2022: SANS Holiday Hack Challenge - Best Technical Answer Prize Winner
2021: SANS Holiday Hack Challenge - Most Creative Prize Winner
SANS Counter Hack Challenges: Core Netwars Continuous 2 - Top 1% Globally
SANS Counter Hack Challenges: DFIR Netwars Continuous 2 - Top 3% Globally

Before joining Huntress, Jai worked for CrowdStrike, further honing his expertise in the cybersecurity field.

What’s your favorite cybersecurity tip, Jai?

First, use a password manager, don't save your passwords in your browser or reuse them. Secondly, block advertisements—malicious ads are a common source of downloading software from fake websites that cause initial infections on a system.”

Outside of his professional life, Jai enjoys research, gaming, and spending time with his loved ones.

You can learn more about Jai on his website jaiminton.com or follow him on Twitter/X and YouTube @CyberRaiju.

",[932,934],{"_328":933},{"_37":126,"_13":330,"_128":325},{"_328":935},{"_37":126,"_13":333,"_128":325},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fd158bbe5530045be8a6c7f1a4de7ed45","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F9538827d6c1b49ffb4e8f1e39e63fab3",{},1752677471534,[],"8ihipveqil8",{"_151":943},{"_37":126,"_13":602,"_128":154,"_43":944},{"_11":604,"_13":602,"_15":605,"_17":314,"_19":19,"_20":945,"_34":947,"_60":948,"_45":955,"_47":630,"_49":604,"_50":51,"_54":631,"_56":631,"_58":956,"_172":633},{"_26":946,"_25":60,"_22":63},{"_28":29,"_30":31,"_32":33},[],{"_320":610,"_374":611,"_323":612,"_69":613,"_15":605,"_376":614,"_325":949,"_620":621,"_426":468,"_622":623,"_72":954,"_322":-5,"_627":628},[950,952],{"_328":951},{"_37":126,"_13":330,"_128":325},{"_328":953},{"_37":126,"_13":333,"_128":325},{"_144":6,"_74":625,"_62":626,"_146":6},{},[],{"_151":958},{"_37":126,"_13":494,"_128":154,"_43":959},{"_11":496,"_13":494,"_15":497,"_17":314,"_19":19,"_20":960,"_34":962,"_60":963,"_45":970,"_47":521,"_49":522,"_50":51,"_54":523,"_56":57,"_58":971,"_172":525},{"_25":60,"_22":63,"_26":961},{"_28":29,"_30":31,"_32":33},[],{"_376":502,"_320":503,"_323":504,"_424":505,"_506":507,"_72":964,"_416":510,"_374":511,"_322":512,"_69":513,"_426":468,"_325":965,"_15":497},{"_62":497,"_74":509},[966,968],{"_328":967},{"_37":126,"_13":330,"_128":325},{"_328":969},{"_37":126,"_13":519,"_128":325},{},[],["D",1761278400000],{"_13":974,"_15":975,"_60":976},"8914925e4b244229a16208cce96b2838","Looking Through a Pinhole at a Qilin Ransomware Attack",{"_69":977,"_164":978,"_157":979,"_155":985,"_148":986,"_139":-5,"_389":1059},"looking-at-qilin-ransomware-attack","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F642541cb00fe4e90a07832fed51581a9",[980],{"_160":981},{"_37":126,"_13":271,"_128":163,"_43":982},{"_13":271,"_15":272,"_19":19,"_11":660,"_17":285,"_60":983,"_172":668},{"_15":272,"_69":662,"_72":984,"_291":664,"_68":665,"_140":666,"_74":667},{"_62":664,"_74":665},"October 22, 2025",[987,1002,1031],{"_151":988},{"_37":126,"_13":494,"_128":154,"_43":989},{"_11":496,"_13":494,"_15":497,"_17":314,"_19":19,"_20":990,"_34":992,"_60":993,"_45":1000,"_47":521,"_49":522,"_50":51,"_54":523,"_56":57,"_58":1001,"_172":525},{"_25":60,"_22":63,"_26":991},{"_28":29,"_30":31,"_32":33},[],{"_376":502,"_320":503,"_323":504,"_424":505,"_506":507,"_72":994,"_416":510,"_374":511,"_322":512,"_69":513,"_426":468,"_325":995,"_15":497},{"_62":497,"_74":509},[996,998],{"_328":997},{"_37":126,"_13":330,"_128":325},{"_328":999},{"_37":126,"_13":519,"_128":325},{},[],{"_151":1003},{"_37":126,"_13":1004,"_128":154,"_43":1005},"e53a6e3ef1ec4c63bd424e409f0d0969",{"_11":1006,"_13":1004,"_15":1007,"_17":314,"_19":19,"_34":1008,"_60":1009,"_45":1023,"_47":1024,"_49":1025,"_50":51,"_54":383,"_56":1026,"_58":1027,"_20":1028,"_172":1030},1760633372721,"Ben Folland ",[],{"_72":1010,"_374":1013,"_322":1014,"_15":1007,"_506":507,"_424":1015,"_416":1016,"_627":1017,"_728":1018,"_426":468,"_69":1019,"_325":1020},{"_62":1011,"_74":1012},"Ben Folland | Huntress ","Read blog posts from Ben Folland on the Huntress Blog. ","Security Operations Analyst","Ben Folland Huntress ","Folland","Ben","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fb7a2f187b76441638e49a6b573c20fd1",{},"ben-folland",[1021],{"_328":1022},{"_37":126,"_13":330,"_128":325},{},1762273600691,1760633465178,"jUlbsxh3TzMKTX6guQoqpyiR6NT2",[],{"_25":60,"_22":63,"_26":1029,"_387":79},{"_28":29,"_30":31,"_32":33},"etjsi14i6a",{"_151":1032},{"_37":126,"_13":1033,"_128":154,"_43":1034},"66032c1a34a761fda5e296f5",{"_11":1035,"_13":1033,"_15":1036,"_17":314,"_19":19,"_20":1037,"_34":1039,"_60":1040,"_45":1055,"_47":1056,"_49":1035,"_50":51,"_54":884,"_56":631,"_58":1057,"_172":1058},1742719371916,"Harlan Carvey",{"_25":60,"_22":63,"_26":1038},{"_28":29,"_30":31,"_32":33},[],{"_72":1041,"_322":-5,"_325":1044,"_323":1049,"_376":1050,"_426":468,"_15":1036,"_320":1051,"_374":1052,"_69":1053,"_627":1054},{"_146":6,"_74":1042,"_144":6,"_62":1043},"Read blog posts from Harlan Carvey, Senior Threat Intelligence Analyst on the Huntress Blog.","Harlan Carvey - Senior Threat Intelligence Analyst | Huntress",[1045,1047],{"_328":1046},{"_37":126,"_13":330,"_128":325},{"_328":1048},{"_37":126,"_13":333,"_128":325},"

Hanging out where digital forensics meets incident response and threat intel.

“I was in grad school in 1994, and came across something interesting. The \"finger\" app was described as a 'security vulnerability'. I had no idea why this was the case, so I asked the senior sysadmin for the curriculum. She looked at me, smiled, and walked away without saying a word.” So began Harlan’s affinity for digging into head-scratching security questions.

