H3-2023-0006¶

Detection: Pass-The-Hash

Description¶

The attack technique pass the hash which is used to move laterally inside the network was detected.

Impact¶

An attacker may have had access to your environment. The events listed in the should be investigated to determine if an attacker was present.

References¶

• Pass-The-Hash detection
• CWE-836: Use of Password Hash Instead of Password for Authentication