Threat Recap: Huntress Managed EDR Trial by Fire | Huntress

In January 2022 Huntress detected active exploitation of the Log4Shell vulnerability against VMware Horizon servers that led to web shells and Cobalt Strike/cryptominer activity; the team rolled out their Process Insights EDR, created behavioral detectors to catch web-shell triggers, notified partners and recommended patching, restoration from backups, and defense-in-depth measures.