[object Object]
Huntress says AI mainly accelerates existing attacker tradecraft and introduces Athena to speed SOC investigations.
Huntress leaders argued that AI mostly speeds existing attacker tradecraft, including phishing, reconnaissance, and ransomware data triage, rather than creating new techniques. They described an attacker who installed Huntress EDR on their own machine, exposing an operation that had compromised more than 2,000 accounts and used Google Translate to draft phishing emails. Huntress positioned Athena as a human-led agentic SOC orchestrator that enriches alerts and automates low-complexity identity investigations, citing 97% agreement with analysts versus 95% for humans. The company also promoted an Investigations View, a read-write API, webhooks, and an MCP server.
- An attacker who installed Huntress EDR led to over 2,000 compromised accounts.
- North Korean IT-worker scams use AI to alter faces in video interviews.
- Athena scored 97% versus 95% for humans on bounded ITDR cases.
- Live lateral movement and hands-on-keyboard activity stay with human analysts.
- Attackers are targeting API keys and session tokens for frontier models.
- Vendors
- Huntress
- Products
- AthenaHuntress EDR
From the original article
6 min read at huntress.comAI has given attackers speed, and that speed is changing what it takes to catch an attack before it's too late for your business.
huntress.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.