[{"_1":2,"_1181":-5,"_1182":-5},"loaderData",{"_3":4,"_7":8},"root",{"_5":6},"preprod",true,"routes/resources._index",{"_9":10,"_227":228,"_485":486,"_487":-5,"_488":-5,"_217":489,"_577":578,"_579":142,"_580":142,"_581":582},"page",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":21,"_22":23,"_37":38,"_48":49,"_136":219,"_138":220,"_140":14,"_141":142,"_221":222,"_143":144,"_145":223,"_146":224,"_225":226},"folders",[],"createdDate",1737878646775,"id","65f3299e49a461b4b9c72ac1","name","Resources","modelId","3fa669f9656b425bbe84446dd9c5a7cd","published","meta",{"_24":25,"_26":9,"_27":28,"_29":30},"hasLinks",false,"kind","lastPreviewUrl","https://staging.huntress.com/resources?builder.space=3eb6f92aedf74f109c7b4b0897ec39a8&builder.user.permissions=read%2Ccreate%2Cpublish%2CeditCode%2CeditDesigns%2CeditLayouts%2CeditLayers%2CeditContentPriority&builder.user.role.name=Developer&builder.user.role.id=developer&builder.cachebust=true&builder.preview=page&builder.noCache=true&builder.allowTextEdit=true&__builder_editing__=true&builder.overrides.page=65f3299e49a461b4b9c72ac1&builder.overrides.65f3299e49a461b4b9c72ac1=65f3299e49a461b4b9c72ac1&builder.overrides.page:/resources=65f3299e49a461b4b9c72ac1","breakpoints",{"_31":32,"_33":34,"_35":36},"xsmall",479,"small",767,"medium",991,"query",[39],{"_40":41,"_42":43,"_44":45,"_46":47},"@type","@builder.io/core:Query","property","urlPath","operator","is","value","/resources","data",{"_50":51,"_52":53,"_56":57,"_58":57,"_59":60,"_61":57,"_55":57,"_62":63,"_54":18,"_64":47,"_65":6,"_66":67,"_209":210},"openGraphDescription","Cybersecurity is dynamic and ever-changing. Stay up-to-date with the latest resources to help you elevate your security expertise. Watch webinars, download eBooks, and more.","metadata",{"_54":18,"_55":51},"title","description","titleTag","","slug","openGraphTitle","Resources | Huntress","metaDescription","openGraphImage","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F28e05784f2584d25824e4b27c802f97a","url","sitemapIndexing","blocks",[68,162,171,186],{"_40":69,"_70":71,"_15":72,"_73":74,"_148":149},"@builder.io/sdk:Element","@version",2,"builder-f3c6773ae1284218be24c398375248c6","component",{"_17":75,"_76":77},"BlogFeatureBannerSection","options",{"_78":79,"_86":87,"_88":89,"_90":91},"breadcrumbs",[80,85],{"_81":82,"_83":84},"levelText","Home","levelLinkUrl","/",{"_81":18},"heading","Huntress Resource Center","summary","

Welcome to your go-to destination for cybersecurity resources and education. Dig in and find a range of materials made to empower users of all levels with the knowledge and tools to defend against evolving cyber threats.

","featuredBlog",{"_40":92,"_15":93,"_94":95,"_46":96},"@builder.io/core:Reference","67a67e43a1912da0aa6bde9c","model","blog-posts",{"_37":97,"_11":98,"_13":99,"_15":93,"_17":100,"_19":101,"_21":21,"_22":102,"_48":104,"_136":137,"_138":139,"_140":99,"_141":142,"_143":144,"_145":144,"_146":147},[],[],1742717076617,"Huntress 2025 Cyber Threat Report: Proliferating RATs, Evolving Ransomware, and Other Findings","beafe50240af45639f2b59e6aefd89f9",{"_29":103,"_27":57,"_26":48},{"_31":32,"_33":34,"_35":36},{"_105":-5,"_17":100,"_106":107,"_108":6,"_52":109,"_114":115,"_121":122,"_123":124,"_130":131,"_58":132,"_133":134,"_88":135},"lastUpdatedDate","canonicalUrl","https://www.huntress.com/blog/huntress-2025-cyber-threat-report-proliferating-rats-evolving-ransomware-and-other-findings","featured",{"_110":25,"_54":111,"_112":25,"_55":113},"noFollow","2025 Cybersecurity Threat Report: Proliferating RATs, Evolving Ransomware, and Other Findings | Huntress","noIndex","Huntress’ 2025 Cyber Threat Report is here! Explore the year's biggest threats—RATs, phishing, ransomware—and how evolving tactics demand smarter defense.","authors",[116],{"_117":118},"author",{"_40":92,"_15":119,"_94":120},"66048598851912ddf28adf1a","people","publishDate","2025-02-11T00:00:00.000Z","categories",[125],{"_126":127},"category",{"_40":92,"_15":128,"_94":129},"65f3299e49a461b4b9c72e4d","blog-categories","thumbnail","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ffc25dbb530b84cb79bc232519d83b123?format=webp","huntress-2025-cyber-threat-report-proliferating-rats-evolving-ransomware-and-other-findings","content","

At Huntress, we like to wreck hackers. But to take them down, we first have to understand how they operate. That’s why we created the 2025 Cyber Threat Report—an in-depth exploration of the nasty tactics, trends, and techniques reshaping cybersecurity today.

Here, we highlight key findings from the past year, offering a snapshot of the malicious strategies our analysts uncovered. Whether you’re an IT professional, cybersecurity practitioner, or business owner, these insights can provide actionable guidance to help you stay one step ahead of ever-evolving cyber threats.

Top takeaways from the 2025 Cyber Threat Report

Throughout 2024, Huntress' threat analysts looked at data from thousands of organizations and millions of endpoints, revealing the key trends that show how adaptable and relentless today’s malicious hackers are.

Remote access trojans (RATs) are more popular: Over 75% of remote access incidents utilized RATs such as AsyncRAT and Jupyter. These tools are becoming more sophisticated, making multilayered defenses like endpoint detection and response (EDR) essential.
Remote monitoring and management (RMM) tools are being exploited. Attackers are weaponizing legitimate software like TeamViewer and LogMeIn to facilitate lateral movement and maintain long-term access to systems. For environments that use RMM tools, we highly suggest increasing vigilance, enhancing access controls, and closely monitoring your tools.
Ransomware strategies are evolving: Attacks are shifting from traditional encryption to data theft and extortion. Groups like RansomHub and Akira now incentivize stolen data with big rewards, making these tactics quite lucrative. The future may see ransomware operators leaning even more into extortion (or double extortion) strategies—a trend driven by the efficacy of EDR solutions and mounting pressure from government takedown efforts.
“Living off the land” techniques are on the rise: Threat actors are doubling down on using legitimate tools like Sysinternals Suite and LOLBins to evade detection. Organizations must remove unnecessary software and enforce strict execution policies to mitigate this threat.
Phishing tactics are becoming more advanced: From QR code phishing to brand impersonation, threat actors are deploying clever methods to outsmart traditional email security. Improving security awareness training and implementing layered defenses are more essential than ever to counter these sophisticated techniques.

