Identity Threat Detection & Response (ITDR)

Every organisation is a potential victim of cybercrime.

Businesses could be involved with targeted or untargeted attacks. The most common form of untargeted attack is phishing. This involves sending bogus emails to large numbers of people asking for security information and personal details or encouraging them to visit a fake website, with the goal of stealing sensitive information.

To identify potential phishing attacks, EMH Technology deploys Huntress software for our clients. This managed cybersecurity platform provides impressive 24×7 monitoring, identifying unusual behaviours such as sign-in patterns or Outlook account rules. It offers especially strong Microsoft 365 protection.

Rather than simply providing security software, Huntress combines technology with a 24/7 team of security analysts who actively monitor, verify and respond to threats. This can include instantly revoking account access, for example. It’s an impressive way to proactively deal with identity threats.

‘We are very impressed with how Huntress has worked for our clients,’ says Eric Hughes, founder of EMH Technology. ‘Every week it saves at least one client from a cyberattack, outperforming Microsoft’s own protection service. Identity Threat Detection & Response via Huntress is now a key part of our cyber security centre.’

Key Protection Services Available

Huntress’s core services include:

• Identity Threat Detection & Response (ITDR) – protects Microsoft 365 and Google Workspace accounts from account takeover and phishing attacks.
• Managed Endpoint Detection & Response (EDR) – monitors laptops, desktops and servers for suspicious activity.
• Managed Security Information and Event Management (SIEM) – collects and analyses security logs to identify threats and support compliance requirements.

How Does Huntress Work?

A lightweight Huntress agent is installed on endpoints such as PCs, laptops and servers. This agent collects security-relevant data (such as account logins). This information is sent to the Huntress platform for analysis. The platform uses a combination of automation, AI-assisted detection and human threat hunters to identify suspicious behaviour.

When a threat is detected:

1. The platform analyses the activity.
2. Huntress’ 24/7 Security Operations Centre investigates it.
3. The Security Operations Centre validates whether it is a genuine threat.
4. Huntress can automatically isolate affected devices, provide remediation guidance and assist with response actions.

Unlike many security tools that simply generate alerts, Huntress aims to deliver validated incidents with recommended actions.

Three Reasons to Use Huntress for ITDR

1. Human expertise included

Huntress includes a 24/7 Security Operations Centre and threat hunting team that performs triage and investigation on the customer’s behalf. (Huntress)

2. Continuous monitoring

The platform provides easy access to continuous monitoring and incident response.

3. Strong Microsoft 365 protection

Many cyberattacks now target identities rather than devices. Huntress’ ITDR capabilities focus on detecting account compromise, business email compromise and suspicious logins in Microsoft 365 environments.

“Ultimately, Huntress combines endpoint, identity and cloud threat detection with a 24×7 human-led Security Operations Centre,’ adds Eric. ‘We feel it’s the best cybersecurity platform for many of our clients but always look into their specific requirements before making any recommendations. So far, we have been hugely impressed with Huntress.’

Find out how EMH Technology can provide cyber security services, including Identity Threat Detection and Response, for your organisation. Contact us for an informational discussion without obligation.