Huntress EDR versus Privilege Escalation

Huntress’ cool dudes Topher and Dray talk us through the features of the Huntress EDR from the perspective of ThreatOps - the humans who drive the EDR at Huntress. Specifically, in this video, we discuss how Huntress’ personnel reversed brand new adversarial tradecraft, created a sophisticated detector to the Huntress EDR, and then how ThreatOps responded when that detector caught an adversary attempting to use this novel and new technique.
---
To learn more about Huntress Managed EDR, visit: https://www.huntress.com/resources/ebook/the-ultimate-buyers-guide-to-edr

Want to see the platform in action? Start Your 21-Day Huntress Trial Today at:
https://www.huntress.com/trial

#EDR #threatops #tradecraft

00:00 Intro
00:29 How ThreatOps prepares
03:30 How good detectors will catch unrelated activity
06:34 How ThreatOps does detection engineering
07:30 How ThreatOps detects IRL
13:34 ThreatOps response: Mass Isolation
15:36 Huntress reports
17:04 How ThreatOps shares

Видео Huntress EDR versus Privilege Escalation канала Huntress