cyberark/ketshash

A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.

语言：PowerShell · GitHub 星标：168 · Fork：42

在 GitHub 上查看原仓库