[{"_1":2,"_1779":-5,"_1780":-5},"loaderData",{"_3":4,"_7":8},"root",{"_5":6},"preprod",false,"routes/blog._index",{"_9":10,"_157":255,"_273":274,"_335":336,"_337":338,"_1156":1157,"_1158":51,"_1159":1160,"_1161":1162},"page",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":19,"_20":21,"_34":35,"_45":46,"_47":48,"_49":12,"_50":51,"_52":53,"_54":55,"_56":57,"_58":59,"_60":61,"_172":252,"_253":254},"createdDate",1737878647415,"id","65f3299e49a461b4b9c7296a","name","Blog","modelId","3fa669f9656b425bbe84446dd9c5a7cd","published","meta",{"_22":23,"_24":6,"_25":9,"_26":27},"lastPreviewUrl","https://prod.huntress.com/blog?builder.space=3eb6f92aedf74f109c7b4b0897ec39a8&builder.user.permissions=read%2Ccreate%2Cpublish%2CeditCode%2CeditDesigns%2Cadmin%2CeditLayouts%2CeditLayers%2CeditContentPriority&builder.user.role.name=Admin&builder.user.role.id=admin&builder.cachebust=true&builder.preview=page&builder.noCache=true&builder.allowTextEdit=true&__builder_editing__=true&builder.overrides.page=65f3299e49a461b4b9c7296a&builder.overrides.65f3299e49a461b4b9c7296a=65f3299e49a461b4b9c7296a&builder.overrides.page:/blog=65f3299e49a461b4b9c7296a&builder.options.includeRefs=true&builder.options.enrich=true&builder.options.locale=Default","hasLinks","kind","breakpoints",{"_28":29,"_30":31,"_32":33},"xsmall",479,"small",767,"medium",991,"query",[36],{"_37":38,"_39":40,"_41":42,"_43":44},"@type","@builder.io/core:Query","property","urlPath","operator","is","value","/blog","variations",{},"lastUpdated",1747062560084,"firstPublished","testRatio",1,"screenshot","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fb7f93b4988dd4be9b2f279c5db6b8eda","createdBy","Kz459QsZDzNpORbTSiA9L6WRQc23","lastUpdatedBy","XBN8lOXr7QMH6JvQimte3OCtO6c2","folders",[],"data",{"_62":63,"_64":65,"_66":67,"_68":63,"_69":70,"_71":63,"_72":73,"_77":44,"_74":63,"_78":79,"_80":81,"_82":83,"_84":85,"_100":101,"_243":244},"title","","openGraphImage","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F28e05784f2584d25824e4b27c802f97a","openGraphDescription","Cybersecurity is dynamic and ever-changing. Stay up-to-date with the latest information about cyber threats, vulnerabilities, and news on the Huntress blog.","metaDescription","slug","blog","titleTag","metadata",{"_74":67,"_64":75,"_62":76},"description","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F78060584ce444ba5a726170f7951a8ec","Huntress Blog","url","sitemapIndexing",true,"openGraphTitle","Huntress Blog | Huntress","contentTagCategories","DEPRECATED","contentTags",{"_86":87,"_88":89,"_90":91,"_92":93,"_94":95,"_96":97,"_98":99},"funnelStageTags",[],"regionTags",[],"aiGeneratedContentTags",[],"audienceTags",[],"industryTags",[],"productTags",[],"repurposedContentTags",[],"blocks",[102,188,197,220],{"_37":103,"_104":105,"_13":106,"_107":108,"_174":175},"@builder.io/sdk:Element","@version",2,"builder-4304305f148848f68b3ca6d6c71746ce","component",{"_15":109,"_110":111},"BlogFeatureBannerSection","options",{"_112":113,"_120":76,"_121":122,"_123":79,"_124":125},"breadcrumbs",[114,119],{"_115":116,"_117":118},"levelText","Home","levelLinkUrl","/",{"_115":16},"heading","summary","

Welcome to the Huntress Cybersecurity Blog, your go-to spot for staying ahead of\n hackers and boosting your cybersecurity savviness. Our\n blog contributors have focused on\n making cybersecurity education engaging and accessible for everyone.

","showFeaturedBlog","featuredBlog",{"_37":126,"_13":127,"_128":129,"_43":130},"@builder.io/core:Reference","67a67e43a1912da0aa6bde9c","model","blog-posts",{"_34":131,"_58":132,"_11":133,"_13":127,"_15":134,"_17":135,"_19":19,"_20":136,"_60":138,"_45":170,"_47":171,"_49":133,"_50":51,"_54":55,"_56":55,"_172":173},[],[],1742717076617,"Huntress 2025 Cyber Threat Report: Proliferating RATs, Evolving Ransomware, and Other Findings","beafe50240af45639f2b59e6aefd89f9",{"_26":137,"_22":63,"_25":60},{"_28":29,"_30":31,"_32":33},{"_139":-5,"_15":134,"_140":141,"_142":79,"_72":143,"_148":149,"_155":156,"_157":158,"_164":165,"_69":166,"_167":168,"_121":169},"lastUpdatedDate","canonicalUrl","https://www.huntress.com/blog/huntress-2025-cyber-threat-report-proliferating-rats-evolving-ransomware-and-other-findings","featured",{"_144":6,"_62":145,"_146":6,"_74":147},"noFollow","2025 Cybersecurity Threat Report: Proliferating RATs, Evolving Ransomware, and Other Findings | Huntress","noIndex","Huntress’ 2025 Cyber Threat Report is here! Explore the year's biggest threats—RATs, phishing, ransomware—and how evolving tactics demand smarter defense.","authors",[150],{"_151":152},"author",{"_37":126,"_13":153,"_128":154},"66048598851912ddf28adf1a","people","publishDate","2025-02-11T00:00:00.000Z","categories",[159],{"_160":161},"category",{"_37":126,"_13":162,"_128":163},"65f3299e49a461b4b9c72e4d","blog-categories","thumbnail","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ffc25dbb530b84cb79bc232519d83b123?format=webp","huntress-2025-cyber-threat-report-proliferating-rats-evolving-ransomware-and-other-findings","content","

At Huntress, we like to wreck hackers. But to take them down, we first have to understand how they operate. That’s why we created the 2025 Cyber Threat Report—an in-depth exploration of the nasty tactics, trends, and techniques reshaping cybersecurity today.

Here, we highlight key findings from the past year, offering a snapshot of the malicious strategies our analysts uncovered. Whether you’re an IT professional, cybersecurity practitioner, or business owner, these insights can provide actionable guidance to help you stay one step ahead of ever-evolving cyber threats.

Top takeaways from the 2025 Cyber Threat Report

Throughout 2024, Huntress' threat analysts looked at data from thousands of organizations and millions of endpoints, revealing the key trends that show how adaptable and relentless today’s malicious hackers are.

Remote access trojans (RATs) are more popular: Over 75% of remote access incidents utilized RATs such as AsyncRAT and Jupyter. These tools are becoming more sophisticated, making multilayered defenses like endpoint detection and response (EDR) essential.
Remote monitoring and management (RMM) tools are being exploited. Attackers are weaponizing legitimate software like TeamViewer and LogMeIn to facilitate lateral movement and maintain long-term access to systems. For environments that use RMM tools, we highly suggest increasing vigilance, enhancing access controls, and closely monitoring your tools.
Ransomware strategies are evolving: Attacks are shifting from traditional encryption to data theft and extortion. Groups like RansomHub and Akira now incentivize stolen data with big rewards, making these tactics quite lucrative. The future may see ransomware operators leaning even more into extortion (or double extortion) strategies—a trend driven by the efficacy of EDR solutions and mounting pressure from government takedown efforts.
“Living off the land” techniques are on the rise: Threat actors are doubling down on using legitimate tools like Sysinternals Suite and LOLBins to evade detection. Organizations must remove unnecessary software and enforce strict execution policies to mitigate this threat.
Phishing tactics are becoming more advanced: From QR code phishing to brand impersonation, threat actors are deploying clever methods to outsmart traditional email security. Improving security awareness training and implementing layered defenses are more essential than ever to counter these sophisticated techniques.

How these trends took shape in 2024

The findings from our 2025 Cyber Threat Report are grounded in real-world data with a comprehensive view of how malicious hackers operate today. Our threat analysts observed patterns across industries like healthcare, education, government, and manufacturing, and these growing trends stood out:

Infostealers are gaining momentum: Nearly 24% of incidents involved infostealers designed to extract sensitive credentials, financial data, and other private information.
Malicious scripts are surging: Scripts made up 22% of detected attacks, using PowerShell, VBScript, and JavaScript to perform stealthy, efficient attacks.
Ransomware is fragmenting: Despite takedowns of large groups like Hive and LockBit, smaller, flexible affiliates have risen to fill the gap. Unfortunately, this led to more unpredictable, widespread attacks.

\"Industries — Industries targeted by percentage

Why these findings matter

The 2024 cybersecurity landscape exposes a simple yet alarming truth: threat actors aren’t slowing down. Because hackers' tactics and tools are evolving, you must take a proactive approach that prioritizes awareness, preparation, and consistent upgrades to defense strategies.

Understanding the tactics outlined in this report is the first essential step. By educating your teams, using multiple layers of security, and staying informed about emerging risks, you and your organization will be ready to take on any challenges that come your way.

\"Huntress — *Huntress 2025 Cyber Threat Report*

Get more from the report and stay one step ahead

The insights from our 2025 Cyber Threat Report spotlight the critical need to stay ahead of malicious hackers. With tools like RMM software and phishing techniques becoming more advanced, protecting data, systems, and users is an ongoing battle—but one you can win.

While there’s no one-size-fits-all solution, embracing layered defenses, removing unnecessary vulnerabilities, and training your team to spot threats are actionable steps everyone should take right now.

Download the entire 2025 Cyber Threat Report to gain a deeper understanding of these trends and learn more strategies for keeping your organization safe.

","

",{},1744303952880,"rev","oxpzmdz30r","responsiveStyles",{"_176":177},"large",{"_178":179,"_180":181,"_182":183,"_184":185,"_186":187},"display","flex","flexDirection","column","position","relative","flexShrink","0","boxSizing","border-box",{"_37":103,"_104":105,"_13":189,"_107":190,"_174":195},"builder-4c139472c097464e87c1ec73f00f7381",{"_15":191,"_110":192},"BlogListSection",{"_193":194},"pageSize",15,{"_176":196},{"_178":179,"_180":181,"_182":183,"_184":185,"_186":187},{"_37":103,"_104":105,"_13":198,"_107":199,"_174":218},"builder-09dcd692cdf94623b83c105f1fac9802",{"_15":200,"_110":201},"BlogSignupSection",{"_120":202,"_121":203,"_204":205,"_206":207},"Sign Up for Huntress Updates","Get insider access to Huntress tradecraft, killer events, and the freshest blog updates.","image","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fcb5efa5143804ba59d530a903d29fe5f","blogSignupForm",{"_208":209,"_210":6,"_211":212,"_213":214,"_215":6,"_216":6,"_217":6},"formId","wf-form-Blog-Signup-Form","showFormTitle","submitButtonText","Submit","hubspotFormId","5198e52f-a296-4d78-935d-fe864d69a67a","showBlueGreenGradient","showBluePurpleGradient","useNeverBounce",{"_176":219},{"_178":179,"_180":181,"_182":183,"_184":185,"_186":187},{"_13":221,"_37":103,"_222":223,"_224":225,"_174":235},"builder-pixel-231ppwcxrmi","tagName","img","properties",{"_226":227,"_228":229,"_230":63,"_231":232,"_233":185,"_234":185},"src","https://cdn.builder.io/api/v1/pixel?apiKey=3eb6f92aedf74f109c7b4b0897ec39a8","aria-hidden","true","alt","role","presentation","width","height",{"_176":236},{"_234":185,"_233":185,"_178":237,"_238":185,"_239":240,"_241":242},"inline-block","opacity","overflow","hidden","pointerEvents","none","state",{"_245":176,"_246":247},"deviceSize","location",{"_248":44,"_249":250,"_34":251},"pathname","path",[70],{},"thmgdt7fbzs","template","huntress",[256,259,261,264,267,270],{"_13":257,"_15":258},"65f3299e49a461b4b9c72e33","Business Growth",{"_13":162,"_15":260},"Cybersecurity Education",{"_13":262,"_15":263},"65f3299e49a461b4b9c72e34","Cybersecurity Trends",{"_13":265,"_15":266},"65f3299e49a461b4b9c72e8a","Huntress News",{"_13":268,"_15":269},"65f3299e49a461b4b9c72e32","Response to Incidents",{"_13":271,"_15":272},"65f3299e49a461b4b9c72e31","Threat Analysis","featuredBlogPost",{"_13":275,"_15":276,"_60":277},"65f3299e49a461b4b9c7292a","Navigating the SMB Threat Landscape: Key Insights from Huntress’ SMB Threat Report",{"_69":278,"_164":279,"_157":280,"_155":307,"_139":-5,"_148":308,"_142":79},"navigating-the-smb-threat-landscape-key-insights-from-huntress-smb-threat-report","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F25d75ed735a34023a4e0b3e874210f25",[281,295],{"_160":282},{"_37":126,"_13":162,"_128":163,"_43":283},{"_13":162,"_15":260,"_19":19,"_11":284,"_17":285,"_60":286,"_172":294},1739997399371,"b7b51689bde4424484bccde4b9ee6d6b",{"_15":260,"_69":287,"_72":288,"_291":289,"_68":290,"_140":292,"_74":293},"cybersecurity-education",{"_62":289,"_74":290},"Cybersecurity Education Blog Posts | Huntress","Read more about Cybersecurity Education in these Huntress blog posts. ","metaTitle","https://www.huntress.com/blog-categories/cybersecurity-education","

Cybersecurity education should be accessible and actionable, not jargony. Welcome to your hub for mastering the fundamentals and beyond. Get education and advice from our experts to deepen your knowledge and stay ahead of cyber threats—made for all levels.