Harlan is Staff Threat Intel Analyst, Adversary Tactics here at Huntress, poised at the intersection of digital forensics and incident response, threat hunting, and threat intel.

He leverages his extensive 20+ years of DFIR (Digital Forensics and Incident Response) experience to focus on threat intelligence, which is essentially unraveling how threat actors are looking to gain entry on endpoints and finding ways to detect it sooner in the attack cycle. Prior to Huntress, Harlan ran the internal SOC at EY. \t

But he doesn’t keep it all to himself, Harlan is an accomplished public speaker, writer, innovative researcher, and analyst. As a published author (besides the below blog posts!), Harlan has published 9 books, including the first book of its kind offering an analysis of the Windows Registry.

When he’s not at work, Harlan enjoys programming in Perl, reading, writing, and working around the farm.

‍

What's your favorite cybersecurity tip, Harlan?
“Do the basics well, beginning with an asset inventory and attack surface reduction.”

‍

","https://www.linkedin.com/in/harlan-carvey-86a8694b/","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ffa69b31eae1e4264b7c12bcfa5e0f9a5","Staff Threat Intelligence Analyst","harlan-carvey","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F110b52ecaef146ec9ea537d88a5ab596",{},1752677471801,[],"bfkbtp3tkht",["D",1761109200000],{"_13":1061,"_15":1062,"_60":1063},"e16dadca6cd84a83b73ab14d9ba47031","I Wish I Was a Little Bit Taller: Dealing with Imperfection in Intrusions ",{"_69":1064,"_164":1065,"_157":1066,"_155":1072,"_148":1073,"_139":-5,"_389":1115},"imperfect-telemetry-techniques-effective-incident-response","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F4f5bb63967d7485d8f4d0b3691aa065d",[1067],{"_160":1068},{"_37":126,"_13":162,"_128":163,"_43":1069},{"_13":162,"_15":260,"_19":19,"_11":284,"_17":285,"_60":1070,"_172":489},{"_15":260,"_69":287,"_72":1071,"_291":289,"_68":290,"_140":292,"_74":293},{"_62":289,"_74":290},"October 21, 2025",[1074],{"_151":1075},{"_37":126,"_13":1076,"_128":154,"_43":1077},"66fc0862faf913278b305e9b",{"_11":1078,"_13":1076,"_15":1079,"_17":314,"_19":19,"_20":1080,"_34":1082,"_60":1083,"_45":1111,"_47":1112,"_49":1078,"_50":51,"_54":55,"_56":1026,"_58":1113,"_172":1114},1742719343202,"Anton Ovrutsky",{"_22":63,"_25":60,"_26":1081},{"_28":29,"_30":31,"_32":33},[],{"_622":1084,"_69":1085,"_323":1086,"_376":1087,"_1088":1089,"_374":1095,"_426":468,"_322":-5,"_325":1096,"_15":1079,"_72":1103,"_1106":1107,"_320":1108,"_416":1109,"_424":1110},"https://x.com/@Antonlovesdnb","anton-ovrutsky","

From guarding doors to guarding data.

Anton Ovrutsky transitioned into cybersecurity from a Service Desk role, initially gaining experience through governance, risk, and compliance work. At Huntress, he serves as a Principal Threat Hunting and Response Analyst, with an emphasis on tactical response. \"I specialize in looking at the incidents that the SOC escalates that require more in-depth review,\" Anton explains. To put it another way, his expertise ensures that complex security incidents are thoroughly investigated and addressed.

Anton holds several prestigious certifications, including CISSP, OSCP, OSCE, CCSP, and KCNA. Prior to joining Huntress, he gained valuable experience in the SIEM vendor SaaS space.

He holds several prestigious certifications—CISSP, OSCP, OSCE, CCSP, and KCNA. Before joining Huntress, Anton worked in the SIEM vendor SaaS space, where he honed his skills in security information and event management.

What's your favorite cybersecurity tip, Anton?

\"When possible, do not assume something works a certain way unless you've tried it yourself.\"

Outside of work, Anton enjoys watching his favorite shows on his favorite couch, spending time with his wife and cats, and weightlifting. Before embarking on his cybersecurity career, he earned a master's degree in European History and even worked as a night club bouncer. Now, that’s a well-rounded resume.

