akira

Rebuilding an Akira Ransomware Attack Without EDR: What Huntress Found in the Leftovers

By Joseph Werle

No Comments on Rebuilding an Akira Ransomware Attack Without EDR: What Huntress Found in the Leftovers

5 Min Read

Huntress deployed its agent after Akira ransomware had already hit a victim, then reconstructed the attack from event logs, Registry artefacts and the ransomware's own log files. Here's what they found and what I'd take from it.