","ipgselvoar",{"_160":296},{"_37":126,"_13":262,"_128":163,"_43":297},{"_13":262,"_15":263,"_19":19,"_11":298,"_17":285,"_60":299,"_172":306},1739997399701,{"_15":263,"_69":300,"_72":301,"_291":302,"_68":303,"_140":304,"_74":305},"cybersecurity-trends",{"_62":302,"_74":303},"Cybersecurity Trends Blog Posts | Huntress","Read more about Cybersecurity Trends in these Huntress blog posts. ","https://www.huntress.com/blog-categories/cybersecurity-trends","

Stay a step ahead with insights into the latest developments shaping the cybersecurity landscape. From emerging threats to breakthrough technologies, we analyze how these trends impact your security strategy so you can adapt your defenses accordingly.

","y0k1vz798nr","November 21, 2023",[309],{"_151":310},{"_37":126,"_13":153,"_128":154,"_43":311},{"_13":153,"_15":312,"_19":19,"_11":313,"_17":314,"_60":315,"_172":334},"Team Huntress",1742719371598,"d50b5ec346a64579b280b4104dca236e",{"_15":312,"_69":316,"_72":317,"_320":321,"_322":-5,"_323":324,"_325":326},"team-huntress",{"_62":318,"_74":319,"_146":6,"_144":6},"Team Huntress | Huntress","Read blog posts written by the amazing Huntress team on the Huntress Blog.","profileImage","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F94d27b5ca67c40d698b6b9f3f52bc4dc","profileImageAltText","bioDetail","

These resources have been written by some of the fantastic experts on our team. And if they’re at Huntress they’re probably ethical badasses who enjoy working every day to protect small and medium-sized businesses.

Our authors often come from backgrounds in gaming, tech innovation, IT, military intelligence, and a mix of unrelated but awesome careers like teaching, baking, music, law, and graphic design, just to name a few.

We’re a diverse team of pros who love hunting down threats, identifying trends, and writing about what we’re seeing so that everyone can benefit.

Meet more Huntress authors here.

‍

","groups",[327,331],{"_328":329},"group",{"_37":126,"_13":330,"_128":325},"00d1d80145b14a6b87c45567b169a8f4",{"_328":332},{"_37":126,"_13":333,"_128":325},"babc0d8823f34ab894a4431d5b302dc7","0poer1xq8f4","builderApiKey","3eb6f92aedf74f109c7b4b0897ec39a8","blogPosts",[339,467,511,552,597,626,668,743,787,879,914,984,1014,1098,1126],{"_13":340,"_15":341,"_60":342},"882a2b559cb3430f8e4c81b0d0ede76f","Wing FTP Server Remote Code Execution (CVE-2025-47812) Exploited in the Wild",{"_69":343,"_164":344,"_157":345,"_155":358,"_148":359,"_139":-5,"_465":466},"wing-ftp-server-remote-code-execution-cve-2025-47812-exploited-in-wild","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F8a6eedfd67be41baaa687ee2943c94cc",[346],{"_160":347},{"_37":126,"_13":271,"_128":163,"_43":348},{"_13":271,"_15":272,"_19":19,"_11":349,"_17":285,"_60":350,"_172":357},1739997400726,{"_15":272,"_69":351,"_72":352,"_291":353,"_68":354,"_140":355,"_74":356},"threat-analysis",{"_62":353,"_74":354},"Threat Analysis Blog Posts | Huntress","Read our Threat Analyses in these Huntress blog posts. ","https://www.huntress.com/blog-categories/threat-analysis","

Dive in and nerd out with us on current and emerging cybersecurity threats. We cover attack vectors, threat actors, and new vulnerabilities, providing insights to help you understand and counteract these risks.

","3wp7j9nvvot","July 10, 2025",[360,389,410,444],{"_151":361},{"_37":126,"_13":362,"_128":154,"_43":363},"66048bf51de5bd420f2f2608",{"_13":362,"_15":364,"_19":19,"_11":365,"_17":314,"_60":366,"_172":388},"John Hammond",1742719359732,{"_15":364,"_69":367,"_72":368,"_320":371,"_322":-5,"_372":373,"_323":374,"_375":376,"_377":378,"_379":380,"_381":382,"_325":383},"john-hammond",{"_62":369,"_74":370,"_146":6,"_144":6},"John Hammond - Principal Security Researcher | Huntress","Read blog posts from John Hammond on the Huntress Blog.","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F0ebcc8e098b842e3b6c5d44ae153b485","jobTitle","Principal Security Researcher","

Capturing flags, thwarting threats, and making cybersecurity accessible one endpoint at a time.

John Hammond, a Principal Security Researcher at Huntress, discovered his passion for cybersecurity as an undergraduate at the US Coast Guard Academy, where competing in a “Cyberstakes” capture the flag event opened his eyes to vulnerabilities, exploits, and hacker tradecraft. At Huntress, he focuses on endpoint security, digging into living-off-the-land techniques and obfuscated scripting payloads.

With a stack of certifications—including LFCS, PCAP, CompTIA Security+, CEH, eJPT, eCPPT, OSCP, OSCE (classic and 3), OSWP, OSEP, OSED, and OSWE—John brings serious technical prowess to the team. He’s honored to have received the RITA Award at Wild West Hacking Fest from Black Hills Information Security, and he credits the supportive, mission-driven environment at Huntress for enabling him to do meaningful work.

John is also an active voice in the community, sharing his experience through these Huntress on-demand webinars:

Before joining Huntress, John served as an instructor and curriculum developer with the Department of Defense Cyber Crime Center and Cyber Training Academy, and later as a Red Team Cyber Operator at the Defense Threat Reduction Agency.

His top cybersecurity tip is a simple one: “Use a password manager—seriously!!”

Outside of work, John loves spending time with his family and taking the rest he needs to stay sharp. He also shares his life with two dogs, Bam Bam and Pebbles—named after the beloved Flintstones characters, of course.

Give John a follow on his socials:

‍

","companyName","Huntress","linkedInUrl","https://www.linkedin.com/in/johnhammond010/","instagramUrl","https://www.instagram.com/_johnhammond/","xTwitterUrl","https://twitter.com/_johnhammond",[384,386],{"_328":385},{"_37":126,"_13":330,"_128":325},{"_328":387},{"_37":126,"_13":333,"_128":325},"w921vz4a49",{"_151":390},{"_37":126,"_13":391,"_128":154,"_43":392},"66048bf7c9e8c5c4746884a7",{"_13":391,"_15":393,"_19":19,"_11":394,"_17":314,"_60":395,"_172":409},"Jamie Levy",1742719352103,{"_15":393,"_69":396,"_72":397,"_320":400,"_322":-5,"_372":401,"_323":402,"_375":376,"_377":403,"_325":404},"jamie-levy",{"_62":398,"_74":399,"_146":6,"_144":6},"Jamie Levy | Huntress","Read blog posts from Jamie Levy on the Huntress Blog.","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ff466d74a8f3b4603b6f5a9662a0612c0","Director, Adversary Tactics","

Director of Adversary Tactics at Huntress.

Jamie is also a researcher, developer and board member of the Volatility Foundation. She has worked over 15 years in the digital forensics industry, conducting investigations as well as building out software solutions. Jamie is also a co-author of The Art of Memory Forensics, the first book of its kind covering various facets of how to investigate RAM artifacts.

‍

","https://www.linkedin.com/in/jlevy77/",[405,407],{"_328":406},{"_37":126,"_13":330,"_128":325},{"_328":408},{"_37":126,"_13":333,"_128":325},"9b1lq5zifzp",{"_151":411},{"_37":126,"_13":412,"_128":154,"_43":413},"7fb779bf8ddf42fda6c8463ccdf60a68",{"_34":414,"_58":415,"_11":416,"_13":412,"_15":417,"_17":314,"_19":19,"_20":418,"_60":420,"_45":438,"_47":439,"_49":440,"_50":51,"_54":441,"_56":442,"_172":443},[],[],1744385801818,"Lindsey O'Donnell-Welch",{"_25":60,"_26":419,"_22":63},{"_28":29,"_30":31,"_32":33},{"_377":421,"_69":422,"_423":424,"_320":425,"_15":417,"_375":376,"_426":427,"_72":428,"_325":430,"_434":435,"_322":436,"_372":437},"https://www.linkedin.com/in/lindsey-o-donnell-welch-abb72b4a/","lindsey-odonnell-welch","lastName","O'Donnell-Welch","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F037877a541484d86ac239373c502608a","altText","Huntress Default Headshot Image",{"_62":417,"_74":429},"Read blog posts from Lindsey O'Donnell-Welch on the Huntress Blog.",[431,433],{"_328":432},{"_37":126,"_13":330,"_128":325},{},"firstName","Lindsey ","Lindsey O'Donnell-Welch Huntress ","Staff Technical Community Engagement Writer",{},1746130339005,1744404673182,"0dThli925XPdcsMI4MRs7L7KCv22","iXHKQFXOKQUVKuxcOmpn1CWL3YQ2","r1b3x8bzoy9",{"_151":445},{"_37":126,"_13":446,"_128":154,"_43":447},"6750bc6fe52d66d8c068be13",{"_13":446,"_15":448,"_19":19,"_11":449,"_17":314,"_60":450,"_172":464},"Michael Tigges",1742719341315,{"_15":448,"_69":451,"_72":452,"_320":455,"_322":-5,"_372":456,"_323":457,"_375":376,"_381":458,"_325":459},"michael-tigges",{"_62":453,"_74":454,"_146":6,"_144":6},"Michael Tigges | Huntress","Read more blog post from Micheal Tigges on Huntress.com.","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F7dd9df5e1b134c5aad1971e3a7aa0247","Senior Security Operations Analyst","

‍Transforming curiosity into cyber defense, one line of code at a time.

Michael Tigges is a Senior Security Operations Analyst at Huntress, where he puts his passion for reverse engineering, threat detection, and partner support into practice. His interest in cybersecurity took off when he began learning Python and dissecting malware lurking in open-source software channels. Today, he holds a B.S. in Cybersecurity from the SANS Technology Institute and a host of certifications, including GPEN, GCFE, GCFA, GCIA, and GCIH.

Before joining Huntress, Michael worked in financial risk analysis for enterprise banking and served eight years of Active Duty in the U.S. Air Force munitions career field, bringing a unique blend of analytical skill, discipline, and operational insight to his role. What he loves most about Huntress is the open atmosphere: “There’s always something interesting going on to learn from,” he says, whether it’s threat intel specialists forming a cohesive threat picture, reverse engineers dissecting malware, or account managers supporting valued partners.

What’s your favorite cybersecurity tip, Michael?

“Never click promotional email links; figure out where they go and navigate yourself. When typing out that domain, you may find it doesn't say what you think it does.”

Outside of work, Michael invests his time in gaming, software engineering, and exploring open-source security projects. He also shares his insights on his personal blog (sudorem.dev) and on X: @sudo_Rem.