Follow Anton on X: @Antonlovesdnb

","https://www.linkedin.com/in/antonovrutsky/","specialties",[1090,1093],{"_1091":1092},"specialty","initial access",{"_1091":1094},"lateral movement","Principal Threat Hunting and Response Analyst",[1097,1099,1101],{"_328":1098},{"_37":126,"_13":330,"_128":325},{"_328":1100},{"_37":126,"_13":333,"_128":325},{"_328":1102},{"_37":126,"_13":519,"_128":325},{"_74":1104,"_144":6,"_62":1105,"_146":6},"Read blog posts from Anton Ovrutsky on the Huntress Blog.","Anton Ovrutsky | Huntress","bioDetailShort","Anton Ovrutsky transitioned into cybersecurity from a Service Desk role, initially gaining experience through governance, risk, and compliance work.","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ff941baab28f74a829eb9f8619d0e4a0f","Anton","Ovrutsky",{},1754419091628,[],"vp5mjhq87mq",["D",1761022800000],{"_13":1117,"_15":1118,"_60":1119},"9969bb7ba36a4a2ba84dcb9c6cd16dbd","Dispelling Ransomware Deployment Myths",{"_69":1120,"_164":1121,"_157":1122,"_155":1128,"_148":1129,"_139":-5,"_389":1160},"dispelling-ransomware-deployment-myths","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F1a0b787ebf684620a602320f6e66cd17",[1123],{"_160":1124},{"_37":126,"_13":162,"_128":163,"_43":1125},{"_13":162,"_15":260,"_19":19,"_11":284,"_17":285,"_60":1126,"_172":489},{"_15":260,"_69":287,"_72":1127,"_291":289,"_68":290,"_140":292,"_74":293},{"_62":289,"_74":290},"October 16, 2025",[1130,1145],{"_151":1131},{"_37":126,"_13":1033,"_128":154,"_43":1132},{"_11":1035,"_13":1033,"_15":1036,"_17":314,"_19":19,"_20":1133,"_34":1135,"_60":1136,"_45":1143,"_47":1056,"_49":1035,"_50":51,"_54":884,"_56":631,"_58":1144,"_172":1058},{"_25":60,"_22":63,"_26":1134},{"_28":29,"_30":31,"_32":33},[],{"_72":1137,"_322":-5,"_325":1138,"_323":1049,"_376":1050,"_426":468,"_15":1036,"_320":1051,"_374":1052,"_69":1053,"_627":1054},{"_146":6,"_74":1042,"_144":6,"_62":1043},[1139,1141],{"_328":1140},{"_37":126,"_13":330,"_128":325},{"_328":1142},{"_37":126,"_13":333,"_128":325},{},[],{"_151":1146},{"_37":126,"_13":494,"_128":154,"_43":1147},{"_11":496,"_13":494,"_15":497,"_17":314,"_19":19,"_20":1148,"_34":1150,"_60":1151,"_45":1158,"_47":521,"_49":522,"_50":51,"_54":523,"_56":57,"_58":1159,"_172":525},{"_25":60,"_22":63,"_26":1149},{"_28":29,"_30":31,"_32":33},[],{"_376":502,"_320":503,"_323":504,"_424":505,"_506":507,"_72":1152,"_416":510,"_374":511,"_322":512,"_69":513,"_426":468,"_325":1153,"_15":497},{"_62":497,"_74":509},[1154,1156],{"_328":1155},{"_37":126,"_13":330,"_128":325},{"_328":1157},{"_37":126,"_13":519,"_128":325},{},[],["D",1760590800000],{"_13":1162,"_15":1163,"_60":1164},"2ff8d52334b44313aef6a467849f818d","CMMC Final Rule: What DoD Subs Need to Know",{"_69":1165,"_164":1166,"_157":1167,"_155":1173,"_148":1174,"_139":-5,"_389":1202},"cmmc-final-rule-guide-for-dod-subcontractors","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F228215002174478d9d63c89ac4edbd41",[1168],{"_160":1169},{"_37":126,"_13":162,"_128":163,"_43":1170},{"_13":162,"_15":260,"_19":19,"_11":284,"_17":285,"_60":1171,"_172":489},{"_15":260,"_69":287,"_72":1172,"_291":289,"_68":290,"_140":292,"_74":293},{"_62":289,"_74":290},"October 15, 2025",[1175],{"_151":1176},{"_37":126,"_13":1177,"_128":154,"_43":1178},"66048bf38d279e9104a87754",{"_34":1179,"_58":1180,"_11":1181,"_13":1177,"_15":1182,"_17":314,"_19":19,"_20":1183,"_60":1185,"_45":1199,"_47":1200,"_49":1181,"_50":51,"_54":884,"_56":884,"_172":1201},[],[],1742719367309,"Chris Henderson",{"_26":1184,"_25":60,"_22":63},{"_28":29,"_30":31,"_32":33},{"_376":1186,"_69":1187,"_426":468,"_320":1188,"_322":-5,"_374":1189,"_72":1190,"_325":1193,"_15":1182,"_323":1198},"https://www.linkedin.com/in/chenderson-cissp/","chris-henderson","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F949468cfcdfb4874b0e4fe51534cec14","Chief Information Security Officer",{"_144":6,"_146":6,"_62":1191,"_74":1192},"Chris Henderson | Huntress","Read blog posts from Chris Henderson on the Huntress Blog.",[1194,1196],{"_328":1195},{"_37":126,"_13":330,"_128":325},{"_328":1197},{"_37":126,"_13":333,"_128":325},"

‍An information security leader dedicated to safeguarding small businesses and enabling communities.

Chris Henderson oversees internal security at Huntress, ensuring the company stays ahead of emerging cyber threats. He also leads the threat intelligence group Adversary Tactics and the Product Security Researchers team, translating threat intelligence into product capabilities and features.

His journey into cybersecurity began unexpectedly. \"(It started with) the initial Diablo game. I was frustrated by being so terrible at it, but I learned how to manipulate the local save files to give myself a boost. It completely changed the way I thought about computers and applications,\" Chris recalls.

Chris holds degrees in both Psychology and Computer Science and is a Certified Information Systems Security Professional (CISSP). Before transitioning into IT and security, he worked as a social worker. \"While it may seem like a big leap, a lot of the interpersonal skills from social work made security change management significantly easier to navigate,\" he notes.

Prior to joining Huntress, Chris spent his entire technical career in the Managed Service Provider (MSP) space, notably at Datto. His expertise includes building scalable, agile, and engaged teams driven by data, specializing in compliance, business continuity, security operations, supply chain risk, and sales enablement.

What's your favorite cybersecurity tip, Chris?

\"Always assume malicious intent. The current state of the world has made it easier than ever to launch a very convincing social engineering attack. Due to this, you should assume every inbound form of communication is malicious until you know for certain otherwise.\"

Outside of work, Chris enjoys photography, board games, and electric skateboarding. He’s also a named inventor on the patent \"Systems and methods for detecting ransomware infection\", which seems relevant.

Check out his LinkedIn page to learn more.

‍

",{},1743718417973,"dkdy5gqq7iq",["D",1760504400000],"totalPages",35,"pageNumber","event","loader","common",{"_1210":1211,"_1741":1742,"_1807":1808,"_1870":1871},"headerContent",[1212,1296,1409,1480,1558,1575],{"_58":1213,"_45":1214,"_56":55,"_60":1215,"_47":1287,"_15":1221,"_11":1288,"_19":19,"_54":55,"_49":1289,"_20":1290,"_50":51,"_17":1292,"_34":1293,"_13":1294,"_172":1295},[],{},{"_1216":1217,"_1218":1219,"_1220":1221,"_1222":1223},"type","Menu","linkProperties",{},"menuText","Platform","columns",[1224,1258],{"_1225":1226,"_1230":105,"_1216":1231,"_1232":79,"_62":1233,"_1234":1235},"footerLink",{"_77":1227,"_1228":1229},"/platform","text","Platform Overview","columnSpan","Link List","showTitle","Huntress Managed Security Platform","links",[1236,1243,1248,1253],{"_77":1237,"_1216":1238,"_1239":1240,"_121":1241,"_62":1242},"/platform/managed-edr","Text Link","icon","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Feb16a0fc49194ef3a61c385bd0d0f312","

Get full endpoint visibility, detection, and response.

","Managed EDR",{"_121":1244,"_1239":1245,"_1216":1238,"_62":1246,"_77":1247},"

Empower your teams with science-backed security awareness training.

","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fcd0acdb221c84200a837d97a6bac46a7","Managed Security Awareness Training","/platform/security-awareness-training",{"_1216":1238,"_121":1249,"_1239":1250,"_77":1251,"_62":1252},"

Protect your Microsoft 365 identities and email environments.

","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ffd3a938d7dfc41bdac34c3f46a36afb2","/platform/managed-itdr","Managed ITDR",{"_62":1254,"_1239":1255,"_77":1256,"_121":1257,"_1216":1238},"Managed SIEM","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F5638ee75bf42433c81332c153db5cb15","/platform/siem","

Managed threat response and robust compliance support at a predictable price.