How these trends took shape in 2024

The findings from our 2025 Cyber Threat Report are grounded in real-world data with a comprehensive view of how malicious hackers operate today. Our threat analysts observed patterns across industries like healthcare, education, government, and manufacturing, and these growing trends stood out:

Infostealers are gaining momentum: Nearly 24% of incidents involved infostealers designed to extract sensitive credentials, financial data, and other private information.
Malicious scripts are surging: Scripts made up 22% of detected attacks, using PowerShell, VBScript, and JavaScript to perform stealthy, efficient attacks.
Ransomware is fragmenting: Despite takedowns of large groups like Hive and LockBit, smaller, flexible affiliates have risen to fill the gap. Unfortunately, this led to more unpredictable, widespread attacks.

\"Industries — Industries targeted by percentage

Why these findings matter

The 2024 cybersecurity landscape exposes a simple yet alarming truth: threat actors aren’t slowing down. Because hackers' tactics and tools are evolving, you must take a proactive approach that prioritizes awareness, preparation, and consistent upgrades to defense strategies.

Understanding the tactics outlined in this report is the first essential step. By educating your teams, using multiple layers of security, and staying informed about emerging risks, you and your organization will be ready to take on any challenges that come your way.

\"Huntress — *Huntress 2025 Cyber Threat Report*

Get more from the report and stay one step ahead

The insights from our 2025 Cyber Threat Report spotlight the critical need to stay ahead of malicious hackers. With tools like RMM software and phishing techniques becoming more advanced, protecting data, systems, and users is an ongoing battle—but one you can win.

While there’s no one-size-fits-all solution, embracing layered defenses, removing unnecessary vulnerabilities, and training your team to spot threats are actionable steps everyone should take right now.

Download the entire 2025 Cyber Threat Report to gain a deeper understanding of these trends and learn more strategies for keeping your organization safe.

","

","variations",{},"lastUpdated",1744303952880,"firstPublished","testRatio",1,"createdBy","Kz459QsZDzNpORbTSiA9L6WRQc23","lastUpdatedBy","rev","tgapicw36qi","responsiveStyles",{"_150":151},"large",{"_152":153,"_154":155,"_156":157,"_158":159,"_160":161},"display","flex","flexDirection","column","position","relative","flexShrink","0","boxSizing","border-box",{"_40":69,"_70":71,"_15":163,"_73":164,"_148":169},"builder-ace00a8fbc844586b440606cca059bc3",{"_17":165,"_76":166},"ResourcesListSection",{"_167":168},"pageSize",15,{"_150":170},{"_152":153,"_154":155,"_156":157,"_158":159,"_160":161},{"_40":69,"_70":71,"_15":172,"_73":173,"_148":184},"builder-30eb1f44eb294a91b03dd7845ba2b041",{"_17":174,"_76":175},"CtaSection",{"_86":176,"_88":177,"_178":179,"_180":181,"_182":183},"See Huntress in Action","

Book a personalized demo to look at Huntress under the hood, explore the dashboard, and ask questions to our experts.