‍

","https://x.com/sudo_Rem",[460,462],{"_328":461},{"_37":126,"_13":330,"_128":325},{"_328":463},{"_37":126,"_13":333,"_128":325},"4g5ro2bhvn4","sortDate",["D",1752123600000],{"_13":468,"_15":469,"_60":470},"68991fa42d0f4dbbb15a37eb3d1104ad","So Fresh, So Clean: Huntress’ Top Cyber Hygiene Tips",{"_69":471,"_164":472,"_157":473,"_155":480,"_148":481,"_139":-5,"_465":510},"huntress-top-cyber-hygiene-tips","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F9f7f4e60dbc840329299feebfb112ff8",[474],{"_160":475},{"_37":126,"_13":162,"_128":163,"_43":476},{"_13":162,"_15":260,"_19":19,"_11":284,"_17":285,"_60":477,"_172":479},{"_15":260,"_69":287,"_72":478,"_291":289,"_68":290,"_140":292,"_74":293},{"_62":289,"_74":290},"vjkmx7jfcfp","July 8, 2025",[482],{"_151":483},{"_37":126,"_13":484,"_128":154,"_43":485},"132288e7391b453db19780e2d72554c2",{"_34":486,"_58":487,"_11":488,"_13":484,"_15":489,"_17":314,"_19":19,"_20":490,"_60":492,"_45":506,"_47":507,"_49":508,"_50":51,"_54":441,"_56":441,"_172":509},[],[],1744305098372,"Beth Robinson",{"_25":60,"_22":63,"_26":491},{"_28":29,"_30":31,"_32":33},{"_375":376,"_434":493,"_423":494,"_15":489,"_377":495,"_69":496,"_372":497,"_325":498,"_72":501,"_323":503,"_322":504,"_426":427,"_320":505},"Beth ","Robinson ","https://www.linkedin.com/in/elizabeth-robinson-cybersecurity/","beth-robinson","Brand Technical Writer",[499],{"_328":500},{"_37":126,"_13":330,"_128":325},{"_74":502,"_62":489},"Read blog posts from Beth Robinson on the Huntress Blog.\n","

","Beth Robinson - Huntress Brand Technical Writer ","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F9c9345e287fc4266a204586ff2736199",{},1744406326204,1744306946802,"w873ux9n6k",["D",1751950800000],{"_13":512,"_15":513,"_60":514},"9f4af24b377c4014a7159d066a7cdd74","RMMs: A Gateway for Bulk Attacks on MSP Customers, Pt. I ",{"_69":515,"_164":516,"_157":517,"_155":523,"_148":524,"_139":-5,"_465":551},"remote-monitoring-management-tools-gateway-for-attacks-on-msp-pt-1","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F1f0068feceba426ea73ba9b86227e0d1",[518],{"_160":519},{"_37":126,"_13":271,"_128":163,"_43":520},{"_13":271,"_15":272,"_19":19,"_11":349,"_17":285,"_60":521,"_172":357},{"_15":272,"_69":351,"_72":522,"_291":353,"_68":354,"_140":355,"_74":356},{"_62":353,"_74":354},"July 2, 2025",[525],{"_151":526},{"_37":126,"_13":527,"_128":154,"_43":528},"cfdeb48758ab413bbfe076dc502dd7fc",{"_34":529,"_58":530,"_11":531,"_13":527,"_15":532,"_17":314,"_19":19,"_20":533,"_60":535,"_45":547,"_47":548,"_49":549,"_50":51,"_54":441,"_56":55,"_172":550},[],[],1744404719597,"Huntress Adversary Tactics",{"_25":60,"_26":534,"_22":63},{"_28":29,"_30":31,"_32":33},{"_325":536,"_434":539,"_375":376,"_72":540,"_372":543,"_15":532,"_423":544,"_322":545,"_69":546,"_426":427,"_320":505},[537],{"_328":538},{"_37":126,"_13":330,"_128":325},"Adversary",{"_426":427,"_74":541,"_64":505,"_62":542},"Read blog posts from our Huntress Adversary Tactics Team on the Blog.","Adversary Tactics ","Adversary Tactics Team","Tactics","Huntress Adversary Tactics Team","huntress-adversary-tactics",{},1744755246163,1744405637129,"xrrmcwcxonq",["D",1751432400000],{"_13":553,"_15":554,"_60":555},"c15ce61b2ef944ccb999e6e5c1dce232","What the OpenAI Court Order Means for Cybersecurity and Privacy",{"_69":556,"_164":557,"_157":558,"_155":564,"_148":565,"_139":-5,"_465":596},"openai-court-order-cybersecurity-privacy","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F08651219615b47cc8ef33198c66ee39e",[559],{"_160":560},{"_37":126,"_13":162,"_128":163,"_43":561},{"_13":162,"_15":260,"_19":19,"_11":284,"_17":285,"_60":562,"_172":479},{"_15":260,"_69":287,"_72":563,"_291":289,"_68":290,"_140":292,"_74":293},{"_62":289,"_74":290},"July 1, 2025",[566],{"_151":567},{"_37":126,"_13":568,"_128":154,"_43":569},"6710159ba84fb8012eb879cb",{"_11":570,"_13":568,"_15":571,"_17":314,"_19":19,"_20":572,"_34":574,"_60":575,"_45":592,"_47":593,"_49":570,"_50":51,"_54":55,"_56":57,"_58":594,"_172":595},1742719342848,"Jason Marshall",{"_26":573,"_22":63,"_25":60},{"_28":29,"_30":31,"_32":33},[],{"_320":576,"_323":577,"_375":376,"_69":578,"_72":579,"_372":582,"_322":-5,"_377":583,"_325":584,"_15":571},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Faccb0d8ef6ff4e38b43d5a29de4e4ec9","

With over 25 years of driving transformative growth, Jason has been a key force behind the success of both B2B and B2C companies across diverse industries. As Chief Digital Officer at Huntress, Jason is a dynamic leader and visionary strategist who loves working with such a talented team—pushing boundaries and delivering results for a truly game-changing, kickass product.

Jason is a trailblazer in modern marketing, blending data-driven insights with a passion for digital innovation to create high-impact strategies that fuel growth and customer loyalty. He’s known for building high-performance teams that consistently exceed expectations and for scaling subscription-based, e-commerce, retail, and SaaS businesses.

Before joining Huntress, Jason's leadership powered four successful exits, revitalized two underperforming businesses and included managing P&Ls for entities ranging from internal startups to divisions generating over $750M in revenue. As the former Chief Marketing Officer and General Manager at Frontdoor, a publicly traded home services marketplace, Jason led go-to-market strategies for six corporate brands, overseeing both direct-to-consumer (DTC) and high-velocity SMB initiatives. Under his leadership, Frontdoor achieved its strongest financial performance in five years, achieving double-digit revenue and EBITDA growth, while significantly improving customer retention and satisfaction.

Find Jason on LinkedIn.

‍

","jason-marshall",{"_74":580,"_146":6,"_62":581,"_144":6},"Read more about our Chief Digital Officer, Jason Marshall, on Huntress.com.","Jason Marshall | Huntress","Chief Digital Officer","https://www.linkedin.com/in/jasonmarshallexec/",[585,587,589],{"_328":586},{"_37":126,"_13":330,"_128":325},{"_328":588},{"_37":126,"_13":333,"_128":325},{"_328":590},{"_37":126,"_13":591,"_128":325},"12d37b73dc7741cf9f31f877c1b42086",{},1747674659060,[],"e862za4fbjr",["D",1751382000000],{"_13":598,"_15":599,"_60":600},"381cd9146af74d738d197fc044ee7495","AI: Friend or Faux? A Tradecraft Tuesday Recap",{"_69":601,"_164":602,"_157":603,"_155":609,"_148":610,"_139":-5,"_465":625},"ai-friend-faux-tradecraft-tuesday-recap","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F1ae6c67adb424ad29558c280ec261b06",[604],{"_160":605},{"_37":126,"_13":162,"_128":163,"_43":606},{"_13":162,"_15":260,"_19":19,"_11":284,"_17":285,"_60":607,"_172":479},{"_15":260,"_69":287,"_72":608,"_291":289,"_68":290,"_140":292,"_74":293},{"_62":289,"_74":290},"June 30, 2025",[611],{"_151":612},{"_37":126,"_13":412,"_128":154,"_43":613},{"_34":614,"_58":615,"_11":416,"_13":412,"_15":417,"_17":314,"_19":19,"_20":616,"_60":618,"_45":624,"_47":439,"_49":440,"_50":51,"_54":441,"_56":442,"_172":443},[],[],{"_25":60,"_26":617,"_22":63},{"_28":29,"_30":31,"_32":33},{"_377":421,"_69":422,"_423":424,"_320":425,"_15":417,"_375":376,"_426":427,"_72":619,"_325":620,"_434":435,"_322":436,"_372":437},{"_62":417,"_74":429},[621,623],{"_328":622},{"_37":126,"_13":330,"_128":325},{},{},["D",1751259600000],{"_13":627,"_15":628,"_60":629},"5c2b199e01e2458cbbaec123d582fd0d","Recutting the Kerberos Diamond Ticket",{"_69":630,"_164":631,"_157":632,"_155":638,"_148":639,"_139":-5,"_465":667},"recutting-the-kerberos-diamond-ticket","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F40b868e2890449aaab56b1c0f1aadabb",[633],{"_160":634},{"_37":126,"_13":271,"_128":163,"_43":635},{"_13":271,"_15":272,"_19":19,"_11":349,"_17":285,"_60":636,"_172":357},{"_15":272,"_69":351,"_72":637,"_291":353,"_68":354,"_140":355,"_74":356},{"_62":353,"_74":354},"June 25, 2025",[640],{"_151":641},{"_37":126,"_13":642,"_128":154,"_43":643},"678696f94ba450385d993b59",{"_11":644,"_13":642,"_15":645,"_17":314,"_19":19,"_20":646,"_34":648,"_60":649,"_45":662,"_47":663,"_49":644,"_50":51,"_54":664,"_56":664,"_58":665,"_172":666},1742719338064,"Andrew Schwartz",{"_26":647,"_25":60,"_22":63},{"_28":29,"_30":31,"_32":33},[],{"_320":650,"_72":651,"_325":653,"_377":658,"_372":659,"_15":645,"_322":-5,"_375":376,"_69":660,"_381":661},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F03f65e0dd6ba45fd93072b5733785238",{"_144":6,"_74":652,"_62":652,"_146":6},"Read more blog post from Andrew Schwartz on Huntress.com.",[654,656],{"_328":655},{"_37":126,"_13":330,"_128":325},{"_328":657},{"_37":126,"_13":333,"_128":325},"https://www.linkedin.com/in/schwartzah/","Principal Detection Engineer","andrew-schwartz","https://x.com/4ndr3w6s?s=21&t=UWQUV8uXBQWsZmQwHqzMNQ",{},1748029800733,"ksrtPDlNQGhJESnopKjn4sdUP2x1",[],"41bgy1ahjdk",["D",1750827600000],{"_13":669,"_15":670,"_60":671},"0971e3d861d142e5b11d3f823bb33ede","Closing the Gap: Managed ITDR Now Supports Identity Disablement for Active Directory Synced Identities ",{"_69":672,"_164":673,"_157":674,"_155":687,"_148":688,"_139":-5,"_465":742},"managed-itdr-supports-ad-synced-identity-disablement","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F0ada21b3fe074560bda66cd93983a3c6",[675],{"_160":676},{"_37":126,"_13":265,"_128":163,"_43":677},{"_13":265,"_15":266,"_19":19,"_11":678,"_17":285,"_60":679,"_172":686},1739997399001,{"_15":266,"_69":680,"_72":681,"_291":682,"_68":683,"_140":684,"_74":685},"huntress-news",{"_62":682,"_74":683},"Huntress News - Blog | Huntress","Read more about Huntress in the News in these Huntress blog posts. ","https://www.huntress.com/blog-categories/huntress-news","

Get the latest news, updates, and announcements from the Huntress team, including product launches, company milestones, and notable achievements.

","h4rdfs13z5","June 24, 2025",[689,710],{"_151":690},{"_37":126,"_13":691,"_128":154,"_43":692},"66c4a5f5c697227629494db5",{"_13":691,"_15":693,"_19":19,"_11":694,"_17":314,"_60":695,"_172":709},"Erin Meyers",1742719344684,{"_15":693,"_69":696,"_72":697,"_320":700,"_322":-5,"_372":701,"_323":702,"_375":376,"_377":703,"_325":704},"erin-meyers",{"_62":698,"_74":699,"_146":6,"_144":6},"Erin Meyers | Huntress","Read blog posts from Erin Meyers on the Huntress Blog.","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fad7f16e4f0974641bd481e662e010d70","Principal Product Marketing Manager","

Bridging people and technology to deliver impactful cybersecurity solutions.

Erin Meyers is the Principal Product Marketing Manager at Huntress, where her passion for connecting people and technology drives her work in Managed Detection & Response (MDR) and Identity Threat Detection & Response (ITDR).

Before joining Huntress, Erin was a Senior Manager of Product Marketing for MDR and Offensive Security Services at Bitdefender, where she honed her expertise in crafting solutions tailored to evolving security challenges.

Her favorite cybersecurity tip is as straightforward as it gets: “Patch.”

Outside of work, Erin enjoys cooking, photography, yoga, and binge-watching documentaries. But nothing tops spending time with her two adorable Cavalier King Charles Spaniels, who are always by her side. Whether she’s brainstorming marketing strategies or perfecting a recipe, Erin brings the same energy and dedication to everything she does.

Learn more about Erin over at her LinkedIn page.

","https://www.linkedin.com/in/erincmeyers/",[705,707],{"_328":706},{"_37":126,"_13":330,"_128":325},{"_328":708},{"_37":126,"_13":333,"_128":325},"n8g9xd94jeh",{"_151":711},{"_37":126,"_13":712,"_128":154,"_43":713},"666b3dbc52efca5a09d2771c",{"_34":714,"_58":715,"_11":716,"_13":712,"_15":717,"_17":314,"_19":19,"_20":718,"_60":720,"_45":737,"_47":738,"_49":739,"_50":51,"_54":55,"_56":740,"_172":741},[],[],1742719347616,"Dave Kleinatland",{"_25":60,"_26":719,"_22":63},{"_28":29,"_30":31,"_32":33},{"_377":721,"_423":722,"_434":723,"_322":-5,"_375":376,"_323":724,"_69":725,"_15":717,"_325":726,"_372":731,"_72":732,"_381":735,"_320":736},"https://www.linkedin.com/in/dkleinatland/","Kleinatland","Dave","

From self-taught technologist to cybersecurity advocate for SMBs.