",{"_1232":6,"_1216":1259,"_1230":51,"_142":79,"_1225":1260,"_62":1261,"_1262":1263},"Card",{},"Learn More Card","cardContentReference",{"_37":126,"_13":1264,"_128":1265,"_43":1266},"be5723c7f6674c6db1ebfc79503cb723","custom-cards",{"_11":1267,"_60":1268,"_34":1278,"_15":1270,"_50":51,"_45":1279,"_47":1280,"_54":55,"_58":1281,"_17":1282,"_49":1283,"_56":55,"_13":1264,"_19":19,"_20":1284,"_172":1286},1738695869997,{"_121":1269,"_15":1270,"_1271":1272,"_1273":1274,"_1275":1274,"_1276":1272,"_164":1277},"Try Huntress for free and deploy in minutes to start fighting threats.","Learn More","linkUrl","/demo","linkLabelText","Request a Demo","ctaText","ctaUrl","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F4dcf43805cea496b92a4b04334297b54",[],{},1749580539246,[],"6debca3e2db24468b466376fc09f0c11",1738695944669,{"_26":1285,"_22":63,"_25":60},{"_28":29,"_30":31,"_32":33},"xofuybi8f8s",1749740747998,1749525643074,1749565841689,{"_25":60,"_26":1291,"_22":63},{"_30":31,"_28":29,"_32":33},"a8d3d337534a4f77aa8de03d557b7d7c",[],"1644f670abc3422fb4ae58c911ab52e0","obnty9c8zb8",{"_11":1297,"_13":1298,"_15":1299,"_17":1292,"_19":19,"_20":1300,"_34":1302,"_60":1303,"_45":1405,"_47":1406,"_49":1407,"_50":51,"_54":55,"_56":57,"_58":1408,"_172":1295},1749530546748,"5233b983391e46bea1a73aa4e64e3e1f","Solutions",{"_26":1301,"_22":63,"_25":60},{"_28":29,"_30":31,"_32":33},[],{"_1218":1304,"_1222":1305,"_1220":1299,"_1216":1217},{},[1306,1322,1346],{"_1232":79,"_1225":1307,"_1216":1231,"_1234":1308,"_1230":51,"_62":1321},{},[1309,1313,1317],{"_1216":1238,"_77":1310,"_1239":1311,"_62":1312},"/solutions/topics/phishing","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fd8af97b52a364281ae4ae771eac29f60","Phishing",{"_1216":1238,"_77":1314,"_1239":1315,"_62":1316},"/solutions/topics/cybersecurity-compliance","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F5437345f68ab4fecb25e1bf64d596f05","Compliance",{"_1239":1318,"_1216":1238,"_77":1319,"_62":1320},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fe0006e0247a84d538abfdb56270b1971","/solutions/topics/business-email-compromise","Business Email Compromise","Solutions by Topic",{"_1234":1323,"_1232":79,"_62":1344,"_1216":1231,"_1230":51,"_1225":1345},[1324,1328,1332,1336,1340],{"_1239":1325,"_1216":1238,"_77":1326,"_62":1327},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F4951efeb175d46a28d43a56e44f1aaa6","/industries/education","Education",{"_62":1329,"_77":1330,"_1239":1331,"_1216":1238},"Finance","/industries/financial-services","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F2c6e56c396984defa968946c3305fd5d",{"_77":1333,"_62":1334,"_1239":1335,"_1216":1238},"/industries/healthcare","Healthcare","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fad40fb4e0e8f4fc3a283928e18d2cb07",{"_1239":1337,"_77":1338,"_62":1339,"_1216":1238},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fa1a16399f6f94c3da8e42ddbe735c1c1","/industries/manufacturing","Manufacturing",{"_77":1341,"_1216":1238,"_62":1342,"_1239":1343},"/industries/state-and-local-government","State & Local Government","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fdafe6a53f78a407c80691541d7e292b9","Solutions by Industry",{},{"_1230":51,"_62":1347,"_142":79,"_1216":1259,"_1348":1349,"_1232":79,"_1225":1351,"_1262":1353},"Featured Resource","cardContentOverride",{"_121":1350},"

Packed with the information, tools, and guidance you need to keep your organization running smoothly and, most importantly, your patients safe.

",{"_1228":1352,"_77":63},"Get the Kit",{"_37":126,"_13":1354,"_128":1355,"_43":1356},"66c49e7c03769aca3efd1adf","resources",{"_13":1354,"_15":1357,"_19":19,"_11":1358,"_17":1359,"_60":1360,"_172":1404},"Healthcare Cybersecurity Success Kit",1742716627143,"5c10263d01de417681f67c6df9d9a9d4",{"_15":1357,"_69":1361,"_155":1362,"_139":1363,"_72":1364,"_140":1367,"_142":6,"_1368":79,"_164":1369,"_1370":1371,"_1372":1371,"_1373":1374,"_1392":1393,"_1276":1402,"_1275":1403},"healthcare-cybersecurity-success-kit","2024-08-21T00:00:00.000Z","2024-08-22T14:36:33.220Z",{"_62":1365,"_74":1366,"_146":6,"_144":6},"Healthcare Cybersecurity Success Kit | Huntress","This Healthcare Cybersecurity Success Kit is packed with the information, tools, and guidance you need to keep your organization running smoothly and, most importantly, your patients safe.","https://www.huntress.com/resources/healthcare-cybersecurity-success-kit","gated","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F25165b11288e4ab8ab0dc72832f4eb5e","preGateContent","

Hackers are hitting healthcare hard. From large hospital networks to small rural clinics, nothing’s off-limits anymore.

But you don't have to take it. This Healthcare Cybersecurity Success Kit is packed with the information, tools, and guidance you need to keep your organization running smoothly and, most importantly, your patients safe.

