🐾 - 🚨 Deprecated NTLMv1 authentication protocol 👴 in use

SID: 3300139Rev: 60 views
Sourcepawpatrules
CreatedJune 1, 2022
UpdatedJune 15, 2022
Classificationpolicy-violation
alert tcp any any -> any 445 (msg:"🐾 - 🚨 Deprecated NTLMv1 authentication protocol 👴 in use"; flow:to_server, stateless; threshold:type limit, track by_dst,count 1, seconds 3600; content:"|4e 54 20 4c 41 4e 4d 41 4e 20 31 2e 30 00|"; reference:url,https://support.microsoft.com/en-us/topic/security-guidance-for-ntlmv1-and-lm-network-authentication-da2168b6-4a31-0088-fb03-f081acde6e73; metadata:created_at 2022_06_01, updated_at 2022_06_15; sid:3300139; rev:6; classtype:policy-violation;)

References

urlhttps://support.microsoft.com/en-us/topic/security-guidance-for-ntlmv1-and-lm-network-authentication-da2168b6-4a31-0088-fb03-f081acde6e73

Metadata

created at2022_06_01
updated at2022_06_15

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!