Dave Kleinatland began his journey in IT back in 1996, immersing himself in technology at a time when formal training was scarce. \"I'm almost entirely self-taught,\" Dave shares. \"When I got started in the late '90s, there wasn't really any formal training for 'fixing computers and networks for small businesses.' I also simply couldn't afford 'professional' or 'institutional' training.\"

Throughout his career, cybersecurity was always an important facet of Dave's roles, even if it wasn't his sole focus. In the later stages, he honed in on business continuity and disaster recovery, zeroing in on the aftermath of cyber-related events. \"This piqued my interest in preventing or reducing the effects of these incidents to make recovery times shorter,\" he explains. A class offered by Huntress became the catalyst for his career change into a cybersecurity-focused role at the company.

At Huntress, Dave primarily concentrates on two key areas: addressing the needs of Channel (MSP) Partners and integrating with their businesses and toolsets, and serving as a Subject Matter Expert for Microsoft 365-based technologies they develop. \"What I love about working for Huntress is that it gives me a larger platform to serve the SMB community,\" he says. \"You'd run into your partners at the grocery store or local restaurants and have a good rapport with them. It feels pretty good to help enable our Partners to serve their local communities.\"

Before joining Huntress, Dave was a Technical Director and Engineer at a Managed Service Provider. His diverse background includes roles as an IT director in the general contractor space, managing access control technology in the hospitality industry, integrating enterprise messaging systems in the SMB space (Microsoft Exchange), and serving as an all-around technologist for various SMBs as a consultant.

What's your favorite cybersecurity tip, Dave?

\"Don't skip the basics. A lot of what's out there focuses heavily on the latest threat du jour or the sexy nation-state attacks, but having your basics covered is by far THE single most important thing you can do to shore up your security posture. Most incidents I've worked started with some very basic simple thing that was overlooked or misconfigured.\"

Outside of work, Dave is an avid vintage computer and video game system collector, even performing component-level repairs to bring these systems back to life. He also has an affinity for '80s and '90s Japanese sports cars and enjoys working on them in his shop. Additionally, Dave serves as an emergency communications volunteer as a District Emergency Coordinator (DEC) for the Amateur Radio Emergency Service (ARES) in Louisiana, providing communications assistance for various natural disasters and community events, most notably Hurricane Katrina.

Give Dave a follow on X: @DaveKleinatland

And don’t forget to check out Dave’s LinkedIn.

‍

","dave-kleinatland",[727,729],{"_328":728},{"_37":126,"_13":330,"_128":325},{"_328":730},{"_37":126,"_13":333,"_128":325},"Principal Product Researcher",{"_74":733,"_62":734,"_146":6,"_144":6},"Read blog posts from David Kleinatland on the Huntress Blog.","Dave Kleinatland | Huntress","https://x.com/DaveKleinatland","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F926e28184dc34b59bc6a037d7fc16fcf",{},1743718497030,1742791686793,"wAnY6pD8qneav3wmIkWFzKSZXNM2","97wfppov6m",["D",1750741200000],{"_13":744,"_15":745,"_60":746},"58599c1b1d8e431d9b1998b179ff3d50","How to Build an Unstoppable Cybersecurity Team",{"_69":747,"_164":748,"_157":749,"_155":756,"_148":757,"_139":-5,"_465":786},"cybersecurity-leadership-insights","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Feb0be83142cb4ac2b0493219cf082cdb",[750],{"_160":751},{"_37":126,"_13":262,"_128":163,"_43":752},{"_13":262,"_15":263,"_19":19,"_11":298,"_17":285,"_60":753,"_172":755},{"_15":263,"_69":300,"_72":754,"_291":302,"_68":303,"_140":304,"_74":305},{"_62":302,"_74":303},"1d3wnu2yqqf","June 20, 2025",[758],{"_151":759},{"_37":126,"_13":760,"_128":154,"_43":761},"e213dc62d10b4dce8b20f3a94b791ab9",{"_17":314,"_34":762,"_13":760,"_45":763,"_11":764,"_19":19,"_54":664,"_20":765,"_56":664,"_60":767,"_47":782,"_15":771,"_58":783,"_50":51,"_49":784,"_172":785},[],{},1750171636696,{"_26":766,"_25":60,"_22":63},{"_28":29,"_32":33,"_30":31},{"_320":768,"_69":769,"_434":770,"_15":771,"_325":772,"_372":775,"_423":776,"_377":777,"_375":376,"_322":778,"_72":779},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fba0835af30194d999a5653e824f14fda","liz-harvey","Liz","Liz Harvey",[773],{"_328":774},{"_37":126,"_128":325,"_13":330},"Director, Product Research","Harvey","https://www.linkedin.com/in/lizharveycreative/","Liz Harvey Huntress",{"_74":780,"_66":781,"_62":771},"Liz Harvey | Huntress","Read blog posts from Liz Harvey on the Huntress Blog. ",1750171888743,[],1750171888734,"hvqd0tpu1",["D",1750395600000],{"_13":788,"_15":789,"_60":790},"06defac380e84e898b81488c5ddb4644","Feeling Blue(Noroff): Inside a Sophisticated DPRK Web3 Intrusion",{"_69":791,"_164":792,"_157":793,"_155":799,"_148":800,"_139":-5,"_465":878},"inside-bluenoroff-web3-intrusion-analysis","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ff93ed5f31fd34924b360c3f6c540efba",[794],{"_160":795},{"_37":126,"_13":271,"_128":163,"_43":796},{"_13":271,"_15":272,"_19":19,"_11":349,"_17":285,"_60":797,"_172":357},{"_15":272,"_69":351,"_72":798,"_291":353,"_68":354,"_140":355,"_74":356},{"_62":353,"_74":354},"June 18, 2025",[801,821,848],{"_151":802},{"_37":126,"_13":803,"_128":154,"_43":804},"662a8eb64d55ba142210c843",{"_13":803,"_15":805,"_19":19,"_11":806,"_17":314,"_60":807,"_172":820},"Alden Schmidt",1742719348297,{"_15":805,"_69":808,"_72":809,"_320":812,"_322":-5,"_372":813,"_375":376,"_377":814,"_325":815},"alden-schmidt",{"_62":810,"_74":811,"_146":6,"_144":6},"Alden Schmidt | Huntress","Read blog posts from Alden Schmidt on the Huntress Blog.","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fb864e24300dc465ba8ec3b06d5ee8718","Senior Detection Engineer","https://www.linkedin.com/in/aldenschmidt/",[816,818],{"_328":817},{"_37":126,"_13":330,"_128":325},{"_328":819},{"_37":126,"_13":333,"_128":325},"0jpo3j86480m",{"_151":822},{"_37":126,"_13":823,"_128":154,"_43":824},"66048bf8886b0ac0841ba223",{"_34":825,"_58":826,"_11":827,"_13":823,"_15":828,"_17":314,"_19":19,"_20":829,"_60":831,"_45":845,"_47":846,"_49":827,"_50":51,"_54":740,"_56":740,"_172":847},[],[],1742719349692,"Stuart Ashenbrenner",{"_26":830,"_25":60,"_22":63},{"_28":29,"_30":31,"_32":33},{"_69":832,"_15":828,"_323":833,"_375":376,"_377":834,"_381":835,"_320":836,"_372":731,"_322":-5,"_325":837,"_72":842},"stuart-ashenbrenner","

‍Turns out, Macs can get viruses. Just ask Stuart.

Stuart Ashenbrenner’s journey into cybersecurity began at The Mac Store, a small Mac repair shop in the Pacific Northwest. While helping customers troubleshoot their computers, he noticed a gap in understanding Mac security, especially with Apple's \"Macs don't get viruses\" ad campaign from the early 2000s. This sparked his interest in the niche field of Mac security, and he fell in love with it.

Specializing in macOS, Stuart has been using Macs exclusively for a decade and a half. \"I am to Windows what Michael Jordan was to baseball.”

At Huntress, Stuart cherishes the team he works with. \"I love the people I get to work alongside—they are smart, compassionate, and genuine.\"

Stuart holds a BS in Computer Science and previously worked as a macOS Detections Engineer at Jamf and a Software and Data Engineer at Bookbyte.

What's your favorite cybersecurity tip, Stuart?

“You don't need \"cleaning\" software for your Mac.”

Outside of work, Stuart has a unique background in sports broadcasting and radio, a field he spent 10 years in. He also plays the fiddle. His biggest passion, however, is being a father, which he describes as his most significant and favorite time investment. Stuart is also an avid reader, always delving into lots and lots of books.

Follow Stuart on Twitter and MacAdmins Slack at @stuartjash, read his personal cybersecurity blog at crashsecurity.io, and check out his writings on being a girl dad at Millennial Girl Dad.

‍

","https://www.linkedin.com/in/stuartashenbrenner-721b73127/","http://@stuartjash","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F6cc221a7a64d4e2a863c2377e29b1101",[838,840],{"_328":839},{"_37":126,"_13":330,"_128":325},{"_328":841},{"_37":126,"_13":333,"_128":325},{"_62":843,"_146":6,"_144":6,"_74":844},"Stuart Ashenbrenner - macOS Security Researcher | Huntress","Read blog posts from Stuart Ashenbrenner, macOS Security Researcher on the Huntress Blog.",{},1743718705530,"k6sd7fgz3l",{"_151":849},{"_37":126,"_13":850,"_128":154,"_43":851},"386a9c796c3e47778ca6e54774ba1753",{"_11":852,"_13":850,"_15":853,"_17":314,"_19":19,"_20":854,"_34":856,"_60":857,"_45":873,"_47":874,"_49":875,"_50":51,"_54":664,"_56":664,"_58":876,"_172":877},1750092932926,"Jonathan Semon",{"_22":63,"_25":60,"_26":855},{"_28":29,"_30":31,"_32":33},[],{"_69":858,"_325":859,"_377":862,"_423":863,"_320":864,"_322":865,"_372":866,"_381":867,"_434":868,"_72":869,"_375":376,"_15":853,"_323":872},"jonathan-semon",[860],{"_328":861},{"_37":126,"_13":330,"_128":325},"https://www.linkedin.com/in/jonathan-semon/","Semon","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F6e7f064cf1844ea3a77e004c00b3a34b","Jonathan Semon Huntress ","Principal Security Operations Analyst","https://x.com/JSemonSecurity","Jonathan",{"_62":870,"_74":871},"Jonathan Semon | Huntress","Read blog posts from Jonathan Semon on the Huntress Blog. ","

Jonathan Semon is a cybersecurity expert with a knack for breaking down the most complex threats and turning them into actionable insights. His passion for technology started young, when his curiosity led him to dismantle (and sometimes reassemble) anything he could get his hands on—including computers. By age 8, he was leafing through an SQL book, laying the foundation for a career defined by a relentless drive to \"hunt the hunters.\"

At Huntress, Jonathan brings hands-on expertise in threat analysis, malware dissection, and adversary tradecraft to the24/7 Security Operations Center (SOC). Tasked with identifying real-world threats and helping defenders cut through the static, his day-to-day is all about turning attacks into teachable moments for the team. Before joining Huntress, Jonathan led a Managed Detection and Response team at Sophos, where he focused on endpoint telemetry and threat actor behaviors.

Jonathan holds a Bachelor’s and Master’s in Cybersecurity and Information Assurance, along with a suite of certifications, including ISACA’s CISM and CompTIA’s CASP+. He’s also a Microsoft-certified Cybersecurity Architect.

When he’s not busy tearing apart malware, Jonathan is building something entirely different—from furniture to sustainable homesteads. He runs a small farm with chickens, goats, and even honeybees, and spends his evenings playing goalie on the ice.

Favorite Cybersecurity Tip: \"If you didn’t ask for it, don’t trust it. Always take the long way instead of clicking that shady link.\"

",{},1752070289348,1750093128058,[],"bsfrzepv5c4",["D",1750222800000],{"_13":880,"_15":881,"_60":882},"e1c2f0e56bf946bf901061fe3f57dff1","How a Proactive Account Review Uncovered Unauthorized Surveillance Tools",{"_69":883,"_164":884,"_157":885,"_155":891,"_148":892,"_139":-5,"_465":913},"how-proactive-account-review-uncovered-unauthorized-surveillance-tools","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F1d6eb83f122b437985bd9f60ea0a5c5c",[886],{"_160":887},{"_13":162,"_37":126,"_128":163,"_43":888},{"_13":162,"_15":260,"_19":19,"_11":284,"_17":285,"_60":889,"_172":479},{"_15":260,"_69":287,"_72":890,"_291":289,"_68":290,"_140":292,"_74":293},{"_62":289,"_74":290},"June 17, 2025",[893],{"_151":894},{"_37":126,"_13":895,"_128":154,"_43":896},"678fe8079249d98277018e8f",{"_13":895,"_15":897,"_19":19,"_11":898,"_17":314,"_60":899,"_172":912},"Ben Bernstein",1742719337739,{"_15":897,"_69":900,"_72":901,"_320":904,"_322":-5,"_323":905,"_377":906,"_325":907},"ben-bernstein",{"_62":902,"_74":903,"_146":6,"_144":6},"Ben Bernstein | Huntress","Read blog posts from Ben Bernstein on the Huntress Blog.","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F249dda78fa81437389d202425ec262b8","

Ben Bernstein is a Technical Account Manager at Huntress, where he works closely with partners to improve their security postures and those of their clients. With a background rooted in endpoint security, Ben also helps enable partners on ITDR (Identity Threat Detection and Response), SAT (Security Awareness Training), and SIEM (Security Information and Event Management).