","image","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fb334206236e74724a2fff50c14cffafd","ctaText","Book a Demo","ctaUrl","/demo",{"_150":185},{"_152":153,"_154":155,"_156":157,"_158":159,"_160":161},{"_15":187,"_40":69,"_188":189,"_190":191,"_148":201},"builder-pixel-o15c1hczlu","tagName","img","properties",{"_192":193,"_194":195,"_196":57,"_197":198,"_199":159,"_200":159},"src","https://cdn.builder.io/api/v1/pixel?apiKey=3eb6f92aedf74f109c7b4b0897ec39a8","aria-hidden","true","alt","role","presentation","width","height",{"_150":202},{"_200":159,"_199":159,"_152":203,"_204":159,"_205":206,"_207":208},"inline-block","opacity","overflow","hidden","pointerEvents","none","state",{"_211":150,"_212":213},"deviceSize","location",{"_214":47,"_215":216,"_37":218},"pathname","path",[217],"resources",{},{},1741816825612,"screenshot","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ffbcc9fe382a74a199e5c3a1abeecdb25","wAnY6pD8qneav3wmIkWFzKSZXNM2","mid1z4bnl7","template","huntress","tags",[229,251,269,287,305,323,341,359,377,395,413,431,449,467],{"_37":230,"_11":231,"_13":232,"_15":233,"_17":234,"_19":235,"_21":21,"_22":236,"_48":238,"_136":247,"_138":248,"_140":249,"_141":142,"_143":144,"_145":144,"_146":250},[],[],1741042397472,"15e098a6a8674812accb7a213b828ded","Attacker Tradecraft","f1a1e5bd96a7433498b305811cb9123f",{"_26":48,"_29":237,"_27":57},{"_31":32,"_33":34,"_35":36},{"_239":240},"tag",{"_40":92,"_15":241,"_94":227,"_46":242},"65f3299e49a461b4b9c72e49",{"_15":241,"_17":234,"_21":21,"_13":243,"_19":244,"_48":245,"_146":246},1741825545298,"06a1fff4f2d64eed986229acc010c74f",{"_17":234},"dwf7g4itodd",{},1741042522065,1741042495623,"3x2j6jladge",{"_37":252,"_11":253,"_13":254,"_15":255,"_17":256,"_19":235,"_21":21,"_22":257,"_48":259,"_136":266,"_138":267,"_140":268,"_141":142,"_143":144,"_145":144,"_146":250},[],[],1741042532092,"c95e713fb73e4745b662e05f064132fd","Business Email Compromise",{"_29":258,"_26":48,"_27":57},{"_31":32,"_33":34,"_35":36},{"_239":260},{"_40":92,"_15":261,"_94":227,"_46":262},"65f3299e49a461b4b9c72e43",{"_15":261,"_17":256,"_21":21,"_13":263,"_19":244,"_48":264,"_146":265},1741825547523,{"_17":256},"5jlzpsw4cmh",{},1741042548473,1741042548467,{"_37":270,"_11":271,"_13":272,"_15":273,"_17":274,"_19":235,"_21":21,"_22":275,"_48":277,"_136":284,"_138":285,"_140":286,"_141":142,"_143":144,"_145":144,"_146":250},[],[],1741042556546,"57b097befb734c9f80105039e0d22920","Cyber Hygiene",{"_29":276,"_27":57,"_26":48},{"_31":32,"_33":34,"_35":36},{"_239":278},{"_40":92,"_15":279,"_94":227,"_46":280},"65f3299e49a461b4b9c72e4b",{"_15":279,"_17":274,"_21":21,"_13":281,"_19":244,"_48":282,"_146":283},1741825544313,{"_17":274},"46f6masle3r",{},1743459537711,1741042576900,{"_37":288,"_11":289,"_13":290,"_15":291,"_17":292,"_19":235,"_21":21,"_22":293,"_48":295,"_136":302,"_138":303,"_140":304,"_141":142,"_143":144,"_145":144,"_146":250},[],[],1741042584191,"ac394555892840d5b2c33a1552e58eb1","Endpoint Detection and Response",{"_26":48,"_29":294,"_27":57},{"_31":32,"_33":34,"_35":36},{"_239":296},{"_40":92,"_15":297,"_94":227,"_46":298},"65f3299e49a461b4b9c72e41",{"_15":297,"_17":292,"_21":21,"_13":299,"_19":244,"_48":300,"_146":301},1741825548281,{"_17":292},"y3gv5kfwrql",{},1743459525747,1741042602609,{"_37":306,"_11":307,"_13":308,"_15":309,"_17":310,"_19":235,"_21":21,"_22":311,"_48":313,"_136":320,"_138":321,"_140":322,"_141":142,"_143":144,"_145":144,"_146":250},[],[],1741046729818,"c16aefa385134b2882946ce6af432f89","Healthcare",{"_29":312,"_26":48,"_27":57},{"_31":32,"_33":34,"_35":36},{"_239":314},{"_40":92,"_15":315,"_94":227,"_46":316},"6619a1966fc1cc2a81065887",{"_15":315,"_17":310,"_21":21,"_13":317,"_19":244,"_48":318,"_146":319},1741825542581,{"_17":310},"g9gjcaky0b",{},1741046810456,1741046810452,{"_37":324,"_11":325,"_13":326,"_15":327,"_17":328,"_19":235,"_21":21,"_22":329,"_48":331,"_136":338,"_138":339,"_140":340,"_141":142,"_143":144,"_145":144,"_146":250},[],[],1741046827567,"011ecffcabff40d1abe8ac7722698099","Incident Response",{"_26":48,"_27":57,"_29":330},{"_31":32,"_33":34,"_35":36},{"_239":332},{"_40":92,"_15":333,"_94":227,"_46":334},"65f3299e49a461b4b9c72e48",{"_15":333,"_17":328,"_21":21,"_13":335,"_19":244,"_48":336,"_146":337},1741825545664,{"_17":328},"iymcif5i46",{},1743459512568,1741046883738,{"_37":342,"_11":343,"_13":344,"_15":345,"_17":346,"_19":235,"_21":21,"_22":347,"_48":349,"_136":356,"_138":357,"_140":358,"_141":142,"_143":144,"_145":144,"_146":250},[],[],1741046888182,"e6b38984e14d4a8bb7adce97bf3810f9","Mastering Cybersecurity",{"_29":348,"_26":48,"_27":57},{"_31":32,"_33":34,"_35":36},{"_239":350},{"_40":92,"_15":351,"_94":227,"_46":352},"65f3299e49a461b4b9c72e83",{"_15":351,"_17":346,"_21":21,"_13":353,"_19":244,"_48":354,"_146":355},1741825551705,{"_17":346},"3nup9tma09a",{},1741046903042,1741046903036,{"_37":360,"_11":361,"_13":362,"_15":363,"_17":364,"_19":235,"_21":21,"_22":365,"_48":367,"_136":374,"_138":375,"_140":376,"_141":142,"_143":144,"_145":144,"_146":250},[],[],1741046910337,"a7b8d4d68fdc4190ae649d6dad22f572","Neighborhood Watch",{"_29":366,"_26":48,"_27":57},{"_31":32,"_33":34,"_35":36},{"_239":368},{"_40":92,"_15":369,"_94":227,"_46":370},"65f3299e49a461b4b9c72e35",{"_15":369,"_17":364,"_21":21,"_13":371,"_19":244,"_48":372,"_146":373},1741825552046,{"_17":364},"oz0dmea2rd",{},1741046923226,1741046923221,{"_37":378,"_11":379,"_13":380,"_15":381,"_17":382,"_19":235,"_21":21,"_22":383,"_48":385,"_136":392,"_138":393,"_140":394,"_141":142,"_143":144,"_145":144,"_146":250},[],[],1741046927980,"5f7b0d7331d64978a64b3ffd72013ad3","Persistence",{"_29":384,"_26":48,"_27":57},{"_31":32,"_33":34,"_35":36},{"_239":386},{"_40":92,"_15":387,"_94":227,"_46":388},"65f3299e49a461b4b9c72e44",{"_15":387,"_17":382,"_21":21,"_13":389,"_19":244,"_48":390,"_146":391},1741825547180,{"_17":382},"xuzybtgykd",{},1741046966222,1741046966217,{"_37":396,"_11":397,"_13":398,"_15":399,"_17":400,"_19":235,"_21":21,"_22":401,"_48":403,"_136":410,"_138":411,"_140":412,"_141":142,"_143":144,"_145":144,"_146":250},[],[],1741046971917,"a5c76e57cfc5473a83ce3326f3862e6a","Phishing",{"_29":402,"_26":48,"_27":57},{"_31":32,"_33":34,"_35":36},{"_239":404},{"_40":92,"_15":405,"_94":227,"_46":406},"65f3299e49a461b4b9c72e46",{"_15":405,"_17":400,"_21":21,"_13":407,"_19":244,"_48":408,"_146":409},1741825546378,{"_17":400},"2vehfit0p0v",{},1743459489120,1741046988170,{"_37":414,"_11":415,"_13":416,"_15":417,"_17":418,"_19":235,"_21":21,"_22":419,"_48":421,"_136":428,"_138":429,"_140":430,"_141":142,"_143":144,"_145":144,"_146":250},[],[],1741046998559,"3b5592542b744520857779ea77420ef4","Ransomware",{"_27":57,"_29":420,"_26":48},{"_31":32,"_33":34,"_35":36},{"_239":422},{"_40":92,"_15":423,"_94":227,"_46":424},"65f3299e49a461b4b9c72e45",{"_15":423,"_17":418,"_21":21,"_13":425,"_19":244,"_48":426,"_146":427},1741825546761,{"_17":418},"nu5nsikn7pr",{},1743459472745,1741047011246,{"_37":432,"_11":433,"_13":434,"_15":435,"_17":436,"_19":235,"_21":21,"_22":437,"_48":439,"_136":446,"_138":447,"_140":448,"_141":142,"_143":144,"_145":144,"_146":250},[],[],1741047015358,"7101fdca01ab437aab87ae4d8e8cd80b","Security