They Got In Through SonicWall. Then They Tried to Kill Every Security Tool Huntress Blog 4 February 2026 at 16:00 Huntress responded to a 2026 intrusion using compromised SonicWall VPN credentials and a revoked EnCase forensic driver to terminate EDR processes via BYOVD.