Skip to content
This repository has been archived by the owner on May 11, 2018. It is now read-only.

Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber

License

Notifications You must be signed in to change notification settings

nsacyber/Pass-the-Hash-Guidance

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

22 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Pass the Hash Guidance

This project hosts scripts for aiding administrators in implementing Pass the Hash mitigations as outlined in the Reducing the Effectiveness of Pass the Hash paper.

The PtHTools module contains the main commands for helping with implementing PtH mitigations:

  • Find-PotentialPtHEvents
  • Invoke-DenyNetworkAccess
  • Edit-AllLocalAccountPasswords
  • Get-LocalAccountSummaryOnDomain
  • Invoke-SmartcardHashRefresh
  • Find-OldSmartcardHash

See the PtHTools readme file for more information on how to use them.

Guidance

Microsoft guidance

License

See LICENSE.

Disclaimer

See DISCLAIMER.

About

Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Contributors 4

  •  
  •  
  •  
  •