Awareness Training",{"_27":57,"_29":438,"_26":48},{"_31":32,"_33":34,"_35":36},{"_239":440},{"_40":92,"_15":441,"_94":227,"_46":442},"65f3299e49a461b4b9c72e42",{"_15":441,"_17":436,"_21":21,"_13":443,"_19":244,"_48":444,"_146":445},1741825547881,{"_17":436},"1nl47vr0jrt",{},1743459463692,1741047028989,{"_37":450,"_11":451,"_13":452,"_15":453,"_17":454,"_19":235,"_21":21,"_22":455,"_48":457,"_136":464,"_138":465,"_140":466,"_141":142,"_143":144,"_145":144,"_146":250},[],[],1741047034697,"b9b02049664c4b91981a8b694846dea8","Selling Cybersecurity",{"_26":48,"_29":456,"_27":57},{"_31":32,"_33":34,"_35":36},{"_239":458},{"_40":92,"_15":459,"_94":227,"_46":460},"65f3299e49a461b4b9c72e4a",{"_15":459,"_17":454,"_21":21,"_13":461,"_19":244,"_48":462,"_146":463},1741825544712,{"_17":454},"9rv0iw1p0sf",{},1743459453017,1741047049437,{"_37":468,"_11":469,"_13":470,"_15":471,"_17":472,"_19":235,"_21":21,"_22":473,"_48":475,"_136":482,"_138":483,"_140":484,"_141":142,"_143":144,"_145":144,"_146":250},[],[],1741047053746,"02f9f3797af94cbe9a046934b5307926","Threat Detection",{"_26":48,"_27":57,"_29":474},{"_31":32,"_33":34,"_35":36},{"_239":476},{"_40":92,"_15":477,"_94":227,"_46":478},"65f3299e49a461b4b9c72e47",{"_15":477,"_17":472,"_21":21,"_13":479,"_19":244,"_48":480,"_146":481},1741825545979,{"_17":472},"gtxvjvyzpw4",{},1743459443723,1741047065928,"searchAssetTypes","Whitepaper","searchTags","searchText",[490,520,537,555],{"_15":491,"_17":492,"_48":493},"6630f5f97cba6b0523424543","The Road to Security Hygiene",{"_58":494,"_130":495,"_496":497,"_227":505,"_121":516,"_105":517,"_518":519},"the-road-to-security-hygiene","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fcde39c5109284019a182ac6de3456954","assetType",{"_40":92,"_15":498,"_94":499,"_46":500},"65f3299e49a461b4b9c72e3b","asset-types",{"_15":498,"_17":486,"_21":21,"_13":501,"_19":502,"_48":503,"_146":504},1741790302440,"50c69b616da14a22b2d7092dd07fd641",{"_17":486},"8n8w393kdnk",[506,511],{"_239":507},{"_40":92,"_15":279,"_94":227,"_46":508},{"_15":279,"_17":274,"_21":21,"_13":281,"_19":244,"_48":509,"_146":510},{"_17":274},"qpn63lyiu9l",{"_239":512},{"_40":92,"_15":261,"_94":227,"_46":513},{"_15":261,"_17":256,"_21":21,"_13":263,"_19":244,"_48":514,"_146":515},{"_17":256},"rscqoeak3bi","April 30, 2024","December 10, 2024","sortDate",["D",1733839626203],{"_15":521,"_17":522,"_48":523},"65f3299e49a461b4b9c72f87","Battling Business Email Compromise with Huntress ITDR",{"_58":524,"_130":525,"_496":526,"_227":529,"_121":534,"_105":535,"_518":536},"battling-business-email-compromise-with-huntress-mdr-for-microsoft-365","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F1b64f8a3ddc74ee8b364b3b34c7f0570",{"_40":92,"_15":498,"_94":499,"_46":527},{"_15":498,"_17":486,"_21":21,"_13":501,"_19":502,"_48":528,"_146":504},{"_17":486},[530],{"_239":531},{"_40":92,"_15":261,"_94":227,"_46":532},{"_15":261,"_17":256,"_21":21,"_13":263,"_19":244,"_48":533,"_146":515},{"_17":256},"December 19, 2023","December 3, 2024",["D",1733256574153],{"_15":538,"_17":539,"_48":540},"65f3299e49a461b4b9c72fbd","The True Value of People-Powered Cybersecurity",{"_58":541,"_130":542,"_496":543,"_227":546,"_121":552,"_105":553,"_518":554},"the-true-value-of-people-powered-cybersecurity","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fa5b9fe7d5db74be3b8f098975cb3ee67",{"_40":92,"_15":498,"_94":499,"_46":544},{"_15":498,"_17":486,"_21":21,"_13":501,"_19":502,"_48":545,"_146":504},{"_17":486},[547],{"_239":548},{"_40":92,"_15":477,"_94":227,"_46":549},{"_15":477,"_17":472,"_21":21,"_13":479,"_19":244,"_48":550,"_146":551},{"_17":472},"3ocfx9bytqv","December 18, 2023","June 30, 2024",["D",1719760250214],{"_15":556,"_17":557,"_48":558},"66140a4190c2f719e7813019","A More Affordable Way to Enhance Your Healthcare Security",{"_58":559,"_130":560,"_496":561,"_227":564,"_121":575,"_105":516,"_518":576},"a-more-affordable-way-to-enhance-your-healthcare-security","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fd490e5a4d0654eb4a5cae6aab0fe620e",{"_40":92,"_15":498,"_94":499,"_46":562},{"_15":498,"_17":486,"_21":21,"_13":501,"_19":502,"_48":563,"_146":504},{"_17":486},[565,570],{"_239":566},{"_40":92,"_15":315,"_94":227,"_46":567},{"_15":315,"_17":310,"_21":21,"_13":317,"_19":244,"_48":568,"_146":569},{"_17":310},"f22svj3wyct",{"_239":571},{"_40":92,"_15":333,"_94":227,"_46":572},{"_15":333,"_17":328,"_21":21,"_13":335,"_19":244,"_48":573,"_146":574},{"_17":328},"bl966wffdus","April 8, 2024",["D",1714484248826],"builderApiKey","3eb6f92aedf74f109c7b4b0897ec39a8","totalPages","pageNumber","common",{"_583":584,"_1093":1094,"_1159":1160},"headerContent",[585,666,763,835,913,930],{"_11":586,"_136":587,"_145":144,"_48":588,"_138":657,"_17":594,"_13":658,"_21":21,"_143":144,"_140":659,"_22":660,"_141":142,"_19":662,"_37":663,"_15":664,"_146":665},[],{},{"_589":590,"_591":592,"_593":594,"_595":596},"type","Menu","linkProperties",{},"menuText","Platform","columns",[597,631],{"_598":599,"_603":71,"_589":604,"_605":6,"_54":606,"_607":608},"footerLink",{"_64":600,"_601":602},"/platform","text","Platform Overview","columnSpan","Link List","showTitle","Huntress Managed Security Platform","links",[609,616,621,626],{"_64":610,"_589":611,"_612":613,"_88":614,"_54":615},"/platform/managed-edr","Text Link","icon","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Feb16a0fc49194ef3a61c385bd0d0f312","

