Menu / Tag

#ntlm

4 items with this flavour

Build Your Own 2FA for the Windows Logon, Part 3: Gating Network LogonsOct 11, 2026Part 2 refuses every network logon for an enrolled account, which makes the account safe and useless. Part 3 adds a gate you open once with a one-time code, so SMB, RPC and WinRM work again for a short window. In C++, with the full source.Windows35 min · French Press#windows#lsa#ntlm#smb ADHardenKit: Hardening AD Without Breaking ItOct 7, 2026LDAP signing, SMB signing, NTLM, Kerberos with AES only. Every hardening checklist has them. I wrote a tool that turns them on in an order that doesn't break the domain.Tools5 min · Cappuccino#active-directory#windows-server#powershell#hardening NTLM-Analyzer: Find Out Who Still Uses NTLMOct 3, 2026Windows logs a lot of NTLM activity, but you have to piece it together yourself. I built a tool that shows which users and programs still use NTLMv1 or NTLMv2, and what already runs over Kerberos.Tools6 min · Cappuccino#active-directory#ntlm#kerberos#auditing How NTLM works in Active DirectoryMay 7, 2025How NTLM proves that you know a password without sending it, what the domain controller does, the difference between NTLMv1 and NTLMv2, and why Microsoft is phasing it out.Active Directory9 min · Cappuccino#ntlm#active-directory#authentication