Forum Discussion
Insecure Protocol Workbook
Greetings, maybe most orgs have already eliminated insecure protocols and this workbook is no longer functional? I have it added and it appears to be collecting but when I go to open the template it is completely empty. Is the Insecure Protocol aka IP still supported and if so is there any newer documentation than the blog from 2000 around it?
I am hoping to identify ntlm by user and device as the domain controllers are all logging this and the MDI agents on them are forwarding this data to Defender for Identity and Sentinel.
4 Replies
Hi, we do plan to take a look (not sure when yet), the raw data has changed since the move from MMA to AMA hence the lack of anything to report.
Clive_Watson Hey there. Any updates on this or do you think it is no longer possible to use it?
Hello, it probably been 5years since we last updated this, I'll check with the other 2 authors to make sure if there is any value in this still / or does it need a overhaul.
Checking back if you were able to find anything? It has exactly what we need to solve a few issues.
