lsasrv | Detection.FYI

NTLMv1 Logon Between Client and Server

Aug 12, 2024 · attack.defense-evasion attack.lateral-movement attack.t1550.002 ·
Share on:

Detects the reporting of NTLMv1 being used between a client and server. NTLMv1 is insecure as the underlying encryption algorithms can be brute-forced by modern hardware.

Read More