home/categories/security/mukul975-anthropic-cybersecurity-skills-skills-hunting-for-ntlm-relay-attacks-skill-md
securitytesting-security
hunting-for-ntlm-relay-attacks
Detect NTLM relay attacks by analyzing Windows Event 4624 logon type 3 with NTLMSSP authentication, identifying IP-to-hostname mismatches, Responder traffic signatures, SMB signing status, and suspicious authentication patterns across the domain.
maintainer
mukul975
آخر تحديث 4/6/2026
النجوم
4240
التفرعات
464
quick start
Installation and usage
Detect NTLM relay attacks by analyzing Windows Event 4624 logon type 3 with NTLMSSP authentication, identifying IP-to-hostname mismatches, Responder traffic signatures, SMB signing status, and suspicious authentication patterns across the domain.
التثبيت
$ install --globalskills.sh
الاستخدام
بعد التثبيت، يمكنك استخدام هذه المهارة بتشغيل الأمر التالي في الطرفية:
skills use hunting-for-ntlm-relay-attacks