Blog Post

Security, Compliance, and Identity Blog
3 MIN READ

How to win the latest security race over NTLM relay

Tal Maor's avatar
Tal Maor
Icon for Microsoft rankMicrosoft
Feb 11, 2019
Detecting ExchangePriv vulnerability with Azure ATP   NTLM relay vulnerability is not a new phenomenon. With the added security mechanisms implemented in signed NTLMv2 making successful attacks s...
Updated May 11, 2021
Version 6.0
microsoft defender for identity
Tal Maor's avatar
Tal Maor
Icon for Microsoft rankMicrosoft
Feb 24, 2019

Lawrence D'souza  As long as the service that gets the relayed session validates that the packets are signed the relay will fail. For example, in the case of Ldap relay, the Ntlm authentication will still happen but the rest of the packets after the authentication will be dropped.