Before joining Huntress, Ben played a pivotal role at Red Canary, where he helped establish and grow an Enterprise Technical Account Management team, delivering MDR (Managed Detection and Response) to Fortune 500 customers. Prior to that, he spent nearly eight years at an MSP, gaining hands-on experience in both technical and account management roles.

What Ben loves most about Huntress is the culture. “We have a ton of really smart folks who want to do right by each other and our partners,” he says.

What’s your favorite cybersecurity tip, Ben?

\"Preventative measures alone can't guarantee safety. Organizations should operate under the assumption of compromise and continuously monitor and hunt for malicious activity.\"

Learn more about Ben on his LinkedIn page.

‍

","https://www.linkedin.com/in/benbernstein-atx/",[908,910],{"_328":909},{"_37":126,"_13":330,"_128":325},{"_328":911},{"_37":126,"_13":333,"_128":325},"f0pkozh10tt",["D",1750136400000],{"_13":915,"_15":916,"_60":917},"bc46a4a6c978413fb2ff5e64ae2ba8f1","Introducing Behavior-Based Assignments: A New Approach to Human Risk Management",{"_69":918,"_164":919,"_157":920,"_155":926,"_148":927,"_139":-5,"_465":983},"introducing-behavior-based-assignments","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F5bf3b076871341f1a2e9cf17bf5770ba",[921],{"_160":922},{"_128":163,"_37":126,"_13":265,"_43":923},{"_13":265,"_15":266,"_19":19,"_11":678,"_17":285,"_60":924,"_172":686},{"_15":266,"_69":680,"_72":925,"_291":682,"_68":683,"_140":684,"_74":685},{"_62":682,"_74":683},"June 16, 2025",[928,957],{"_151":929},{"_37":126,"_128":154,"_13":930,"_43":931},"8aaaf134c88345f69b772c215ab737c1",{"_13":930,"_45":932,"_17":314,"_19":19,"_56":664,"_60":933,"_20":948,"_58":950,"_54":951,"_15":946,"_34":952,"_50":51,"_11":953,"_49":954,"_47":955,"_172":956},{},{"_423":934,"_322":935,"_372":936,"_72":937,"_325":940,"_377":943,"_320":944,"_434":945,"_15":946,"_375":376,"_69":947},"Bussa","Tony Bussa Huntress","Director of Product Marketing",{"_74":938,"_62":939},"Read blog posts from Tony Bussa on the Huntress blog","Toby Bussa | Huntress",[941],{"_328":942},{"_128":325,"_13":330,"_37":126},"https://www.linkedin.com/in/tbussa/","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ffd62f8eb1f32487a87f158b054a4002d","Tony","Toby Bussa","toby-bussa",{"_26":949,"_22":63,"_25":60},{"_32":33,"_30":31,"_28":29},[],"rqPhimgdOfVCrDCbaxcCVZPJeJc2",[],1744049257247,1744049308000,1749587707066,"cxuezevg72",{"_151":958},{"_13":959,"_37":126,"_128":154,"_43":960},"66048bf5f5dbb4095e6672b4",{"_34":961,"_58":962,"_11":963,"_13":959,"_15":964,"_17":314,"_19":19,"_20":965,"_60":967,"_45":980,"_47":981,"_49":963,"_50":51,"_54":951,"_56":55,"_172":982},[],[],1742719362812,"James O’Leary",{"_26":966,"_25":60,"_22":63},{"_28":29,"_30":31,"_32":33},{"_15":964,"_322":-5,"_372":968,"_320":969,"_72":970,"_323":972,"_325":973,"_69":978,"_377":979,"_375":376},"Product Marketing Manager","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fd8f8451aced8416d939065535851c126",{"_146":6,"_74":971,"_144":6,"_62":964},"Read blog posts from James O’Leary on the Huntress Blog.","

“My father has owned a small construction business my whole life and does not have the staff for an IT or security team. I love knowing that Huntress is looking out for and protecting businesses like his.”

James got started in the cyber security space when he joined Huntress in 2022 and is now the Product Marketing Manager for Security Awareness Training.He is passionate about Huntress’s mission of protecting small or underserved businesses and reports that he counts himself lucky to work among highly respected experts in the field who continually help each other learn new things about cyber security.

‍

When he’s not working, you’ll find James being the sporty guy he is, playing golf, hockey, volleyball, or pickleball, watching movies, and trying new restaurants. He also loves to travel abroad and has visited over 20 countries!

What's your favorite cybersecurity tip, James?
“Think before you click!”

‍

Find James on LinkedIn.

‍

",[974,976],{"_328":975},{"_37":126,"_13":330,"_128":325},{"_328":977},{"_37":126,"_13":333,"_128":325},"james-oleary","https://www.linkedin.com/in/james-o%E2%80%99leary-351184153/",{},1745445706400,"kh5wgdu2rfm",["D",1750050000000],{"_13":985,"_15":986,"_60":987},"5035b829f9304ddeb5650122fa1cb4b1","137 Key Cybersecurity Statistics for 2025 and Beyond",{"_69":988,"_164":989,"_155":990,"_148":991,"_139":-5,"_465":1013},"cybersecurity-statistics","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F4454138e2538496f8b15457e65fec435","June 12, 2025",[992],{"_151":993},{"_13":994,"_37":126,"_128":154,"_43":995},"673e4076804468f80b5f2555",{"_13":994,"_15":996,"_19":19,"_11":997,"_17":314,"_60":998,"_172":1012},"Brenda Buckman",1742719341711,{"_15":996,"_69":999,"_72":1000,"_320":1003,"_322":-5,"_372":1004,"_323":1005,"_375":376,"_377":1006,"_325":1007},"brenda-buckman",{"_62":1001,"_74":1002,"_146":6,"_144":6},"Brenda Buckman | Huntress","Brenda Buckman is the Senior Director of Digital Web Presence at Huntress, bringing her passion for storytelling and digital innovation to the forefront of our marketing efforts.","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fea04d403555644f48db8e600fef9e64d","Senior Director, Web","

A passionate storyteller shaping Huntress's digital presence.

Brenda Buckman is the Senior Director of Digital Web Presence at Huntress, bringing her passion for storytelling and digital innovation to the forefront of our marketing efforts.

\"I love working at Huntress for so many reasons, but what stands out the most is the company’s unwavering commitment to the cybersecurity community and its customers,\" Brenda shares. \"Huntress isn’t just about providing a product; it’s about truly putting people first—ensuring that every decision we make prioritizes the protection and peace of mind of those we serve.\"

Specializing in marketing and digital presence—especially web—Brenda focuses on making cybersecurity more accessible and engaging through compelling digital experiences. She appreciates the Huntress culture of transparency and candor. \"It's refreshing to work in an environment where open communication is encouraged. This level of honesty fosters trust, helps keep everyone on the same page, and enables more collaboration,\" she says.

Before joining Huntress, Brenda worked in the home services industry, managing digital products for on-demand service offerings. Her experience honed her skills in creating user-focused digital experiences and delivering solutions that resonate with audiences.

Brenda is also an avid storyteller outside of her work at Huntress—she’s currently crafting her first novel and immersing herself in captivating books, mainly in the science fiction and fantasy realm. She loves being creative in all aspects of her life, from trying out new crafts and hobbies to hosting themed parties for her friends. Recently, she's picked up mahjong, finding it a fun new challenge. Brenda also enjoys live music, traveling, and exploring new culinary experiences as a foodie. \"Life's an adventure, and I love it!\" she says. We tend to believe her.

Learn more about Brenda at her LinkedIn profile.

‍

","https://www.linkedin.com/in/brenda-buckman-40821342/",[1008,1010],{"_328":1009},{"_37":126,"_13":330,"_128":325},{"_328":1011},{"_37":126,"_13":333,"_128":325},"3oac9r63vs8",["D",1749733200000],{"_13":1015,"_15":1016,"_60":1017},"2f2c566ad7ec47458cc7582e8b66d49a","Where Do You Think You're Going? How Huntress Addresses Lateral Movement",{"_69":1018,"_164":1019,"_157":1020,"_155":990,"_148":1026,"_139":-5,"_465":1097},"how-huntress-addresses-lateral-movement","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F48386cf66edd4de9915c234bd59aa77d",[1021],{"_160":1022},{"_13":162,"_37":126,"_128":163,"_43":1023},{"_13":162,"_15":260,"_19":19,"_11":284,"_17":285,"_60":1024,"_172":479},{"_15":260,"_69":287,"_72":1025,"_291":289,"_68":290,"_140":292,"_74":293},{"_62":289,"_74":290},[1027,1048,1076],{"_151":1028},{"_37":126,"_13":1029,"_128":154,"_43":1030},"671fa09ded8a0618ed99d158",{"_13":1029,"_15":1031,"_19":19,"_11":1032,"_17":314,"_60":1033,"_172":1047},"Jonathan Johnson",1742719342080,{"_15":1031,"_69":1034,"_72":1035,"_320":1038,"_322":-5,"_372":731,"_323":1039,"_375":376,"_377":1040,"_381":1041,"_325":1042},"jonathan-johnson",{"_62":1036,"_74":1037,"_146":6,"_144":6},"Jonathan Johnson | Huntress","Read more blog post from Jonathan Johnson on Huntress.com.","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ffd9313cd495648cebe8b5840aa07d062","

Diving deep into Windows internals to keep organizations secure.

Jonathan Johnson is a Principal Product Researcher at Huntress, focusing on Windows internals, telemetry, and EDR to help shape innovative cybersecurity solutions. He applies his technical expertise to uncover insights that enhance the platform’s capabilities, ensuring Huntress stays one step ahead of emerging threats. Jonathan’s hands-on approach and keen attention to detail make him an invaluable resource for developing and refining the tools that safeguard today’s businesses.

Give him a follow on X: @jsecurity101

‍

","https://www.linkedin.com/in/jonathan-johnson-7aa937135/","https://x.com/jsecurity101?lang=en",[1043,1045],{"_328":1044},{"_37":126,"_13":330,"_128":325},{"_328":1046},{"_37":126,"_13":333,"_128":325},"abgezrg0j1p",{"_151":1049},{"_128":154,"_13":1050,"_37":126,"_43":1051},"9c882463f666457fabb0963b5e4cfe63",{"_11":1052,"_60":1053,"_49":1068,"_45":1069,"_47":1070,"_56":664,"_20":1071,"_13":1050,"_17":314,"_15":1056,"_19":19,"_58":1073,"_34":1074,"_50":51,"_54":664,"_172":1075},1747948578064,{"_69":1054,"_320":1055,"_15":1056,"_323":1057,"_72":1058,"_434":1061,"_377":1062,"_372":813,"_423":1063,"_375":376,"_325":1064,"_322":1067},"tyler-bohlmann","https://ca.slack-edge.com/T095F397A-U071VCM44CB-eeebbded84e2-512","Tyler Bohlmann","

Tyler Bohlmann, Detection Engineer at Huntress, brings a wealth of expertise to the world of cybersecurity. His passion for the field was sparked in an unexpected way—through a failed security internship interview, where he discovered pen testing and the fascinating tactics of red teams. Since then, he has dedicated himself to excelling in detection engineering, gap analysis, adversary emulation, and purple teaming.

With certifications like BTL2 and eJPT under his belt and a standout achievement as a speaker at BSidesSLC 2022, Tyler is no stranger to dissecting complex cybersecurity challenges. His presentation on detecting offensive tools (“Unpacking Impacket”) offered valuable insights into identifying remote execution techniques.

Before joining Huntress, Tyler gained hands-on experience working within the MDR space as a Threat Hunter and Incident Handler at Red Canary and various MSPs, where he tackled everything from IT consulting to desktop and helpdesk support. At Huntress, he thrives on collaborating with the talented teams to help protect organizations he used to serve as an IT technician.

When he’s not conducting research or emulating adversaries, Tyler spends his time with his family, practicing Brazilian jiu-jitsu, experimenting with coffee brewing, or exploring his interests in photography and music.

His favorite cybersecurity tip? “A question well stated is a problem half-solved - Chris Sanders”

",{"_74":1059,"_62":1060},"Read blog posts from Tyler Bohlmann on the Huntress Blog. ","Tyler Bohlmann | Huntress ","Tyler","https://www.linkedin.com/in/tylerbohlmann/","Bohlmann",[1065],{"_328":1066},{"_37":126,"_13":330,"_128":325},"Tyler Bohlmann Huntress",1747948743852,{},1749756532890,{"_22":63,"_25":60,"_26":1072},{"_32":33,"_28":29,"_30":31},[],[],"w2dnw60h74",{"_151":1077},{"_37":126,"_13":1078,"_128":154,"_43":1079},"66048bf626da1ef22f84162f",{"_13":1078,"_15":1080,"_19":19,"_11":1081,"_17":314,"_60":1082,"_172":1096},"Matt Anderson",1742719356913,{"_15":1080,"_69":1083,"_72":1084,"_320":1087,"_322":-5,"_372":813,"_323":1088,"_375":376,"_377":1089,"_381":1090,"_325":1091},"matt-anderson",{"_62":1085,"_74":1086,"_146":6,"_144":6},"Matt Anderson - Senior Detection Engineer | Huntress","Read blog posts from Matt Anderson, Senior Detection Engineer on the Huntress Blog.","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F683f88e8ed144f65b5f1c6a5989019d3","

Matt Anderson’s entry into cybersecurity began on an Internal IT team at a local business, where he progressed from the Help Desk to System Administrator.

