Articles Tagged “NTLM”
5 articles tagged “NTLM”, newest first.
-
How Could PetitPotam Relay a Domain Controller's Authentication to AD CS?
PetitPotam (CVE-2021-36942) made domain controllers send NTLM authentication that was relayed to AD CS web enrollment. How coercion and relay worked, and the...
-
Why a Windows File Share Works Sometimes and Fails at Other Times — Troubleshooting Kerberos, NTLM, and Credentials
Diagnose intermittent Windows file-share access using symptoms and logs. Check names versus IP addresses, app-only failures, blank passwords, error 1219, res...
-
SMB Signing and LDAP Channel Binding — Closing the "Other Half" of NTLM Defense in Practice
SMB signing and LDAP signing/channel binding limit relay damage while you retire NTLM. We cover OS defaults, audit events, enforcement, and how to fix apps a...
-
NTLM and Kerberos Explained with Diagrams — Why Authentication Falls Back to NTLM
Diagrams compare NTLM and Kerberos: challenge/response, TGTs and service tickets, Negotiate's NTLM fallback without an SPN, relay attacks, Pass-the-Hash, and...
-
Will NTLM Deprecation Stop Your Business Apps? — How to Collect Audit Logs, and the Order in Which to Kill Dependencies
This article covers how to find where Windows and business apps depend on NTLM: audit policies, NTLM/Operational events 8001-8004, causes and fixes, and SMB ...