Get full endpoint visibility, detection, and response.

","Managed EDR",{"_88":617,"_612":618,"_589":611,"_54":619,"_64":620},"

Empower your teams with science-backed security awareness training.

","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fcd0acdb221c84200a837d97a6bac46a7","Managed Security Awareness Training","/platform/security-awareness-training",{"_589":611,"_88":622,"_612":623,"_64":624,"_54":625},"

Protect your Microsoft 365 identities and email environments.

","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ffd3a938d7dfc41bdac34c3f46a36afb2","/platform/managed-itdr","Managed ITDR",{"_54":627,"_612":628,"_64":629,"_88":630,"_589":611},"Managed SIEM","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F5638ee75bf42433c81332c153db5cb15","/platform/siem","

Managed threat response and robust compliance support at a predictable price.

",{"_605":25,"_589":632,"_603":142,"_108":6,"_598":633,"_54":634,"_635":636},"Card",{},"Learn More Card","cardContentReference",{"_40":92,"_15":637,"_94":638,"_46":639},"be5723c7f6674c6db1ebfc79503cb723","custom-cards",{"_13":640,"_48":641,"_37":648,"_17":643,"_141":142,"_136":649,"_138":650,"_143":144,"_11":651,"_19":652,"_140":653,"_145":144,"_15":637,"_21":21,"_22":654,"_146":656},1738695869997,{"_88":642,"_17":643,"_644":183,"_645":646,"_180":646,"_182":183,"_130":647},"Try Huntress for free and deploy in minutes to start fighting threats.","Learn More","linkUrl","linkLabelText","Request a Demo","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F4dcf43805cea496b92a4b04334297b54",[],{},1749580539246,[],"6debca3e2db24468b466376fc09f0c11",1738695944669,{"_29":655,"_27":57,"_26":48},{"_31":32,"_33":34,"_35":36},"e5gnqp2rz1b",1749740747998,1749525643074,1749565841689,{"_26":48,"_29":661,"_27":57},{"_33":34,"_31":32,"_35":36},"a8d3d337534a4f77aa8de03d557b7d7c",[],"1644f670abc3422fb4ae58c911ab52e0","8yaj9lonffp",{"_15":667,"_141":142,"_19":662,"_37":668,"_11":669,"_138":670,"_17":671,"_48":672,"_22":758,"_140":760,"_136":761,"_143":144,"_145":144,"_13":762,"_21":21,"_146":665},"5233b983391e46bea1a73aa4e64e3e1f",[],[],1749578645008,"Solutions",{"_591":673,"_589":590,"_593":671,"_595":674},{},[675,689,712],{"_607":676,"_589":604,"_54":687,"_603":142,"_605":6,"_598":688},[677,680,684],{"_54":400,"_64":678,"_589":611,"_612":679},"/solutions/topics/phishing","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fd8af97b52a364281ae4ae771eac29f60",{"_64":681,"_54":682,"_612":683,"_589":611},"/solutions/topics/cybersecurity-compliance","Compliance","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F5437345f68ab4fecb25e1bf64d596f05",{"_54":256,"_64":685,"_589":611,"_612":686},"/solutions/topics/business-email-compromise","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fe0006e0247a84d538abfdb56270b1971","Solutions by Topic",{},{"_54":690,"_598":691,"_605":6,"_603":142,"_589":604,"_607":692},"Solutions by Industry",{},[693,697,701,704,708],{"_64":694,"_612":695,"_589":611,"_54":696},"/industries/education","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F4951efeb175d46a28d43a56e44f1aaa6","Education",{"_589":611,"_612":698,"_64":699,"_54":700},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F2c6e56c396984defa968946c3305fd5d","/industries/financial-services","Finance",{"_612":702,"_589":611,"_54":310,"_64":703},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fad40fb4e0e8f4fc3a283928e18d2cb07","/industries/healthcare",{"_612":705,"_589":611,"_54":706,"_64":707},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fa1a16399f6f94c3da8e42ddbe735c1c1","Manufacturing","/industries/manufacturing",{"_612":709,"_64":710,"_589":611,"_54":711},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fdafe6a53f78a407c80691541d7e292b9","/industries/state-and-local-government","State & Local Government",{"_605":6,"_598":713,"_54":714,"_108":6,"_589":632,"_715":716,"_635":718,"_603":142},{"_64":57,"_601":643},"Featured Resource","cardContentOverride",{"_88":717},"

Packed with the information, tools, and guidance you need to keep your organization running smoothly and, most importantly, your patients safe.

",{"_94":217,"_40":92,"_15":719,"_46":720},"66c49e7c03769aca3efd1adf",{"_15":719,"_17":721,"_21":21,"_13":722,"_19":723,"_48":724,"_146":757},"Healthcare Cybersecurity Success Kit",1742716627143,"5c10263d01de417681f67c6df9d9a9d4",{"_17":721,"_58":725,"_121":726,"_105":727,"_52":728,"_106":731,"_108":25,"_732":6,"_130":733,"_734":735,"_736":735,"_227":737,"_496":748,"_182":755,"_180":756},"healthcare-cybersecurity-success-kit","2024-08-21T00:00:00.000Z","2024-08-22T14:36:33.220Z",{"_54":729,"_55":730,"_112":25,"_110":25},"Healthcare Cybersecurity Success Kit | Huntress","This Healthcare Cybersecurity Success Kit is packed with the information, tools, and guidance you need to keep your organization running smoothly and, most importantly, your patients safe.","https://www.huntress.com/resources/healthcare-cybersecurity-success-kit","gated","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F25165b11288e4ab8ab0dc72832f4eb5e","preGateContent","

Hackers are hitting healthcare hard. From large hospital networks to small rural clinics, nothing’s off-limits anymore.

But you don't have to take it. This Healthcare Cybersecurity Success Kit is packed with the information, tools, and guidance you need to keep your organization running smoothly and, most importantly, your patients safe.