As Matt learned more about cybersecurity, his interest in security investigations and managing security tools grew into a passion. Seeking to work directly with experts and make a significant impact on the community, Matt found the perfect opportunity at Huntress.

“I love working with so many experienced and intelligent people in the field, all working toward the same goal of educating and protecting SMBs,” Matt says. “I also love getting to learn new things and face new challenges every day in a field that I enjoy that can have a major impact on so many people.”

Before joining Huntress, Matt worked in IT for a company in the manufacturing industry, gaining valuable experience that now informs his work in cybersecurity.

Specializing in Detection Engineering at Huntress, Matt holds several certifications, including CySA+, eJPT, and BLT2. In fact, he was the first person to obtain the BTL2 certification from Security Blue Team.

What's your favorite cybersecurity tip, Matt?

“You can't eliminate all risk. Know which risks are the most relevant and important to you and be wise in minimizing them.”

Outside of work, Matt enjoys river fishing for smallmouth bass, particularly in the summer. He is also passionate about sports, weightlifting, cooking, and grilling, and he serves on the music and tech teams at his church. Above all, Matt values spending time with his family.

Follow Matt on Twitter/X @nosecurething.

","https://www.linkedin.com/in/matt-finds-malware/","http://@nosecurething",[1092,1094],{"_328":1093},{"_37":126,"_13":330,"_128":325},{"_328":1095},{"_37":126,"_13":333,"_128":325},"m401ebnc37r",["D",1749704400000],{"_13":1099,"_15":1100,"_60":1101},"d6f0ba173aad4685be9ff49e9fa8690e","Extending Threat Coverage on Macs with XProtect and Microsoft Defender for Endpoint",{"_69":1102,"_164":1103,"_157":1104,"_155":1110,"_148":1111,"_139":-5,"_465":1125},"threat-coverage-on-macs-with-xprotect-microsoft-defender-for-endpoint","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F66663b217d3948968b04b8dfa7d3e842",[1105],{"_160":1106},{"_128":163,"_37":126,"_13":265,"_43":1107},{"_13":265,"_15":266,"_19":19,"_11":678,"_17":285,"_60":1108,"_172":686},{"_15":266,"_69":680,"_72":1109,"_291":682,"_68":683,"_140":684,"_74":685},{"_62":682,"_74":683},"June 11, 2025",[1112],{"_151":1113},{"_128":154,"_13":930,"_37":126,"_43":1114},{"_13":930,"_45":1115,"_17":314,"_19":19,"_56":664,"_60":1116,"_20":1121,"_58":1123,"_54":951,"_15":946,"_34":1124,"_50":51,"_11":953,"_49":954,"_47":955,"_172":956},{},{"_423":934,"_322":935,"_372":936,"_72":1117,"_325":1118,"_377":943,"_320":944,"_434":945,"_15":946,"_375":376,"_69":947},{"_74":938,"_62":939},[1119],{"_328":1120},{"_128":325,"_13":330,"_37":126},{"_26":1122,"_22":63,"_25":60},{"_32":33,"_30":31,"_28":29},[],[],["D",1749618000000],{"_13":1127,"_15":1128,"_60":1129},"5ce6ca8d4cff4608b1864b9d80f19b14","A Whole New Way to Train: Introducing Threat Simulator from Huntress Managed SAT",{"_69":1130,"_164":1131,"_157":1132,"_155":1138,"_148":1139,"_139":-5,"_465":1155},"introducing-threat-simulator-from-huntress-managed-sat","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F814c886b24e346a18980c4a5cb5ddb98",[1133],{"_160":1134},{"_128":163,"_37":126,"_13":265,"_43":1135},{"_13":265,"_15":266,"_19":19,"_11":678,"_17":285,"_60":1136,"_172":686},{"_15":266,"_69":680,"_72":1137,"_291":682,"_68":683,"_140":684,"_74":685},{"_62":682,"_74":683},"June 10, 2025",[1140],{"_151":1141},{"_37":126,"_13":959,"_128":154,"_43":1142},{"_34":1143,"_58":1144,"_11":963,"_13":959,"_15":964,"_17":314,"_19":19,"_20":1145,"_60":1147,"_45":1154,"_47":981,"_49":963,"_50":51,"_54":951,"_56":55,"_172":982},[],[],{"_26":1146,"_25":60,"_22":63},{"_28":29,"_30":31,"_32":33},{"_15":964,"_322":-5,"_372":968,"_320":969,"_72":1148,"_323":972,"_325":1149,"_69":978,"_377":979,"_375":376},{"_146":6,"_74":971,"_144":6,"_62":964},[1150,1152],{"_328":1151},{"_37":126,"_13":330,"_128":325},{"_328":1153},{"_37":126,"_13":333,"_128":325},{},["D",1749531600000],"totalPages",32,"pageNumber","event","loader","common",{"_1163":1164,"_1689":1690,"_1755":1756},"headerContent",[1165,1249,1361,1432,1510,1527],{"_58":1166,"_45":1167,"_56":55,"_60":1168,"_47":1240,"_15":1174,"_11":1241,"_19":19,"_54":55,"_49":1242,"_20":1243,"_50":51,"_17":1245,"_34":1246,"_13":1247,"_172":1248},[],{},{"_1169":1170,"_1171":1172,"_1173":1174,"_1175":1176},"type","Menu","linkProperties",{},"menuText","Platform","columns",[1177,1211],{"_1178":1179,"_1183":105,"_1169":1184,"_1185":79,"_62":1186,"_1187":1188},"footerLink",{"_77":1180,"_1181":1182},"/platform","text","Platform Overview","columnSpan","Link List","showTitle","Huntress Managed Security Platform","links",[1189,1196,1201,1206],{"_77":1190,"_1169":1191,"_1192":1193,"_121":1194,"_62":1195},"/platform/managed-edr","Text Link","icon","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Feb16a0fc49194ef3a61c385bd0d0f312","

Get full endpoint visibility, detection, and response.

","Managed EDR",{"_121":1197,"_1192":1198,"_1169":1191,"_62":1199,"_77":1200},"

Empower your teams with science-backed security awareness training.

","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fcd0acdb221c84200a837d97a6bac46a7","Managed Security Awareness Training","/platform/security-awareness-training",{"_1169":1191,"_121":1202,"_1192":1203,"_77":1204,"_62":1205},"

Protect your Microsoft 365 identities and email environments.

","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ffd3a938d7dfc41bdac34c3f46a36afb2","/platform/managed-itdr","Managed ITDR",{"_62":1207,"_1192":1208,"_77":1209,"_121":1210,"_1169":1191},"Managed SIEM","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F5638ee75bf42433c81332c153db5cb15","/platform/siem","

Managed threat response and robust compliance support at a predictable price.

",{"_1185":6,"_1169":1212,"_1183":51,"_142":79,"_1178":1213,"_62":1214,"_1215":1216},"Card",{},"Learn More Card","cardContentReference",{"_37":126,"_13":1217,"_128":1218,"_43":1219},"be5723c7f6674c6db1ebfc79503cb723","custom-cards",{"_11":1220,"_60":1221,"_34":1231,"_15":1223,"_50":51,"_45":1232,"_47":1233,"_54":55,"_58":1234,"_17":1235,"_49":1236,"_56":55,"_13":1217,"_19":19,"_20":1237,"_172":1239},1738695869997,{"_121":1222,"_15":1223,"_1224":1225,"_1226":1227,"_1228":1227,"_1229":1225,"_164":1230},"Try Huntress for free and deploy in minutes to start fighting threats.","Learn More","linkUrl","/demo","linkLabelText","Request a Demo","ctaText","ctaUrl","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F4dcf43805cea496b92a4b04334297b54",[],{},1749580539246,[],"6debca3e2db24468b466376fc09f0c11",1738695944669,{"_26":1238,"_22":63,"_25":60},{"_28":29,"_30":31,"_32":33},"j55p0yt5ad",1749740747998,1749525643074,1749565841689,{"_25":60,"_26":1244,"_22":63},{"_30":31,"_28":29,"_32":33},"a8d3d337534a4f77aa8de03d557b7d7c",[],"1644f670abc3422fb4ae58c911ab52e0","zd1555jcrts",{"_13":1250,"_50":51,"_17":1245,"_34":1251,"_58":1252,"_47":1253,"_15":1254,"_60":1255,"_20":1356,"_49":1358,"_45":1359,"_54":55,"_56":55,"_11":1360,"_19":19,"_172":1248},"5233b983391e46bea1a73aa4e64e3e1f",[],[],1749578645008,"Solutions",{"_1171":1256,"_1169":1170,"_1173":1254,"_1175":1257},{},[1258,1274,1298],{"_1187":1259,"_1169":1184,"_62":1272,"_1183":51,"_1185":79,"_1178":1273},[1260,1264,1268],{"_62":1261,"_77":1262,"_1169":1191,"_1192":1263},"Phishing","/solutions/topics/phishing","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fd8af97b52a364281ae4ae771eac29f60",{"_77":1265,"_62":1266,"_1192":1267,"_1169":1191},"/solutions/topics/cybersecurity-compliance","Compliance","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F5437345f68ab4fecb25e1bf64d596f05",{"_62":1269,"_77":1270,"_1169":1191,"_1192":1271},"Business Email Compromise","/solutions/topics/business-email-compromise","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fe0006e0247a84d538abfdb56270b1971","Solutions by Topic",{},{"_62":1275,"_1178":1276,"_1185":79,"_1183":51,"_1169":1184,"_1187":1277},"Solutions by Industry",{},[1278,1282,1286,1290,1294],{"_77":1279,"_1192":1280,"_1169":1191,"_62":1281},"/industries/education","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F4951efeb175d46a28d43a56e44f1aaa6","Education",{"_1169":1191,"_1192":1283,"_77":1284,"_62":1285},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F2c6e56c396984defa968946c3305fd5d","/industries/financial-services","Finance",{"_1192":1287,"_1169":1191,"_62":1288,"_77":1289},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fad40fb4e0e8f4fc3a283928e18d2cb07","Healthcare","/industries/healthcare",{"_1192":1291,"_1169":1191,"_62":1292,"_77":1293},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fa1a16399f6f94c3da8e42ddbe735c1c1","Manufacturing","/industries/manufacturing",{"_1192":1295,"_77":1296,"_1169":1191,"_62":1297},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fdafe6a53f78a407c80691541d7e292b9","/industries/state-and-local-government","State & Local Government",{"_1185":79,"_1178":1299,"_62":1300,"_142":79,"_1169":1212,"_1301":1302,"_1215":1304,"_1183":51},{"_77":63,"_1181":1223},"Featured Resource","cardContentOverride",{"_121":1303},"

Packed with the information, tools, and guidance you need to keep your organization running smoothly and, most importantly, your patients safe.

",{"_128":1305,"_37":126,"_13":1306,"_43":1307},"resources","66c49e7c03769aca3efd1adf",{"_13":1306,"_15":1308,"_19":19,"_11":1309,"_17":1310,"_60":1311,"_172":1355},"Healthcare Cybersecurity Success Kit",1742716627143,"5c10263d01de417681f67c6df9d9a9d4",{"_15":1308,"_69":1312,"_155":1313,"_139":1314,"_72":1315,"_140":1318,"_142":6,"_1319":79,"_164":1320,"_1321":1322,"_1323":1322,"_1324":1325,"_1343":1344,"_1229":1353,"_1228":1354},"healthcare-cybersecurity-success-kit","2024-08-21T00:00:00.000Z","2024-08-22T14:36:33.220Z",{"_62":1316,"_74":1317,"_146":6,"_144":6},"Healthcare Cybersecurity Success Kit | Huntress","This Healthcare Cybersecurity Success Kit is packed with the information, tools, and guidance you need to keep your organization running smoothly and, most importantly, your patients safe.","https://www.huntress.com/resources/healthcare-cybersecurity-success-kit","gated","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F25165b11288e4ab8ab0dc72832f4eb5e","preGateContent","

Hackers are hitting healthcare hard. From large hospital networks to small rural clinics, nothing’s off-limits anymore.

But you don't have to take it. This Healthcare Cybersecurity Success Kit is packed with the information, tools, and guidance you need to keep your organization running smoothly and, most importantly, your patients safe.

