Forum Discussion

m_krone's avatar
m_krone
Brass Contributor
May 06, 2019

Identity theft using Pass-the-Hash attack verify false positive

Hello,   I have some messages about "Identity theft using Pass-the-Hash attack" in our ATA. Checked also some things on the client but cannot find some suspicious activities. I opened a MS ticket s...
EliOfek's avatar
EliOfek
Icon for Microsoft rankMicrosoft
May 06, 2019

m_krone , sorry to hear that no one replied to your support case yet, this is not usually the case.

Can you please send me the support case ID so I can make sure someone responds? (and also check what happened...)

mparpaley's avatar
mparpaley
Copper Contributor
Jul 12, 2019

Hello. Can you please share experience how to eliminate this false positive? 

  • m_krone's avatar
    m_krone
    Brass Contributor
    Jul 15, 2019
    Hi, unfortunately, we couldn't got any solution for this. We are currently investigating by our self. Since Eli got a contact for us which was responding we tried to solve the problem but after 3 weeks of just standard mails that Microsoft has currently too many requests with an delay to up to 4 weeks we finally got a closure email of the ticket without and solution. Also a response to work on this ticket got denied and now its gone.

Resources