TLDR InfoSec · LAUNCHES & TOOLS
WINDOWS 11 ADDS NEW FEATURE TO BLOCK NTLM OVER SMB
Summary from the TLDR InfoSec newsletter
NTLM over SMB is commonly used when attacking Windows domains in attacks such as pass-the-hash or password cracking. In a new update, Windows 11 will allow administrators to block NTLM responses over SMB to prevent hashes being leaked to external servers. Previously, the only way to achieve this was to disable NTLM completely