g3rzi / ketshash Goto Github PK
View Code? Open in Web Editor NEWThis project forked from cyberark/ketshash
A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.
License: GNU General Public License v3.0