Forum Discussion

sjEntra's avatar
sjEntra
Copper Contributor
Apr 15, 2025

Insecure Protocol Workbook

Greetings, maybe most orgs have already eliminated insecure protocols and this workbook is no longer functional? I have it added and it appears to be collecting but when I go to open the template it is completely empty. Is the Insecure Protocol aka IP still supported and if so is there any newer documentation than the blog from 2000 around it?

I am hoping to identify ntlm by user and device as the domain controllers are all logging this and the MDI agents on them are forwarding this data to Defender for Identity and Sentinel.

2 Replies

  • Clive_Watson's avatar
    Clive_Watson
    Bronze Contributor

    Hello, it probably been 5years since we last updated this, I'll check with the other 2 authors to make sure if there is any value in this still / or does it need a overhaul. 

    • SJMPLS's avatar
      SJMPLS
      Copper Contributor

      Checking back if you were able to find anything? It has exactly what we need to solve a few issues.

Resources