","postGateContent",[738,743],{"_239":739},{"_40":92,"_15":315,"_94":227,"_46":740},{"_15":315,"_17":310,"_21":21,"_13":317,"_19":244,"_48":741,"_146":742},{"_17":310},"7be2d10lxdm",{"_239":744},{"_40":92,"_15":351,"_94":227,"_46":745},{"_15":351,"_17":346,"_21":21,"_13":353,"_19":244,"_48":746,"_146":747},{"_17":346},"0i6eit5qhgkp",{"_40":92,"_15":749,"_94":499,"_46":750},"65f3299e49a461b4b9c72e40",{"_15":749,"_17":751,"_21":21,"_13":752,"_19":502,"_48":753,"_146":754},"Success Kit",1741790296798,{"_17":751},"j9kuffhdnad","https://www.huntress.com/industries/healthcare/healthcare-resource-kit","Get the Healthcare Cybersecurity Success Kit","bdoszqhtvlc",{"_29":759,"_27":57,"_26":48},{"_33":34,"_31":32,"_35":36},1749565841905,{},1749530546748,{"_13":764,"_15":765,"_17":766,"_19":662,"_21":21,"_22":767,"_37":769,"_48":770,"_136":831,"_138":832,"_140":833,"_141":142,"_143":144,"_145":144,"_11":834,"_146":665},1749560149759,"94db9c6a65e047acb4ac7d4d2ea0da30","Why Huntress",{"_27":57,"_26":48,"_29":768},{"_31":32,"_33":34,"_35":36},[],{"_591":771,"_593":766,"_595":772,"_589":590},{},[773,791,804],{"_589":604,"_605":6,"_54":774,"_607":775,"_598":790,"_603":142},"Who We Serve",[776,780,786],{"_64":777,"_589":611,"_612":778,"_54":779},"/why-huntress/managed-service-providers","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F11f54e8f5fb54aadbf4c71effaab65a5","Managed Service Providers",{"_589":611,"_612":781,"_54":782,"_64":783,"_784":785},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ff0209e5a35e34a25a31075aca24dec96","Value Added Resellers","/why-huntress/value-added-resellers","altText","Platform Icon",{"_589":611,"_612":787,"_54":788,"_64":789},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ff257bebdca1c45cab6259f8436ca7221","Business & IT Teams","/why-huntress/businesses-it-teams",{},{"_603":142,"_605":6,"_598":792,"_54":793,"_589":604,"_607":794},{},"The Huntress Difference",[795,800],{"_589":611,"_612":796,"_64":797,"_784":798,"_54":799},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F4cc0a301d59343f08fa3fd23661a7726","/why-huntress/24-7-soc","Issue Detected - Alert Icon","Huntress SOC",{"_64":801,"_612":802,"_589":611,"_54":803},"/success-stories","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fff7b259c7c5c408f9747e8a28989015b","Case Studies",{"_589":604,"_603":142,"_605":6,"_598":805,"_607":808,"_54":830,"_108":6},{"_601":806,"_64":807},"Compare All","/comparison",[809,812,815,818,821,824,827],{"_54":810,"_64":811,"_589":611},"Bitdefender","/comparison/huntress-vs-bitdefender",{"_64":813,"_589":611,"_54":814},"/comparison/huntress-vs-blackpoint","Blackpoint",{"_589":611,"_54":816,"_64":817},"CrowdStrike","/comparison/huntress-vs-crowdstrike",{"_589":611,"_64":819,"_54":820},"/comparison/huntress-vs-datto","Datto",{"_589":611,"_64":822,"_54":823},"/comparison/huntress-vs-sentinelone","SentinelOne",{"_54":825,"_64":826,"_589":611},"Sophos","/comparison/huntress-vs-sophos",{"_54":828,"_64":829,"_589":611},"Webroot","/comparison/huntress-vs-webroot","Compare Huntress",{},1749574641163,1749565841954,[],{"_143":144,"_48":836,"_15":904,"_138":905,"_140":906,"_22":907,"_145":144,"_17":18,"_136":909,"_19":662,"_11":910,"_21":21,"_37":911,"_141":142,"_13":912,"_146":665},{"_589":590,"_593":18,"_591":837,"_595":838},{},[839,862,886],{"_605":6,"_54":840,"_603":142,"_607":841,"_598":860,"_589":604},"Resource Center",[842,845,848,851,854,857],{"_589":611,"_64":843,"_54":844},"/resources?assetTypes=Datasheet","Datasheets",{"_54":846,"_64":847,"_589":611},"Ebooks","/resources?assetTypes=eBook",{"_54":849,"_589":611,"_64":850},"Reports","/resources?assetTypes=Report",{"_64":852,"_589":611,"_54":853},"/resources?assetTypes=On-Demand+Webinar","On-Demand Webinars",{"_64":855,"_54":856,"_589":611},"/resources?assetTypes=Whitepaper","Whitepapers",{"_64":858,"_54":859,"_589":611},"/resources?assetTypes=Video","Videos",{"_601":861,"_64":47},"View All Resources",{"_607":863,"_598":884,"_603":142,"_605":25,"_54":885,"_589":604},[864,868,872,876,880],{"_612":865,"_589":611,"_54":866,"_64":867},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F7f4ca3bd558f425da4f12b81befbb279","Blog","/blog",{"_64":869,"_589":611,"_612":870,"_54":871},"/upcoming-events","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F6aa1f0e921a844ed9975b8c477720a6c","Upcoming Events",{"_54":873,"_64":874,"_589":611,"_612":875},"Support Documentation","https://support.huntress.io/hc/en-us","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fac02933fbb964cdf9e6c8b3b2280fa5d",{"_54":877,"_589":611,"_612":878,"_64":879},"Integrations","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F75378b21898340b6b863c3b68ae0a980","/integrations",{"_54":881,"_64":882,"_612":883,"_589":611},"Huntress Hub","https://hub.huntress.com/#/page/login","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fabe11db97e084bfeb9d370076781caea",{},"Other Resources",{"_54":887,"_108":6,"_589":604,"_607":888,"_605":6,"_598":903,"_603":142},"Produced by Huntress",[889,894,899],{"_178":890,"_64":891,"_589":892,"_54":893},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fea18a565ed0e4bdda1f6881a955de34c","/tradecraft-tuesday","Image Link","Tradecraft Tuesday",{"_54":895,"_589":892,"_64":896,"_784":897,"_178":898},"Fireside Chat","/firesidechat","Fireside Chat Community Series","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F98c34785dc62414381fe4d25b1d355a9",{"_178":900,"_54":901,"_589":892,"_64":902},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F5f3ffde6942c41b6885da8bc727a4cc5","Product Lab Channel","/product-lab-channel",{},"e21c3f198af24be5b52f72480500ff2d",1749676549589,1749565842009,{"_27":57,"_29":908,"_26":48},{"_31":32,"_33":34,"_35":36},{},[],[],1749560786283,{"_13":914,"_15":915,"_17":916,"_19":662,"_21":21,"_22":917,"_37":919,"_48":920,"_136":926,"_138":927,"_140":928,"_141":142,"_143":144,"_145":144,"_11":929,"_146":665},1749561737294,"84190317c5f14f32ae91ba95a125371a","Pricing",{"_27":57,"_26":48,"_29":918},{"_31":32,"_33":34,"_35":36},[],{"_591":921,"_589":925,"_593":916,"_644":922},{"_64":922,"_601":916,"_923":924},"/pricing","target","_self","Link",{},1749579606414,1749565842037,[],{"_22":931,"_141":142,"_48":933,"_17":1084,"_145":144,"_13":1086,"_37":1087,"_19":662,"_136":1088,"_143":144,"_11":1089,"_138":1090,"_15":1091,"_21":21,"_140":1092,"_146":665},{"_27":57,"_29":932,"_26":48},{"_35":36,"_31":32,"_33":34},{"_595":934,"_593":1084,"_591":1085,"_589":590},[935,957,972],{"_589":604,"_607":936,"_603":142,"_598":955,"_54":956,"_605":6},[937,941,946,950],{"_54":938,"_64":939,"_589":611,"_612":940},"Our Story","/company/our-company","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F38494b4ddb7a45a78ca20d43a03176bf",{"_612":942,"_64":943,"_54":944,"_589":611,"_784":945},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F33845c53ebd4472b9806d7a76b742616","/company/leadership","Leadership","Leadership Icon",{"_612":947,"_64":948,"_54":949,"_589":611},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F3a5e883de76c4f5686d64a1dc0dbe7b6","/company/press","Latest News",{"_64":951,"_612":952,"_54":953,"_784":954,"_589":611},"/awards-and-accolades","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F107b70abda5841439fca3a13a02929cf","Awards","Awards Icon",{},"About Huntress",{"_54":958,"_603":142,"_598":959,"_607":960,"_589":604},"Careers",{},[961,965,967],{"_612":962,"_589":611,"_784":963,"_64":964,"_54":958},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F80b5a5a31d2245e49c4038e433792c22","Verify Icon","/company/careers",{"_589":611,"_64":869,"_54":871,"_612":966},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F1490131472ce4b94a57df268649354a0",{"_64":968,"_612":969,"_589":611,"_54":970,"_784":971},"/contact-us","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F3324b3cde0b84f3b8749e3f6577c6540","Contact Us","SAT Content Icon",{"_589":632,"_605":6,"_635":973,"_108":6,"_598":1079,"_54":1082,"_715":1083,"_603":142},{"_94":974,"_15":975,"_40":92,"_46":976},"success-stories","2d71ea3f63c447d7a361e21502a74e15",{"_37":977,"_11":978,"_13":979,"_15":975,"_17":980,"_19":981,"_21":21,"_22":982,"_48":984,"_136":1075,"_138":1076,"_140":1077,"_141":142,"_143":223,"_145":223,"_146":1078},[],[],1743800825454,"Key Methods","84071192fd6043e68c9d5963be3e722b",{"_29":983,"_26":48,"_27":57},{"_31":32,"_33":34,"_35":36},{"_985":986,"_987":988,"_1013":1014,"_52":1050,"_1055":1056,"_1044":1057,"_1058":1059,"_1060":1061,"_1062":980,"_58":1063,"_1064":6,"_130":1065,"_1066":1067,"_784":1053,"_17":980,"_1068":1069,"_1070":1071,"_1072":1073,"_88":1074},"heroSubhead","How Key Methods Stopped Guessing and Took Control with Huntress Managed SIEM","mainContent",{"_989":990},"section",[991,995,997,999,1001,1004,1006,1009,1011],{"_992":993,"_994":57},"columnOne","

Prologue | Key Methods’ history with Huntress

Key Methods first tried Huntress in 2022. They rolled out Huntress Managed Endpoint Detection and Response (EDR) across all their clients for a month, but they scaled back when no major security issues popped up. Instead, they took a more selective approach, using it only when they spotted something suspicious or during new client onboarding.
\n

","columnTwo",{"_992":996,"_994":57},"

Incident one | Managed EDR quickly shuts down a threat

In 2023, Huntress Managed EDR came in handy, flagging suspicious activity inside a client’s network. This wasn’t just any client, however. It was a company handling vast sums of money and a treasure trove of personal data. In other words, a prime target for hackers.

Huntress’ Security Operations Center (SOC) stepped in quickly, working hand-in-hand with Key Methods. In no time, endpoints were isolated, access was shut down, and the threat was contained.

