Rebuilding an Akira Ransomware Attack Without EDR: What Huntress Found in the Leftovers
No Comments on Rebuilding an Akira Ransomware Attack Without EDR: What Huntress Found in the Leftovers
Huntress deployed its agent after Akira ransomware had already hit a victim, then reconstructed the attack from event logs, Registry artefacts and the ransomware's own log files. Here's what they found and what I'd take from it.