SX - AD - NTLM Relay Manual Mitigation
ActiveDirectoryHygiene Pack.#This Playbook is part of the
This playbook is triggered by the discovery of an exposure allowing adversary initiate an NTLM attack. The exposure is a misconfiguration found in Active Directory by an auditing tool. The playbook takes the analyst through the steps that are required to remediate this Active Directory exposure and generates a help html file for further explanation of the risk identified and remediated.
This playbook uses the following sub-playbooks, integrations, and scripts.
- SX - AD - NetBios Manual Mitigation Steps
- SX - AD - LLMNR Manual Mitigation Steps
- SX - AD - SMB Signing Manual Mitigation Steps
This playbook does not use any integrations.
This playbook does not use any scripts.
This playbook does not use any commands.
There are no inputs for this playbook.
There are no outputs for this playbook.