","postGateContent","tags",[1375,1384],{"_1376":1377},"tag",{"_37":126,"_13":1378,"_128":1373,"_43":1379},"6619a1966fc1cc2a81065887",{"_13":1378,"_15":1334,"_19":19,"_11":1380,"_17":1381,"_60":1382,"_172":1383},1741825542581,"06a1fff4f2d64eed986229acc010c74f",{"_15":1334},"guaeiziu1yo",{"_1376":1385},{"_37":126,"_13":1386,"_128":1373,"_43":1387},"65f3299e49a461b4b9c72e83",{"_13":1386,"_15":1388,"_19":19,"_11":1389,"_17":1381,"_60":1390,"_172":1391},"Mastering Cybersecurity",1741825551705,{"_15":1388},"kb1e5p6ntc","assetType",{"_37":126,"_13":1394,"_128":1395,"_43":1396},"65f3299e49a461b4b9c72e40","asset-types",{"_13":1394,"_15":1397,"_19":19,"_11":1398,"_17":1399,"_60":1400,"_172":1401},"Success Kit",1741790296798,"50c69b616da14a22b2d7092dd07fd641",{"_15":1397},"1twemb30d2d","https://www.huntress.com/industries/healthcare/healthcare-resource-kit","Get the Healthcare Cybersecurity Success Kit","uddo57aklr",{},1753628029636,1749565841905,[],{"_11":1410,"_13":1411,"_15":1412,"_17":1292,"_19":19,"_20":1413,"_34":1415,"_60":1416,"_45":1476,"_47":1477,"_49":1478,"_50":51,"_54":55,"_56":884,"_58":1479,"_172":1295},1749560149759,"94db9c6a65e047acb4ac7d4d2ea0da30","Why Huntress",{"_26":1414,"_387":6,"_25":60,"_22":63},{"_32":33,"_30":31,"_28":29},[],{"_1222":1417,"_1218":1475,"_1220":1412,"_1216":1217},[1418,1435,1448],{"_1230":51,"_1225":1419,"_1234":1420,"_1232":79,"_62":1434,"_1216":1231},{},[1421,1425,1430],{"_1239":1422,"_62":1423,"_1216":1238,"_77":1424},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F11f54e8f5fb54aadbf4c71effaab65a5","Managed Service Providers","/why-huntress/managed-service-providers",{"_506":1426,"_1239":1427,"_62":1428,"_1216":1238,"_77":1429},"Platform Icon","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ff0209e5a35e34a25a31075aca24dec96","Value Added Resellers","/why-huntress/value-added-resellers",{"_1239":1431,"_62":1432,"_1216":1238,"_77":1433},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ff257bebdca1c45cab6259f8436ca7221","IT & Security Teams","/why-huntress/it-security-teams","Who We Serve",{"_1230":51,"_1225":1436,"_1234":1437,"_1232":79,"_62":1447,"_1216":1231},{},[1438,1443],{"_506":1439,"_1239":1440,"_62":1441,"_1216":1238,"_77":1442},"Issue Detected - Alert Icon","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F4cc0a301d59343f08fa3fd23661a7726","Huntress SOC","/why-huntress/24-7-soc",{"_1239":1444,"_62":1445,"_1216":1238,"_77":1446},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fff7b259c7c5c408f9747e8a28989015b","Case Studies","/why-huntress/case-studies","The Huntress Difference",{"_1230":51,"_142":79,"_1225":1449,"_1234":1452,"_1232":79,"_62":1474,"_1216":1231},{"_1228":1450,"_77":1451},"Compare All","/comparison",[1453,1456,1459,1462,1465,1468,1471],{"_62":1454,"_1216":1238,"_77":1455},"Bitdefender","/comparison/huntress-vs-bitdefender",{"_62":1457,"_1216":1238,"_77":1458},"Blackpoint","/comparison/huntress-vs-blackpoint",{"_62":1460,"_1216":1238,"_77":1461},"CrowdStrike","/comparison/huntress-vs-crowdstrike",{"_62":1463,"_1216":1238,"_77":1464},"Datto","/comparison/huntress-vs-datto",{"_62":1466,"_1216":1238,"_77":1467},"SentinelOne","/comparison/huntress-vs-sentinelone",{"_62":1469,"_1216":1238,"_77":1470},"Sophos","/comparison/huntress-vs-sophos",{"_62":1472,"_1216":1238,"_77":1473},"Webroot","/comparison/huntress-vs-webroot","Compare Huntress",{},{},1762463920798,1749565841954,[],{"_54":55,"_60":1481,"_13":1549,"_47":1550,"_49":1551,"_20":1552,"_56":55,"_15":1482,"_45":1554,"_17":1292,"_58":1555,"_19":19,"_34":1556,"_50":51,"_11":1557,"_172":1295},{"_1216":1217,"_1220":1482,"_1218":1483,"_1222":1484},"Resources",{},[1485,1509,1531],{"_1232":79,"_62":1486,"_1230":51,"_1234":1487,"_1225":1506,"_1216":1231},"Resource Center",[1488,1491,1494,1497,1500,1503],{"_1216":1238,"_77":1489,"_62":1490},"/resources?assetTypes=Datasheet","Datasheets",{"_62":1492,"_77":1493,"_1216":1238},"Ebooks","/resources?assetTypes=eBook",{"_62":1495,"_1216":1238,"_77":1496},"Reports","/resources?assetTypes=Report",{"_77":1498,"_1216":1238,"_62":1499},"/resources?assetTypes=On-Demand+Webinar","On-Demand Webinars",{"_77":1501,"_62":1502,"_1216":1238},"/resources?assetTypes=Whitepaper","Whitepapers",{"_77":1504,"_62":1505,"_1216":1238},"/resources?assetTypes=Video","Videos",{"_1228":1507,"_77":1508},"View All Resources","/resources",{"_1234":1510,"_1225":1529,"_1230":51,"_1232":6,"_62":1530,"_1216":1231},[1511,1513,1517,1521,1525],{"_1239":1512,"_1216":1238,"_62":16,"_77":44},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F7f4ca3bd558f425da4f12b81befbb279",{"_77":1514,"_1216":1238,"_1239":1515,"_62":1516},"/upcoming-events","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F6aa1f0e921a844ed9975b8c477720a6c","Upcoming Events",{"_62":1518,"_77":1519,"_1216":1238,"_1239":1520},"Support Documentation","https://support.huntress.io/hc/en-us","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fac02933fbb964cdf9e6c8b3b2280fa5d",{"_62":1522,"_1216":1238,"_1239":1523,"_77":1524},"Integrations","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F75378b21898340b6b863c3b68ae0a980","/integrations",{"_62":1526,"_77":1527,"_1239":1528,"_1216":1238},"Huntress Hub","https://hub.huntress.com/#/page/login","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fabe11db97e084bfeb9d370076781caea",{},"Other Resources",{"_62":1532,"_142":79,"_1216":1231,"_1234":1533,"_1232":79,"_1225":1548,"_1230":51},"Produced by Huntress",[1534,1539,1544],{"_204":1535,"_77":1536,"_1216":1537,"_62":1538},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fea18a565ed0e4bdda1f6881a955de34c","/tradecraft-tuesday","Image Link","Tradecraft Tuesday",{"_62":1540,"_1216":1537,"_77":1541,"_506":1542,"_204":1543},"Fireside Chat","/firesidechat","Fireside Chat Community Series","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F98c34785dc62414381fe4d25b1d355a9",{"_204":1545,"_62":1546,"_1216":1537,"_77":1547},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F5f3ffde6942c41b6885da8bc727a4cc5","Product Lab Channel","/product-lab-channel",{},"e21c3f198af24be5b52f72480500ff2d",1749676549589,1749565842009,{"_22":63,"_26":1553,"_25":60},{"_28":29,"_30":31,"_32":33},{},[],[],1749560786283,{"_11":1559,"_13":1560,"_15":1561,"_17":1292,"_19":19,"_20":1562,"_34":1564,"_60":1565,"_45":1571,"_47":1572,"_49":1573,"_50":51,"_54":55,"_56":55,"_58":1574,"_172":1295},1749561737294,"84190317c5f14f32ae91ba95a125371a","Pricing",{"_22":63,"_25":60,"_26":1563},{"_28":29,"_30":31,"_32":33},[],{"_1218":1566,"_1216":1570,"_1220":1561,"_1271":1567},{"_77":1567,"_1228":1561,"_1568":1569},"/pricing","target","_self","Link",{},1749579606414,1749565842037,[],{"_11":1576,"_13":1577,"_15":1578,"_17":1292,"_19":19,"_20":1579,"_34":1581,"_60":1582,"_45":1737,"_47":1738,"_49":1739,"_50":51,"_54":55,"_56":884,"_58":1740,"_172":1295},1749561775412,"2dc5eb1bcc024fcca43b7644cd21d4a1","About",{"_26":1580,"_25":60,"_22":63},{"_32":33,"_30":31,"_28":29},[],{"_1222":1583,"_1218":1736,"_1220":1578,"_1216":1217},[1584,1606,1621],{"_1230":51,"_1225":1585,"_1234":1586,"_1232":79,"_62":1605,"_1216":1231},{},[1587,1591,1596,1600],{"_1239":1588,"_62":1589,"_1216":1238,"_77":1590},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F38494b4ddb7a45a78ca20d43a03176bf","Our Story","/company/our-company",{"_506":1592,"_1239":1593,"_62":1594,"_1216":1238,"_77":1595},"Leadership Icon","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F33845c53ebd4472b9806d7a76b742616","Leadership","/company/leadership",{"_1239":1597,"_62":1598,"_1216":1238,"_77":1599},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F3a5e883de76c4f5686d64a1dc0dbe7b6","Latest News","/company/press",{"_506":1601,"_1239":1602,"_62":1603,"_1216":1238,"_77":1604},"Awards Icon","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F107b70abda5841439fca3a13a02929cf","Awards","/awards-and-accolades","About Huntress",{"_1230":51,"_1225":1607,"_1234":1608,"_62":1612,"_1216":1231},{},[1609,1614,1616],{"_506":1610,"_1239":1611,"_62":1612,"_1216":1238,"_77":1613},"Verify Icon","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F80b5a5a31d2245e49c4038e433792c22","Careers","/company/careers",{"_1239":1615,"_62":1516,"_1216":1238,"_77":1514},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F1490131472ce4b94a57df268649354a0",{"_506":1617,"_1239":1618,"_62":1619,"_1216":1238,"_77":1620},"SAT Content Icon","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F3324b3cde0b84f3b8749e3f6577c6540","Contact Us","/contact-us",{"_1348":1622,"_1262":1627,"_1230":51,"_142":79,"_1225":1733,"_1232":79,"_62":1735,"_1216":1259},{"_506":1623,"_1568":1624,"_164":1625,"_77":1626},"Key Methods Logo","_blank","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F92852707f65d412faf9ede9ade8030f1","https://cdn.builder.io/o/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F659979229f5449f28c49a65895b9d2ef?alt=media&token=e87850ca-2ec6-4625-a6d9-b2e8a487f1ad&apiKey=3eb6f92aedf74f109c7b4b0897ec39a8",{"_37":126,"_13":1628,"_128":1629,"_43":1630},"2d71ea3f63c447d7a361e21502a74e15","success-stories",{"_11":1631,"_13":1628,"_15":1632,"_17":1633,"_19":19,"_34":1634,"_45":1635,"_49":1636,"_50":51,"_54":884,"_56":884,"_58":1637,"_20":1638,"_47":1640,"_60":1641,"_172":1732},1743800825454,"Key Methods","84071192fd6043e68c9d5963be3e722b",[],{},1743803252848,[],{"_26":1639,"_25":60,"_22":63,"_387":6},{"_28":29,"_30":31,"_32":33},1762464285820,{"_506":1623,"_1642":1643,"_1644":1645,"_1670":1626,"_1671":1672,"_1673":1674,"_69":1712,"_1713":79,"_1714":1715,"_1716":1717,"_1718":1719,"_121":1720,"_72":1721,"_15":1632,"_1724":79,"_164":1725,"_426":1632,"_1726":1727,"_1704":1728,"_1729":1730,"_140":1731},"companyLocation","Wenatchee, WA","mainContent",{"_1646":1647},"section",[1648,1652,1654,1656,1658,1661,1663,1666,1668],{"_1649":1650,"_1651":63},"columnOne","