Crisis averted.

…or so it seemed.

",{"_994":57,"_992":998},"

Post-incident | The decision no MSP wants to make

The real challenge started after the immediate threat was handled. Key Methods was left with critical questions that would inform their next steps.

“All we knew was the attackers had possibly seen things they shouldn’t have,” says Dan Paquette, Managing Partner at Key Methods.

The entire Key Methods team was on edge, haunted by questions like, “How did the hackers get in?” “What data was compromised?” “Could they still be in the system?”

With little in terms of logs or data to go on, they had to make the call no MSP ever wants to make—shut everything down.

",{"_992":1000,"_994":57},"

Before Huntress Managed SIEM | Playing a costly game of guesswork

The impact was huge. The client faced over a week of downtime, more than $75,000 on incident response (IR) and legal fees, and uncertainty about their future.

“It felt like forever to get the client back online,” Paquette admits. “There were so many unknowns. We were digging through user logs, piecing together backward forensics, but our records only went back so far.”

In the end, it turned out the hacker hadn’t actually stolen any data. Using only screenshots and trickery, they’d pulled off a convincing illusion of a full database breach, leaving the client believing the worst. No data was lost, but the financial and operational toll was massive.

This was a wake-up call for Key Methods. They realized they needed more than just the ability to detect and respond to threats. They needed clear, immediate answers, especially when it mattered most.

",{"_994":1002,"_992":1003},"

Incident two | Managed SIEM reveals all

Not long after the incident, Huntress launched Managed Security Information and Event Management (SIEM). Key Methods jumped on board, determined to avoid ever being uncertain again. While still fine-tuning when another mass-isolation event hit, the difference was obvious.

This time, a hacker exploited a vulnerability in a client’s firewall. In the past, critical decisions had to be made in real time about whether to call in IR teams, consult legal, or notify cyber insurance. Without solid data, every decision felt like a gamble—overreacting meant wasting time and money, but hesitating could spell disaster.

With Huntress Managed SIEM in place, everything changed. Put simply, there was no more guessing. The system didn’t just flag threats—it connected the dots. Every log, every move, every breadcrumb the attacker left behind was laid out clearly.

With new technology and capabilities at their fingertips, Key Methods had complete clarity to act fast and make the right calls.

","

“Managed SIEM provides us with immediate, actionable insights, so we’re never left guessing during critical moments.”

",{"_992":1005,"_994":57},"

Unraveling the incident | The Huntress SOC paints a clear picture

The Huntress SOC quickly collaborated with Key Methods, providing clarity within hours. Detailed logs revealed the timeline of events and exactly where the attackers had been.

“Thanks to Managed SIEM, we had critical information fast,” said Paquette. “We reviewed the logs and immediately recognized the severity of the issue, allowing us to involve IR and legal teams quickly”

With Managed SIEM’s robust logging capabilities, Key Methods easily exported accurate, reliable data to the IR firm. “There was no question about the quality or authenticity of the logs,” Paquette noted. This significantly accelerated the investigation and led to a crucial finding: no data had been exfiltrated.

“Smaller MSPs like us usually don’t have a SOC,” Paquette explained. “With breaches in the past, we had to bring in an external team, install their tools, and wait for results. This time around, Managed SIEM handled it all. We told the SOC what we needed, ran a quick query, and immediately got clear answers like, ‘No, that executable wasn’t run anywhere else in the organization.’”

With vital insight, Key Methods swiftly shifted their focus to recovery. By isolating affected systems on day one, they could begin restoration efforts right away.

",{"_992":1007,"_994":1008},"

Incident three | Managed SIEM wins the race against downtime

Weeks later, another mass-isolation event unfolded, this time targeting a bustling factory—a place where assembly lines hum, conveyor belts zip, and products are packaged with non-stop precision. A place where every minute of downtime risked thousands of dollars in lost revenue.

Again, an attacker exploited a vulnerability in the client’s firewall. But this time, there was no panic.

“We got on the phone with Huntress, and a SOC analyst immediately understood the situation,” recalls Paquette. “Within hours, we identified the issue and had already begun restoring operations. This time, legal or IR teams weren’t even needed.”

Armed with real-time intelligence from the Huntress SOC and Managed SIEM, Key Methods knew the attack’s origin with unparalleled speed. The factory was back online the same day.

“The SOC analyzed every executable across all machines and confidently pinpointed exactly which devices the hackers had compromised,” Paquette explains. “Having access to such precise, actionable information is incredibly powerful.”

What could’ve been a financially devastating shutdown was a masterclass in resilience.

","

“The SOC analyzed every executable across all machines and confidently pinpointed exactly which devices the hackers had compromised. Having access to such precise, actionable information is incredibly powerful.”

",{"_992":1010,"_994":57},"

The power of Managed SIEM | Achieving true confidence, clarity, and control

For Key Methods, Managed SIEM brought unprecedented clarity, control, and responsiveness to their operations. With Huntress Managed SIEM, they can:

Respond to incidents in hours instead of days
Minimize client downtime and significantly cut recovery costs
Protect clients from escalating threats while avoiding unnecessary legal or forensic complications
Make decisive, high-stakes calls with confidence because they’re armed with clear insights on what happened, how it happened, and what data was affected

“It’s all about confidence and clarity,” says Paquette. “Managed SIEM provides us with immediate, actionable insights, so we’re never left guessing during critical moments.”

",{"_992":1012,"_994":57},"

Why Key Methods is all-in on Huntress

From day one, Huntress Managed SIEM proved its worth by helping Key Methods contain threats faster, reduce downtime, and avoid unnecessary third-party headaches. While hackers rely on staying hidden, Managed SIEM gave Key Methods complete clarity into their malicious ways.

While Managed EDR wasn’t initially a priority, it didn’t take long for Key Methods to see the power of the entire Huntress platform. Now, they’ve expanded further to make Identity Threat Detection and Response (ITDR) and Security Awareness Training (SAT) part of their offerings. Instead of treating them as optional extras, they’ve baked them into their core service plans.

What really sets Huntress apart is the technology, which is purpose-built for the Huntress SOC. This tight integration of proprietary tools and human expertise creates a defense system that radically cuts down on errors, response times, and risks.

“When your primary security layers are all unified in one platform, it’s easier to build depth with a vendor,” says Paquette. “And when everything feeds into the same SOC, it’s even better.”