","postGateContent","tags",[1326,1335],{"_1327":1328},"tag",{"_37":126,"_13":1329,"_128":1324,"_43":1330},"6619a1966fc1cc2a81065887",{"_13":1329,"_15":1288,"_19":19,"_11":1331,"_17":1332,"_60":1333,"_172":1334},1741825542581,"06a1fff4f2d64eed986229acc010c74f",{"_15":1288},"cwftfugh2w5",{"_1327":1336},{"_37":126,"_13":1337,"_128":1324,"_43":1338},"65f3299e49a461b4b9c72e83",{"_13":1337,"_15":1339,"_19":19,"_11":1340,"_17":1332,"_60":1341,"_172":1342},"Mastering Cybersecurity",1741825551705,{"_15":1339},"fe4v82x7s9q","assetType",{"_37":126,"_13":1345,"_128":1346,"_43":1347},"65f3299e49a461b4b9c72e40","asset-types",{"_13":1345,"_15":1348,"_19":19,"_11":1349,"_17":1350,"_60":1351,"_172":1352},"Success Kit",1741790296798,"50c69b616da14a22b2d7092dd07fd641",{"_15":1348},"y5hvp1eua7m","https://www.huntress.com/industries/healthcare/healthcare-resource-kit","Get the Healthcare Cybersecurity Success Kit","eqq5smoqzre",{"_26":1357,"_22":63,"_25":60},{"_30":31,"_28":29,"_32":33},1749565841905,{},1749530546748,{"_11":1362,"_13":1363,"_15":1364,"_17":1245,"_19":19,"_20":1365,"_34":1367,"_60":1368,"_45":1428,"_47":1429,"_49":1430,"_50":51,"_54":55,"_56":55,"_58":1431,"_172":1248},1749560149759,"94db9c6a65e047acb4ac7d4d2ea0da30","Why Huntress",{"_22":63,"_25":60,"_26":1366},{"_28":29,"_30":31,"_32":33},[],{"_1171":1369,"_1173":1364,"_1175":1370,"_1169":1170},{},[1371,1388,1401],{"_1169":1184,"_1185":79,"_62":1372,"_1187":1373,"_1178":1387,"_1183":51},"Who We Serve",[1374,1378,1383],{"_77":1375,"_1169":1191,"_1192":1376,"_62":1377},"/why-huntress/managed-service-providers","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F11f54e8f5fb54aadbf4c71effaab65a5","Managed Service Providers",{"_1169":1191,"_1192":1379,"_62":1380,"_77":1381,"_426":1382},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ff0209e5a35e34a25a31075aca24dec96","Value Added Resellers","/why-huntress/value-added-resellers","Platform Icon",{"_1169":1191,"_1192":1384,"_62":1385,"_77":1386},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ff257bebdca1c45cab6259f8436ca7221","Business & IT Teams","/why-huntress/businesses-it-teams",{},{"_1183":51,"_1185":79,"_1178":1389,"_62":1390,"_1169":1184,"_1187":1391},{},"The Huntress Difference",[1392,1397],{"_1169":1191,"_1192":1393,"_77":1394,"_426":1395,"_62":1396},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F4cc0a301d59343f08fa3fd23661a7726","/why-huntress/24-7-soc","Issue Detected - Alert Icon","Huntress SOC",{"_77":1398,"_1192":1399,"_1169":1191,"_62":1400},"/success-stories","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fff7b259c7c5c408f9747e8a28989015b","Case Studies",{"_1169":1184,"_1183":51,"_1185":79,"_1178":1402,"_1187":1405,"_62":1427,"_142":79},{"_1181":1403,"_77":1404},"Compare All","/comparison",[1406,1409,1412,1415,1418,1421,1424],{"_62":1407,"_77":1408,"_1169":1191},"Bitdefender","/comparison/huntress-vs-bitdefender",{"_77":1410,"_1169":1191,"_62":1411},"/comparison/huntress-vs-blackpoint","Blackpoint",{"_1169":1191,"_62":1413,"_77":1414},"CrowdStrike","/comparison/huntress-vs-crowdstrike",{"_1169":1191,"_77":1416,"_62":1417},"/comparison/huntress-vs-datto","Datto",{"_1169":1191,"_77":1419,"_62":1420},"/comparison/huntress-vs-sentinelone","SentinelOne",{"_62":1422,"_77":1423,"_1169":1191},"Sophos","/comparison/huntress-vs-sophos",{"_62":1425,"_77":1426,"_1169":1191},"Webroot","/comparison/huntress-vs-webroot","Compare Huntress",{},1749574641163,1749565841954,[],{"_54":55,"_60":1433,"_13":1501,"_47":1502,"_49":1503,"_20":1504,"_56":55,"_15":1434,"_45":1506,"_17":1245,"_58":1507,"_19":19,"_34":1508,"_50":51,"_11":1509,"_172":1248},{"_1169":1170,"_1173":1434,"_1171":1435,"_1175":1436},"Resources",{},[1437,1461,1483],{"_1185":79,"_62":1438,"_1183":51,"_1187":1439,"_1178":1458,"_1169":1184},"Resource Center",[1440,1443,1446,1449,1452,1455],{"_1169":1191,"_77":1441,"_62":1442},"/resources?assetTypes=Datasheet","Datasheets",{"_62":1444,"_77":1445,"_1169":1191},"Ebooks","/resources?assetTypes=eBook",{"_62":1447,"_1169":1191,"_77":1448},"Reports","/resources?assetTypes=Report",{"_77":1450,"_1169":1191,"_62":1451},"/resources?assetTypes=On-Demand+Webinar","On-Demand Webinars",{"_77":1453,"_62":1454,"_1169":1191},"/resources?assetTypes=Whitepaper","Whitepapers",{"_77":1456,"_62":1457,"_1169":1191},"/resources?assetTypes=Video","Videos",{"_1181":1459,"_77":1460},"View All Resources","/resources",{"_1187":1462,"_1178":1481,"_1183":51,"_1185":6,"_62":1482,"_1169":1184},[1463,1465,1469,1473,1477],{"_1192":1464,"_1169":1191,"_62":16,"_77":44},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F7f4ca3bd558f425da4f12b81befbb279",{"_77":1466,"_1169":1191,"_1192":1467,"_62":1468},"/upcoming-events","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F6aa1f0e921a844ed9975b8c477720a6c","Upcoming Events",{"_62":1470,"_77":1471,"_1169":1191,"_1192":1472},"Support Documentation","https://support.huntress.io/hc/en-us","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fac02933fbb964cdf9e6c8b3b2280fa5d",{"_62":1474,"_1169":1191,"_1192":1475,"_77":1476},"Integrations","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F75378b21898340b6b863c3b68ae0a980","/integrations",{"_62":1478,"_77":1479,"_1192":1480,"_1169":1191},"Huntress Hub","https://hub.huntress.com/#/page/login","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fabe11db97e084bfeb9d370076781caea",{},"Other Resources",{"_62":1484,"_142":79,"_1169":1184,"_1187":1485,"_1185":79,"_1178":1500,"_1183":51},"Produced by Huntress",[1486,1491,1496],{"_204":1487,"_77":1488,"_1169":1489,"_62":1490},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fea18a565ed0e4bdda1f6881a955de34c","/tradecraft-tuesday","Image Link","Tradecraft Tuesday",{"_62":1492,"_1169":1489,"_77":1493,"_426":1494,"_204":1495},"Fireside Chat","/firesidechat","Fireside Chat Community Series","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F98c34785dc62414381fe4d25b1d355a9",{"_204":1497,"_62":1498,"_1169":1489,"_77":1499},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F5f3ffde6942c41b6885da8bc727a4cc5","Product Lab Channel","/product-lab-channel",{},"e21c3f198af24be5b52f72480500ff2d",1749676549589,1749565842009,{"_22":63,"_26":1505,"_25":60},{"_28":29,"_30":31,"_32":33},{},[],[],1749560786283,{"_11":1511,"_13":1512,"_15":1513,"_17":1245,"_19":19,"_20":1514,"_34":1516,"_60":1517,"_45":1523,"_47":1524,"_49":1525,"_50":51,"_54":55,"_56":55,"_58":1526,"_172":1248},1749561737294,"84190317c5f14f32ae91ba95a125371a","Pricing",{"_22":63,"_25":60,"_26":1515},{"_28":29,"_30":31,"_32":33},[],{"_1171":1518,"_1169":1522,"_1173":1513,"_1224":1519},{"_77":1519,"_1181":1513,"_1520":1521},"/pricing","target","_self","Link",{},1749579606414,1749565842037,[],{"_20":1528,"_50":51,"_60":1530,"_15":1680,"_56":55,"_11":1682,"_34":1683,"_17":1245,"_45":1684,"_54":55,"_58":1685,"_47":1686,"_13":1687,"_19":19,"_49":1688,"_172":1248},{"_22":63,"_26":1529,"_25":60},{"_32":33,"_28":29,"_30":31},{"_1175":1531,"_1173":1680,"_1171":1681,"_1169":1170},[1532,1554,1569],{"_1169":1184,"_1187":1533,"_1183":51,"_1178":1552,"_62":1553,"_1185":79},[1534,1538,1543,1547],{"_62":1535,"_77":1536,"_1169":1191,"_1192":1537},"Our Story","/company/our-company","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F38494b4ddb7a45a78ca20d43a03176bf",{"_1192":1539,"_77":1540,"_62":1541,"_1169":1191,"_426":1542},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F33845c53ebd4472b9806d7a76b742616","/company/leadership","Leadership","Leadership Icon",{"_1192":1544,"_77":1545,"_62":1546,"_1169":1191},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F3a5e883de76c4f5686d64a1dc0dbe7b6","/company/press","Latest News",{"_77":1548,"_1192":1549,"_62":1550,"_426":1551,"_1169":1191},"/awards-and-accolades","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F107b70abda5841439fca3a13a02929cf","Awards","Awards Icon",{},"About Huntress",{"_62":1555,"_1183":51,"_1178":1556,"_1187":1557,"_1169":1184},"Careers",{},[1558,1562,1564],{"_1192":1559,"_1169":1191,"_426":1560,"_77":1561,"_62":1555},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F80b5a5a31d2245e49c4038e433792c22","Verify Icon","/company/careers",{"_1169":1191,"_77":1466,"_62":1468,"_1192":1563},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F1490131472ce4b94a57df268649354a0",{"_77":1565,"_1192":1566,"_1169":1191,"_62":1567,"_426":1568},"/contact-us","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F3324b3cde0b84f3b8749e3f6577c6540","Contact Us","SAT Content Icon",{"_1169":1212,"_1185":79,"_1215":1570,"_142":79,"_1178":1675,"_62":1678,"_1301":1679,"_1183":51},{"_128":1571,"_13":1572,"_37":126,"_43":1573},"success-stories","2d71ea3f63c447d7a361e21502a74e15",{"_34":1574,"_58":1575,"_11":1576,"_13":1572,"_15":1577,"_17":1578,"_19":19,"_20":1579,"_60":1581,"_45":1671,"_47":1672,"_49":1673,"_50":51,"_54":740,"_56":740,"_172":1674},[],[],1743800825454,"Key Methods","84071192fd6043e68c9d5963be3e722b",{"_26":1580,"_25":60,"_22":63},{"_28":29,"_30":31,"_32":33},{"_1582":1583,"_1584":1585,"_1610":1611,"_72":1647,"_1652":1653,"_1641":1654,"_1655":1656,"_1657":1658,"_375":1577,"_69":1659,"_1660":79,"_164":1661,"_1662":1663,"_426":1650,"_15":1577,"_1664":1665,"_1666":1667,"_1668":1669,"_121":1670},"heroSubhead","How Key Methods Stopped Guessing and Took Control with Huntress Managed SIEM","mainContent",{"_1586":1587},"section",[1588,1592,1594,1596,1598,1601,1603,1606,1608],{"_1589":1590,"_1591":63},"columnOne","

Prologue | Key Methods’ history with Huntress

Key Methods first tried Huntress in 2022. They rolled out Huntress Managed Endpoint Detection and Response (EDR) across all their clients for a month, but they scaled back when no major security issues popped up. Instead, they took a more selective approach, using it only when they spotted something suspicious or during new client onboarding.
\n

","columnTwo",{"_1589":1593,"_1591":63},"

Incident one | Managed EDR quickly shuts down a threat

In 2023, Huntress Managed EDR came in handy, flagging suspicious activity inside a client’s network. This wasn’t just any client, however. It was a company handling vast sums of money and a treasure trove of personal data. In other words, a prime target for hackers.

Huntress’ Security Operations Center (SOC) stepped in quickly, working hand-in-hand with Key Methods. In no time, endpoints were isolated, access was shut down, and the threat was contained.

Crisis averted.

…or so it seemed.

",{"_1591":63,"_1589":1595},"

Post-incident | The decision no MSP wants to make

The real challenge started after the immediate threat was handled. Key Methods was left with critical questions that would inform their next steps.

“All we knew was the attackers had possibly seen things they shouldn’t have,” says Dan Paquette, Managing Partner at Key Methods.

The entire Key Methods team was on edge, haunted by questions like, “How did the hackers get in?” “What data was compromised?” “Could they still be in the system?”

With little in terms of logs or data to go on, they had to make the call no MSP ever wants to make—shut everything down.

",{"_1589":1597,"_1591":63},"

Before Huntress Managed SIEM | Playing a costly game of guesswork

The impact was huge. The client faced over a week of downtime, more than $75,000 on incident response (IR) and legal fees, and uncertainty about their future.

“It felt like forever to get the client back online,” Paquette admits. “There were so many unknowns. We were digging through user logs, piecing together backward forensics, but our records only went back so far.”

In the end, it turned out the hacker hadn’t actually stolen any data. Using only screenshots and trickery, they’d pulled off a convincing illusion of a full database breach, leaving the client believing the worst. No data was lost, but the financial and operational toll was massive.

This was a wake-up call for Key Methods. They realized they needed more than just the ability to detect and respond to threats. They needed clear, immediate answers, especially when it mattered most.

