Hunt for credentials and strengthen authentication

I hunted for plaintext passwords in files and configurations and addressed weak Active Directory passwords and NTLMv1 authentication. This work accompanied the SQL and SMB detections within the wider Red Team follow-up, connecting observed attack opportunities to credential exposure and authentication controls.

MITRE ATT&CK Detection use-case development Attack-path analysis Telemetry requirements Security risk prioritisation KQL Microsoft Defender XDR SQL Server security SMB enumeration detection Credential exposure hunting Threat hunting Active Directory NTLM authentication

Return to the full story ←

Hunt for credentials and strengthen authentication

Viewed history

Ask about my work.