ntlm | Detection.FYI

NTLM Brute Force

Aug 12, 2024 · attack.credential-access attack.t1110 ·
Share on:

Detects common NTLM brute force device names

Read More
NTLM Logon

Aug 12, 2024 · attack.lateral-movement attack.t1550.002 ·
Share on:

Detects logons using NTLM, which could be caused by a legacy source or attackers

Read More
Potential Remote Desktop Connection to Non-Domain Host

Aug 12, 2024 · attack.command-and-control attack.t1219 ·
Share on:

Detects logons using NTLM to hosts that are potentially not part of the domain.

Read More