",{"_1591":1599,"_1589":1600},"

Incident two | Managed SIEM reveals all

Not long after the incident, Huntress launched Managed Security Information and Event Management (SIEM). Key Methods jumped on board, determined to avoid ever being uncertain again. While still fine-tuning when another mass-isolation event hit, the difference was obvious.

This time, a hacker exploited a vulnerability in a client’s firewall. In the past, critical decisions had to be made in real time about whether to call in IR teams, consult legal, or notify cyber insurance. Without solid data, every decision felt like a gamble—overreacting meant wasting time and money, but hesitating could spell disaster.

With Huntress Managed SIEM in place, everything changed. Put simply, there was no more guessing. The system didn’t just flag threats—it connected the dots. Every log, every move, every breadcrumb the attacker left behind was laid out clearly.

With new technology and capabilities at their fingertips, Key Methods had complete clarity to act fast and make the right calls.

","

“Managed SIEM provides us with immediate, actionable insights, so we’re never left guessing during critical moments.”

",{"_1589":1602,"_1591":63},"

Unraveling the incident | The Huntress SOC paints a clear picture

The Huntress SOC quickly collaborated with Key Methods, providing clarity within hours. Detailed logs revealed the timeline of events and exactly where the attackers had been.

“Thanks to Managed SIEM, we had critical information fast,” said Paquette. “We reviewed the logs and immediately recognized the severity of the issue, allowing us to involve IR and legal teams quickly”

With Managed SIEM’s robust logging capabilities, Key Methods easily exported accurate, reliable data to the IR firm. “There was no question about the quality or authenticity of the logs,” Paquette noted. This significantly accelerated the investigation and led to a crucial finding: no data had been exfiltrated.

“Smaller MSPs like us usually don’t have a SOC,” Paquette explained. “With breaches in the past, we had to bring in an external team, install their tools, and wait for results. This time around, Managed SIEM handled it all. We told the SOC what we needed, ran a quick query, and immediately got clear answers like, ‘No, that executable wasn’t run anywhere else in the organization.’”

With vital insight, Key Methods swiftly shifted their focus to recovery. By isolating affected systems on day one, they could begin restoration efforts right away.

",{"_1589":1604,"_1591":1605},"

Incident three | Managed SIEM wins the race against downtime

Weeks later, another mass-isolation event unfolded, this time targeting a bustling factory—a place where assembly lines hum, conveyor belts zip, and products are packaged with non-stop precision. A place where every minute of downtime risked thousands of dollars in lost revenue.

Again, an attacker exploited a vulnerability in the client’s firewall. But this time, there was no panic.

“We got on the phone with Huntress, and a SOC analyst immediately understood the situation,” recalls Paquette. “Within hours, we identified the issue and had already begun restoring operations. This time, legal or IR teams weren’t even needed.”

Armed with real-time intelligence from the Huntress SOC and Managed SIEM, Key Methods knew the attack’s origin with unparalleled speed. The factory was back online the same day.

“The SOC analyzed every executable across all machines and confidently pinpointed exactly which devices the hackers had compromised,” Paquette explains. “Having access to such precise, actionable information is incredibly powerful.”

What could’ve been a financially devastating shutdown was a masterclass in resilience.

","

“The SOC analyzed every executable across all machines and confidently pinpointed exactly which devices the hackers had compromised. Having access to such precise, actionable information is incredibly powerful.”

",{"_1589":1607,"_1591":63},"

The power of Managed SIEM | Achieving true confidence, clarity, and control

For Key Methods, Managed SIEM brought unprecedented clarity, control, and responsiveness to their operations. With Huntress Managed SIEM, they can:

Respond to incidents in hours instead of days
Minimize client downtime and significantly cut recovery costs
Protect clients from escalating threats while avoiding unnecessary legal or forensic complications
Make decisive, high-stakes calls with confidence because they’re armed with clear insights on what happened, how it happened, and what data was affected

“It’s all about confidence and clarity,” says Paquette. “Managed SIEM provides us with immediate, actionable insights, so we’re never left guessing during critical moments.”

",{"_1589":1609,"_1591":63},"

Why Key Methods is all-in on Huntress

From day one, Huntress Managed SIEM proved its worth by helping Key Methods contain threats faster, reduce downtime, and avoid unnecessary third-party headaches. While hackers rely on staying hidden, Managed SIEM gave Key Methods complete clarity into their malicious ways.

While Managed EDR wasn’t initially a priority, it didn’t take long for Key Methods to see the power of the entire Huntress platform. Now, they’ve expanded further to make Identity Threat Detection and Response (ITDR) and Security Awareness Training (SAT) part of their offerings. Instead of treating them as optional extras, they’ve baked them into their core service plans.

What really sets Huntress apart is the technology, which is purpose-built for the Huntress SOC. This tight integration of proprietary tools and human expertise creates a defense system that radically cuts down on errors, response times, and risks.

“When your primary security layers are all unified in one platform, it’s easier to build depth with a vendor,” says Paquette. “And when everything feeds into the same SOC, it’s even better.”

","products",[1612,1630],{"_1613":1614},"product",{"_37":126,"_13":1615,"_128":1610,"_43":1616},"671c067f6144c945bfc997d2",{"_34":1617,"_58":1618,"_11":1619,"_13":1615,"_15":1207,"_17":1620,"_19":19,"_20":1621,"_60":1623,"_45":1627,"_47":1628,"_49":1619,"_50":51,"_54":55,"_56":55,"_172":1629},[],[],1736141572401,"017139400da04b248757ac73dd38eaff",{"_25":60,"_26":1622,"_22":63},{"_28":29,"_30":31,"_32":33},{"_426":1624,"_164":1625,"_15":1207,"_1626":79},"Overwhelming Data Becoming Simplified with SIEM","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F284f4bc395cf4c38ae88bfc6f9669fe3","active",{},1742154870710,"xqjdtad4mgr",{"_1613":1631},{"_37":126,"_13":1632,"_128":1610,"_43":1633},"664a2fe9c12e9dbfd3b4a0b4",{"_34":1634,"_58":1635,"_11":1636,"_13":1632,"_15":1195,"_17":1620,"_19":19,"_20":1637,"_60":1639,"_45":1644,"_47":1645,"_49":1636,"_50":51,"_54":55,"_56":55,"_172":1646},[],[],1736141572469,{"_22":63,"_26":1638,"_25":60},{"_28":29,"_30":31,"_32":33},{"_164":1640,"_15":1195,"_1641":1642,"_426":1643,"_1626":79},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fa31d628a29d240dab4e00080df8ffba1","orderDate","2024-06-04T00:00:00.000Z","Man working at a desk with headphones on",{},1742154876857,"j1wer0zj0t",{"_74":1648,"_64":1649,"_426":1650,"_62":1651},"Key Methods had seen their share of security incidents. But when one of their clients suffered a mass-isolation event, they realized they were flying blind. Attackers had accessed sensitive data, but without clear logs, they were left scrambling.","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F92852707f65d412faf9ede9ade8030f1","Key Methods Logo"," Key Methods Case Study","introSectionDescription","

Key Methods, a top managed service provider (MSP) in Washington state, has earned a solid reputation for keeping security front and center in their business. They manage more than 2,000 endpoints and support nearly 80 clients, providing all with strong solutions to tackle the toughest threats. But as they’ve learned, when it comes to cybersecurity, it’s not just about stopping attacks—it’s also about understanding what’s really going on behind the scenes.

","Fri Apr 04 2025 00:00:00 GMT-0700 (Pacific Daylight Time)","companyContactName","Dan Paquette","companyAbout","

Founded in 1998 as a small IT support company, Key Methods found their niche in providing professional technology services that let their customers focus on core business competencies without worrying about their IT infrastructure.

In 2002, they shifted their focus to proactively monitor and maintain their clients’ computer networks. This new approach of focusing on “up-time” instead of waiting for “things to break” helped them grow. Today, their team consists of nearly 20 employees, serving clients around the Pacific Northwest. They look forward to pursuing their goal to be Washington State’s premier IT services company.

","keymethods-case-study","showPdf","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fccbc23d75b9640b69566b916ea6f832a","caseStudyPdfUrl","https://cdn.builder.io/o/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F659979229f5449f28c49a65895b9d2ef?alt=media&token=e87850ca-2ec6-4625-a6d9-b2e8a487f1ad&apiKey=3eb6f92aedf74f109c7b4b0897ec39a8","companyLocation","Wenatchee, WA","heroHeadline","The MSP Who Saw It All","fullWidthQuote","

“When your primary security layers are all unified in one platform, it’s easier to build depth with a vendor. And when everything feeds into the same SOC, it’s even better.”

","

Key Methods had seen their share of security incidents. But when one of their clients suffered a mass-isolation event, they realized they were flying blind. Attackers had accessed sensitive data, but without clear logs, they were left scrambling.

",{},1745506909841,1743803252848,"5m5scffush6",{"_77":1676,"_1181":1223,"_1520":1677},"/asset/o/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F659979229f5449f28c49a65895b9d2ef?alt=media&token=e87850ca-2ec6-4625-a6d9-b2e8a487f1ad&apiKey=3eb6f92aedf74f109c7b4b0897ec39a8","_blank","Featured Success Story",{"_1520":1677,"_77":1676},"About",{},1749561775412,[],{},[],1749580736350,"2dc5eb1bcc024fcca43b7644cd21d4a1",1749565842074,"g2Awards",[1691,1710,1727,1744],{"_13":1692,"_15":1693,"_60":1694},"b1ef1fa50cc44b4cb964fcd76ce27c47","Managed SAT Awards",{"_160":1695,"_1696":1697},"Managed SAT","images",[1698,1701,1704,1707],{"_204":1699,"_426":1700},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fe6cc6492c7ad457db8613e2be1b0bf7a","Security Awareness Training Leader Small Business G2 Badges Spring 2025",{"_204":1702,"_426":1703},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fa20ef7581ec94548b774ab925b721874","Security Awareness Training Momentum Leader G2 Badges Spring 2025",{"_204":1705,"_426":1706},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fb22fd7c3f53744aeaad49a1383a8adf2","Security Awareness Training Regional Leader EMEA G2 Badges Spring 2025",{"_426":1708,"_204":1709},"Security Awareness Training Regional Leader Europe G2 Badges Spring 2025","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F8fc8eb8c2feb400dabbbe15a0e65ebd4",{"_13":1711,"_15":1712,"_60":1713},"a15035cbedea4437bf339e54f6573731","Managed ITDR Awards",{"_160":1205,"_1696":1714},[1715,1718,1721,1724],{"_204":1716,"_426":1717},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F9710816629b94b46803509bc69c90b6c","Identity Threat Detection and Response (ITDR) Leader G2 Badge Spring 2025",{"_426":1719,"_204":1720},"Identity Threat Detection and Response (ITDR) High Performer G2 Badge Spring 2025","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ffbee1654661a4853b7bdc68eba98a19b",{"_426":1722,"_204":1723},"Identity Threat Detection and Response (ITDR) Best Estimated ROI G2 Badge Spring 2025","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F4c7270fe798448eb893d35ec3a6c5230",{"_204":1725,"_426":1726},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fac3ee471f9be4debbe512f873584df07","Identity Threat Detection and Response (ITDR) Best Support G2 Badge Spring 2025",{"_13":1728,"_15":1729,"_60":1730},"f4f2c8064b7e4e92b01a3c95a41dde18","Managed EDR Awards",{"_1696":1731,"_160":1195},[1732,1735,1738,1741],{"_426":1733,"_204":1734},"Managed Detection and Response(MDR) Grid Leader G2 Badge Spring 2025","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F54010559656e44848d6f2b5e1478bd6f",{"_204":1736,"_426":1737},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F559f64e417b34c02ae35785fa6f44de1","Managed Detection and Response(MDR) High Performer Enterprise G2 Badge Spring 2025",{"_204":1739,"_426":1740},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F64b4e0f5995b44ed95804354224cb723","Managed Detection and Response(MDR) Best Support G2 Badge Spring 2025",{"_426":1742,"_204":1743},"Managed Detection and Response(MDR) Best Results G2 Badge Spring 2025","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fd748e2d9379544119bb9895ec2304877",{"_13":1745,"_15":1746,"_60":1747},"9b043f11647d490c8780d9136cf88b34","Default G2 Awards",{"_160":1748,"_1696":1749},"default",[1750,1751,1752,1754],{"_204":1736,"_426":1737},{"_204":1739,"_426":1740},{"_204":1753},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F4b380ad74f5142e682933db387225c5f",{"_204":1743,"_426":1742},"assetTypes",[1757,1760,1763,1766,1769,1770,1773,1776],{"_13":1758,"_15":1759},"65f3299e49a461b4b9c72e3c","Datasheet",{"_13":1761,"_15":1762},"65f3299e49a461b4b9c72e3e","Handbook",{"_13":1764,"_15":1765},"65f3299e49a461b4b9c72e39","On-Demand Webinar",{"_13":1767,"_15":1768},"65f3299e49a461b4b9c72e38","Report",{"_13":1345,"_15":1348},{"_13":1771,"_15":1772},"65f3299e49a461b4b9c72e3d","Video",{"_13":1774,"_15":1775},"65f3299e49a461b4b9c72e3b","Whitepaper",{"_13":1777,"_15":1778},"65f3299e49a461b4b9c72e3a","eBook","actionData","errors"]