Prologue | Key Methods’ history with Huntress

Key Methods first tried Huntress in 2022. They rolled out Huntress Managed Endpoint Detection and Response (EDR) across all their clients for a month, but they scaled back when no major security issues popped up. Instead, they took a more selective approach, using it only when they spotted something suspicious or during new client onboarding.
\n

","columnTwo",{"_1651":63,"_1649":1653},"

Incident one | Managed EDR quickly shuts down a threat

In 2023, Huntress Managed EDR came in handy, flagging suspicious activity inside a client’s network. This wasn’t just any client, however. It was a company handling vast sums of money and a treasure trove of personal data. In other words, a prime target for hackers.

Huntress’ Security Operations Center (SOC) stepped in quickly, working hand-in-hand with Key Methods. In no time, endpoints were isolated, access was shut down, and the threat was contained.

Crisis averted.

…or so it seemed.

",{"_1649":1655,"_1651":63},"

Post-incident | The decision no MSP wants to make

The real challenge started after the immediate threat was handled. Key Methods was left with critical questions that would inform their next steps.

“All we knew was the attackers had possibly seen things they shouldn’t have,” says Dan Paquette, Managing Partner at Key Methods.

The entire Key Methods team was on edge, haunted by questions like, “How did the hackers get in?” “What data was compromised?” “Could they still be in the system?”

With little in terms of logs or data to go on, they had to make the call no MSP ever wants to make—shut everything down.

",{"_1649":1657,"_1651":63},"

Before Huntress Managed SIEM | Playing a costly game of guesswork

The impact was huge. The client faced over a week of downtime, more than $75,000 on incident response (IR) and legal fees, and uncertainty about their future.

“It felt like forever to get the client back online,” Paquette admits. “There were so many unknowns. We were digging through user logs, piecing together backward forensics, but our records only went back so far.”

In the end, it turned out the hacker hadn’t actually stolen any data. Using only screenshots and trickery, they’d pulled off a convincing illusion of a full database breach, leaving the client believing the worst. No data was lost, but the financial and operational toll was massive.

This was a wake-up call for Key Methods. They realized they needed more than just the ability to detect and respond to threats. They needed clear, immediate answers, especially when it mattered most.

",{"_1651":1659,"_1649":1660},"

Incident two | Managed SIEM reveals all

Not long after the incident, Huntress launched Managed Security Information and Event Management (SIEM). Key Methods jumped on board, determined to avoid ever being uncertain again. While still fine-tuning when another mass-isolation event hit, the difference was obvious.

This time, a hacker exploited a vulnerability in a client’s firewall. In the past, critical decisions had to be made in real time about whether to call in IR teams, consult legal, or notify cyber insurance. Without solid data, every decision felt like a gamble—overreacting meant wasting time and money, but hesitating could spell disaster.

With Huntress Managed SIEM in place, everything changed. Put simply, there was no more guessing. The system didn’t just flag threats—it connected the dots. Every log, every move, every breadcrumb the attacker left behind was laid out clearly.

With new technology and capabilities at their fingertips, Key Methods had complete clarity to act fast and make the right calls.

","

“Managed SIEM provides us with immediate, actionable insights, so we’re never left guessing during critical moments.”

",{"_1649":1662,"_1651":63},"

Unraveling the incident | The Huntress SOC paints a clear picture

The Huntress SOC quickly collaborated with Key Methods, providing clarity within hours. Detailed logs revealed the timeline of events and exactly where the attackers had been.

