Mitigating Pass-the-Hash (PtH) Attacks and Other ...

Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft Techniques Mitigating the risk of lateral movement and privilege escalation 1 Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft Techniques This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT. This document is provided as-is. Information and views expressed in this document, including URL and Other Internet Web site references, may change without notice. You bear the risk of using it. Copyright 2012 Microsoft Corporation. All rights reserved. The names of actual companies and products mentioned herein may be the trademarks of their respective owners. 2 Authors Patrick Jungles Microsoft Trustworthy Computing Aaron Margosis Microsoft Consulting Services Mark Simos Microsoft Consulting Services Laura Robinson Microsoft IT Information Security and Risk Management Roger Grimes Microsoft IT Information Security and Risk Management Contributors Microsoft Office 365 Security Microsoft Windows Security and Identity Team Joe Bialek Benjamin Godard Paul Rich Justin Hendricks Nathan Ide Paul Leach Paul Miller Michiko Short Microsoft Trustworthy Computing Adam Shostack David Seidman Ellen Cram Kowalczyk Georgeo Pulikkathara Graham Calladine Ian Hellen John Lambert Mike Reavey Jo

document contains step-by-step instructions on deploying the mitigations described in the first part of the document. What is the PtH attack? The Pass-the-Hash (PtH) attack and other credential theft and reuse types of attack use an iterative two stage process. First, an attacker must obtains local administrative access on at least one computer..

Loading..

Tags:

  Mitigation

Information

Related search queries