","products",[1015,1033],{"_1016":1017},"product",{"_40":92,"_15":1018,"_94":1013,"_46":1019},"671c067f6144c945bfc997d2",{"_37":1020,"_11":1021,"_13":1022,"_15":1018,"_17":627,"_19":1023,"_21":21,"_22":1024,"_48":1026,"_136":1030,"_138":1031,"_140":1022,"_141":142,"_143":144,"_145":144,"_146":1032},[],[],1736141572401,"017139400da04b248757ac73dd38eaff",{"_26":48,"_29":1025,"_27":57},{"_31":32,"_33":34,"_35":36},{"_784":1027,"_130":1028,"_17":627,"_1029":6},"Overwhelming Data Becoming Simplified with SIEM","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F284f4bc395cf4c38ae88bfc6f9669fe3","active",{},1742154870710,"ra5fj2yrfx8",{"_1016":1034},{"_40":92,"_15":1035,"_94":1013,"_46":1036},"664a2fe9c12e9dbfd3b4a0b4",{"_37":1037,"_11":1038,"_13":1039,"_15":1035,"_17":615,"_19":1023,"_21":21,"_22":1040,"_48":1042,"_136":1047,"_138":1048,"_140":1039,"_141":142,"_143":144,"_145":144,"_146":1049},[],[],1736141572469,{"_27":57,"_29":1041,"_26":48},{"_31":32,"_33":34,"_35":36},{"_130":1043,"_17":615,"_1044":1045,"_784":1046,"_1029":6},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fa31d628a29d240dab4e00080df8ffba1","orderDate","2024-06-04T00:00:00.000Z","Man working at a desk with headphones on",{},1742154876857,"1fx45in0i4n",{"_55":1051,"_62":1052,"_784":1053,"_54":1054},"Key Methods had seen their share of security incidents. But when one of their clients suffered a mass-isolation event, they realized they were flying blind. Attackers had accessed sensitive data, but without clear logs, they were left scrambling.","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F92852707f65d412faf9ede9ade8030f1","Key Methods Logo"," Key Methods Case Study","introSectionDescription","

Key Methods, a top managed service provider (MSP) in Washington state, has earned a solid reputation for keeping security front and center in their business. They manage more than 2,000 endpoints and support nearly 80 clients, providing all with strong solutions to tackle the toughest threats. But as they’ve learned, when it comes to cybersecurity, it’s not just about stopping attacks—it’s also about understanding what’s really going on behind the scenes.

","Fri Apr 04 2025 00:00:00 GMT-0700 (Pacific Daylight Time)","companyContactName","Dan Paquette","companyAbout","

Founded in 1998 as a small IT support company, Key Methods found their niche in providing professional technology services that let their customers focus on core business competencies without worrying about their IT infrastructure.

In 2002, they shifted their focus to proactively monitor and maintain their clients’ computer networks. This new approach of focusing on “up-time” instead of waiting for “things to break” helped them grow. Today, their team consists of nearly 20 employees, serving clients around the Pacific Northwest. They look forward to pursuing their goal to be Washington State’s premier IT services company.

","companyName","keymethods-case-study","showPdf","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fccbc23d75b9640b69566b916ea6f832a","caseStudyPdfUrl","https://cdn.builder.io/o/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F659979229f5449f28c49a65895b9d2ef?alt=media&token=e87850ca-2ec6-4625-a6d9-b2e8a487f1ad&apiKey=3eb6f92aedf74f109c7b4b0897ec39a8","companyLocation","Wenatchee, WA","heroHeadline","The MSP Who Saw It All","fullWidthQuote","

“When your primary security layers are all unified in one platform, it’s easier to build depth with a vendor. And when everything feeds into the same SOC, it’s even better.”

","

Key Methods had seen their share of security incidents. But when one of their clients suffered a mass-isolation event, they realized they were flying blind. Attackers had accessed sensitive data, but without clear logs, they were left scrambling.

",{},1745506909841,1743803252848,"wxih46qvis8",{"_64":1080,"_601":643,"_923":1081},"/asset/o/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F659979229f5449f28c49a65895b9d2ef?alt=media&token=e87850ca-2ec6-4625-a6d9-b2e8a487f1ad&apiKey=3eb6f92aedf74f109c7b4b0897ec39a8","_blank","Featured Success Story",{"_923":1081,"_64":1080},"About",{},1749561775412,[],{},[],1749580736350,"2dc5eb1bcc024fcca43b7644cd21d4a1",1749565842074,"g2Awards",[1095,1114,1131,1148],{"_15":1096,"_17":1097,"_48":1098},"b1ef1fa50cc44b4cb964fcd76ce27c47","Managed SAT Awards",{"_126":1099,"_1100":1101},"Managed SAT","images",[1102,1105,1108,1111],{"_178":1103,"_784":1104},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fe6cc6492c7ad457db8613e2be1b0bf7a","Security Awareness Training Leader Small Business G2 Badges Spring 2025",{"_178":1106,"_784":1107},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fa20ef7581ec94548b774ab925b721874","Security Awareness Training Momentum Leader G2 Badges Spring 2025",{"_178":1109,"_784":1110},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fb22fd7c3f53744aeaad49a1383a8adf2","Security Awareness Training Regional Leader EMEA G2 Badges Spring 2025",{"_784":1112,"_178":1113},"Security Awareness Training Regional Leader Europe G2 Badges Spring 2025","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F8fc8eb8c2feb400dabbbe15a0e65ebd4",{"_15":1115,"_17":1116,"_48":1117},"a15035cbedea4437bf339e54f6573731","Managed ITDR Awards",{"_126":625,"_1100":1118},[1119,1122,1125,1128],{"_178":1120,"_784":1121},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F9710816629b94b46803509bc69c90b6c","Identity Threat Detection and Response (ITDR) Leader G2 Badge Spring 2025",{"_784":1123,"_178":1124},"Identity Threat Detection and Response (ITDR) High Performer G2 Badge Spring 2025","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Ffbee1654661a4853b7bdc68eba98a19b",{"_784":1126,"_178":1127},"Identity Threat Detection and Response (ITDR) Best Estimated ROI G2 Badge Spring 2025","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F4c7270fe798448eb893d35ec3a6c5230",{"_178":1129,"_784":1130},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fac3ee471f9be4debbe512f873584df07","Identity Threat Detection and Response (ITDR) Best Support G2 Badge Spring 2025",{"_15":1132,"_17":1133,"_48":1134},"f4f2c8064b7e4e92b01a3c95a41dde18","Managed EDR Awards",{"_1100":1135,"_126":615},[1136,1139,1142,1145],{"_784":1137,"_178":1138},"Managed Detection and Response(MDR) Grid Leader G2 Badge Spring 2025","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F54010559656e44848d6f2b5e1478bd6f",{"_178":1140,"_784":1141},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F559f64e417b34c02ae35785fa6f44de1","Managed Detection and Response(MDR) High Performer Enterprise G2 Badge Spring 2025",{"_178":1143,"_784":1144},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F64b4e0f5995b44ed95804354224cb723","Managed Detection and Response(MDR) Best Support G2 Badge Spring 2025",{"_784":1146,"_178":1147},"Managed Detection and Response(MDR) Best Results G2 Badge Spring 2025","https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2Fd748e2d9379544119bb9895ec2304877",{"_15":1149,"_17":1150,"_48":1151},"9b043f11647d490c8780d9136cf88b34","Default G2 Awards",{"_126":1152,"_1100":1153},"default",[1154,1155,1156,1158],{"_178":1140,"_784":1141},{"_178":1143,"_784":1144},{"_178":1157},"https://cdn.builder.io/api/v1/image/assets%2F3eb6f92aedf74f109c7b4b0897ec39a8%2F4b380ad74f5142e682933db387225c5f",{"_178":1147,"_784":1146},"assetTypes",[1161,1164,1167,1170,1173,1174,1177,1178],{"_15":1162,"_17":1163},"65f3299e49a461b4b9c72e3c","Datasheet",{"_15":1165,"_17":1166},"65f3299e49a461b4b9c72e3e","Handbook",{"_15":1168,"_17":1169},"65f3299e49a461b4b9c72e39","On-Demand Webinar",{"_15":1171,"_17":1172},"65f3299e49a461b4b9c72e38","Report",{"_15":749,"_17":751},{"_15":1175,"_17":1176},"65f3299e49a461b4b9c72e3d","Video",{"_15":498,"_17":486},{"_15":1179,"_17":1180},"65f3299e49a461b4b9c72e3a","eBook","actionData","errors"]