“Thanks to Managed SIEM, we had critical information fast,” said Paquette. “We reviewed the logs and immediately recognized the severity of the issue, allowing us to involve IR and legal teams quickly”

With Managed SIEM’s robust logging capabilities, Key Methods easily exported accurate, reliable data to the IR firm. “There was no question about the quality or authenticity of the logs,” Paquette noted. This significantly accelerated the investigation and led to a crucial finding: no data had been exfiltrated.

“Smaller MSPs like us usually don’t have a SOC,” Paquette explained. “With breaches in the past, we had to bring in an external team, install their tools, and wait for results. This time around, Managed SIEM handled it all. We told the SOC what we needed, ran a quick query, and immediately got clear answers like, ‘No, that executable wasn’t run anywhere else in the organization.’”

With vital insight, Key Methods swiftly shifted their focus to recovery. By isolating affected systems on day one, they could begin restoration efforts right away.

",{"_1651":1664,"_1649":1665},"

“The SOC analyzed every executable across all machines and confidently pinpointed exactly which devices the hackers had compromised. Having access to such precise, actionable information is incredibly powerful.”

","

Incident three | Managed SIEM wins the race against downtime

Weeks later, another mass-isolation event unfolded, this time targeting a bustling factory—a place where assembly lines hum, conveyor belts zip, and products are packaged with non-stop precision. A place where every minute of downtime risked thousands of dollars in lost revenue.

Again, an attacker exploited a vulnerability in the client’s firewall. But this time, there was no panic.

“We got on the phone with Huntress, and a SOC analyst immediately understood the situation,” recalls Paquette. “Within hours, we identified the issue and had already begun restoring operations. This time, legal or IR teams weren’t even needed.”

Armed with real-time intelligence from the Huntress SOC and Managed SIEM, Key Methods knew the attack’s origin with unparalleled speed. The factory was back online the same day.

“The SOC analyzed every executable across all machines and confidently pinpointed exactly which devices the hackers had compromised,” Paquette explains. “Having access to such precise, actionable information is incredibly powerful.”

What could’ve been a financially devastating shutdown was a masterclass in resilience.

",{"_1651":63,"_1649":1667},"

The power of Managed SIEM | Achieving true confidence, clarity, and control

For Key Methods, Managed SIEM brought unprecedented clarity, control, and responsiveness to their operations. With Huntress Managed SIEM, they can:

Respond to incidents in hours instead of days
Minimize client downtime and significantly cut recovery costs
Protect clients from escalating threats while avoiding unnecessary legal or forensic complications
Make decisive, high-stakes calls with confidence because they’re armed with clear insights on what happened, how it happened, and what data was affected

“It’s all about confidence and clarity,” says Paquette. “Managed SIEM provides us with immediate, actionable insights, so we’re never left guessing during critical moments.”

",{"_1651":63,"_1649":1669},"

Why Key Methods is all-in on Huntress

From day one, Huntress Managed SIEM proved its worth by helping Key Methods contain threats faster, reduce downtime, and avoid unnecessary third-party headaches. While hackers rely on staying hidden, Managed SIEM gave Key Methods complete clarity into their malicious ways.

While Managed EDR wasn’t initially a priority, it didn’t take long for Key Methods to see the power of the entire Huntress platform. Now, they’ve expanded further to make Identity Threat Detection and Response (ITDR) and Security Awareness Training (SAT) part of their offerings. Instead of treating them as optional extras, they’ve baked them into their core service plans.

What really sets Huntress apart is the technology, which is purpose-built for the Huntress SOC. This tight integration of proprietary tools and human expertise creates a defense system that radically cuts down on errors, response times, and risks.

“When your primary security layers are all unified in one platform, it’s easier to build depth with a vendor,” says Paquette. “And when everything feeds into the same SOC, it’s even better.”

","caseStudyPdfUrl","companyContactName","Dan Paquette","products",[1675,1695],{"_1676":1677},"product",{"_37":126,"_13":1678,"_128":1673,"_43":1679},"671c067f6144c945bfc997d2",{"_11":1680,"_13":1678,"_15":1254,"_17":1681,"_19":19,"_20":1682,"_34":1684,"_60":1685,"_45":1691,"_47":1692,"_49":1680,"_50":51,"_54":55,"_56":55,"_58":1693,"_172":1694},1736141572401,"017139400da04b248757ac73dd38eaff",{"_22":63,"_26":1683,"_25":60},{"_28":29,"_30":31,"_32":33},[],{"_164":1686,"_1687":79,"_1688":1254,"_15":1254,"_506":1689,"_1690":1256},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F284f4bc395cf4c38ae88bfc6f9669fe3","active","shortName","Overwhelming Data Becoming Simplified with SIEM","referenceUrl",{},1756214588904,[],"mlr2wpqnyt",{"_1676":1696},{"_37":126,"_13":1697,"_128":1673,"_43":1698},"664a2fe9c12e9dbfd3b4a0b4",{"_11":1699,"_13":1697,"_15":1242,"_17":1681,"_19":19,"_20":1700,"_34":1702,"_60":1703,"_45":1708,"_47":1709,"_49":1699,"_50":51,"_54":55,"_56":55,"_58":1710,"_172":1711},1736141572469,{"_26":1701,"_25":60,"_22":63},{"_28":29,"_30":31,"_32":33},[],{"_15":1242,"_1704":1705,"_164":1706,"_1687":79,"_506":1707,"_1688":1242,"_1690":1237},"orderDate","2024-06-04T00:00:00.000Z","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fa31d628a29d240dab4e00080df8ffba1","Man working at a desk with headphones on",{},1756214521979,[],"0c6m20yxmrh","keymethods-case-study","showAboutAnchorHyperlink","heroSubhead","How Key Methods Stopped Guessing and Took Control with Huntress Managed SIEM","introSectionDescription","

Key Methods, a top managed service provider (MSP) in Washington state, has earned a solid reputation for keeping security front and center in their business. They manage more than 2,000 endpoints and support nearly 80 clients, providing all with strong solutions to tackle the toughest threats. But as they’ve learned, when it comes to cybersecurity, it’s not just about stopping attacks—it’s also about understanding what’s really going on behind the scenes.

","heroHeadline","The MSP Who Saw It All","

Key Methods had seen their share of security incidents. But when one of their clients suffered a mass-isolation event, they realized they were flying blind. Attackers had accessed sensitive data, but without clear logs, they were left scrambling.

",{"_62":1722,"_74":1723,"_506":1623,"_64":1625}," Key Methods Case Study","Key Methods had seen their share of security incidents. But when one of their clients suffered a mass-isolation event, they realized they were flying blind. Attackers had accessed sensitive data, but without clear logs, they were left scrambling.","showPdf","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fccbc23d75b9640b69566b916ea6f832a","fullWidthQuote","

“When your primary security layers are all unified in one platform, it’s easier to build depth with a vendor. And when everything feeds into the same SOC, it’s even better.”

","Fri Oct 03 2025 00:00:00 GMT-0700 (Pacific Daylight Time)","companyAbout","

Founded in 1998 as a small IT support company, Key Methods found their niche in providing professional technology services that let their customers focus on core business competencies without worrying about their IT infrastructure.

In 2002, they shifted their focus to proactively monitor and maintain their clients’ computer networks. This new approach of focusing on “up-time” instead of waiting for “things to break” helped them grow. Today, their team consists of nearly 20 employees, serving clients around the Pacific Northwest. They look forward to pursuing their goal to be Washington State’s premier IT services company.

","https://www.huntress.com/why-huntress/case-studies/keymethods-case-study","976tjbu65k8",{"_1568":1624,"_1228":1734,"_77":1626},"Read the Study","Featured Success Story",{},{},1759958473605,1749565842074,[],"footerContent",[1743,1761,1773,1784,1796],{"_13":1744,"_15":1221,"_60":1745},"508d2fee7ccc4b62af82033c8240810d",{"_1234":1746,"_62":1221},[1747,1749,1750,1753,1756,1757,1758,1759],{"_1748":1233,"_77":1227},"linkText",{"_1748":1242,"_77":1237},{"_1748":1751,"_77":1752},"Managed EDR for macOS","/platform/managed-edr-for-macos",{"_1748":1754,"_1568":1569,"_77":1755},"Managed EDR for Linux","/platform/managed-edr-for-linux",{"_1748":1252,"_77":1251},{"_1748":1254,"_77":1256},{"_1748":1246,"_77":1247},{"_1748":1760,"_77":1272},"Book a Demo",{"_13":1762,"_15":1299,"_60":1763},"48e36f6d9651423da2291512cdde8b9e",{"_62":1299,"_1234":1764},[1765,1766,1767,1768,1769,1770,1771,1772],{"_1748":1312,"_77":1310},{"_1748":1316,"_77":1314},{"_1748":1320,"_77":1319},{"_77":1326,"_1748":1327},{"_1748":1329,"_77":1330},{"_77":1333,"_1748":1334},{"_77":1338,"_1748":1339},{"_1748":1342,"_77":1341},{"_13":1774,"_15":1775,"_60":1776},"eaae2a88df264ce8987bc9b7803d090a","Why Huntress?",{"_1234":1777,"_62":1775},[1778,1779,1780,1781,1783],{"_1748":1423,"_77":1424},{"_1748":1428,"_77":1429},{"_1748":1432,"_77":1433},{"_1748":1782,"_77":1442},"24/7 SOC",{"_1748":1445,"_77":1446},{"_13":1785,"_15":1482,"_60":1786},"7c53b226c0d14e18856978d679c98b2a",{"_62":1482,"_1234":1787},[1788,1789,1790,1793,1794],{"_1748":16,"_77":44},{"_1748":1486,"_77":1508},{"_1748":1791,"_77":1792,"_1568":1569},"Cybersecurity 101","/cybersecurity-education/cybersecurity-101",{"_77":1514,"_1748":1516},{"_1568":1624,"_77":1519,"_1748":1518,"_1795":79},"nofollow",{"_13":1797,"_15":1578,"_60":1798},"c211d3560ba74bc9a088ee63b66293ab",{"_62":1578,"_1234":1799},[1800,1802,1803,1805,1806],{"_1748":1801,"_77":1590},"Our Company",{"_1748":1594,"_77":1595},{"_1748":1804,"_77":1599},"News & Press",{"_1748":1612,"_77":1613},{"_1748":1619,"_77":1620},"g2Awards",[1809,1828,1845,1860],{"_13":1810,"_15":1811,"_60":1812},"b1ef1fa50cc44b4cb964fcd76ce27c47","Managed SAT Awards",{"_160":1813,"_1814":1815},"Managed SAT","images",[1816,1819,1822,1825],{"_204":1817,"_506":1818},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fae2a45c9194b4f34a7f4ad7f4ab87759","Summer 2025 Momentum Leader G2 Badge",{"_204":1820,"_506":1821},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F6b92a475a7bb4bd58eafba51d5693bc1","Summer 2025 Regional Leader Canada G2 Badge",{"_506":1823,"_204":1824},"Summer 2025 Grid Leader Small Business G2 Badge","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fc616b18ae24d4749a8c402a04f41a674",{"_204":1826,"_506":1827},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F050a3943be914e71917c1908f00a0c7a","Summer 2025 Regional Leader Europe Small Business G2 Badge",{"_13":1829,"_15":1830,"_60":1831},"a15035cbedea4437bf339e54f6573731","Managed ITDR Awards",{"_160":1252,"_1814":1832},[1833,1836,1839,1842],{"_204":1834,"_506":1835},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fbda7bf46f087452fb892ff33fa6566dd","Summer 2025 Grid Leader G2 Badge",{"_204":1837,"_506":1838},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fc2d494c6fd22444b889a68493352a4ce","Summer 2025 Best Est. ROI G2 Badge",{"_204":1840,"_506":1841},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ffea26f9142474c28b652246476967941","Summer 2025 High Performer G2 Badge",{"_204":1843,"_506":1844},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F83234adbb34d4cae9ed74a8a59e510ad","Summer 2025 Best Relationship G2 Badge",{"_13":1846,"_15":1847,"_60":1848},"f4f2c8064b7e4e92b01a3c95a41dde18","Managed EDR Awards",{"_1814":1849,"_160":1242},[1850,1852,1855,1857],{"_204":1851,"_506":1835},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fa89433591dea43aea06993ea9a932bc0",{"_204":1853,"_506":1854},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F9bc7e0583c1e4f8a8c9a95d8a9eb0136","Summer 2025 Best Results G2 Badge",{"_506":1841,"_204":1856},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fec99ed68cdf14c32991363ad838df7df",{"_506":1858,"_204":1859},"Summer 2025 Best Support Enterprise G2 Badge","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F86c5949a7494413f90457a01724a5554",{"_13":1861,"_15":1862,"_60":1863},"9b043f11647d490c8780d9136cf88b34","Default G2 Awards",{"_1814":1864,"_160":1869},[1865,1866,1867,1868],{"_506":1835,"_204":1851},{"_506":1854,"_204":1853},{"_204":1856,"_506":1841},{"_506":1858,"_204":1859},"default","assetTypes",[1872,1875,1878,1881,1884,1887,1890,1891,1894,1897],{"_13":1873,"_15":1874},"32a84769b6034b46858d0522418934d4","Checklist",{"_13":1876,"_15":1877},"65f3299e49a461b4b9c72e3c","Datasheet",{"_13":1879,"_15":1880},"65f3299e49a461b4b9c72e3e","Handbook",{"_13":1882,"_15":1883},"cec58da7fbc24a4e89cc0448374ffda9","Inforgraphic",{"_13":1885,"_15":1886},"65f3299e49a461b4b9c72e39","On-Demand Webinar",{"_13":1888,"_15":1889},"65f3299e49a461b4b9c72e38","Report",{"_13":1394,"_15":1397},{"_13":1892,"_15":1893},"65f3299e49a461b4b9c72e3d","Video",{"_13":1895,"_15":1896},"65f3299e49a461b4b9c72e3b","Whitepaper",{"_13":1898,"_15":1899},"65f3299e49a461b4b9c72e3a","eBook","actionData","errors"]