NTLM relay attack

Named by 2 kept items in this workspace.

Search every workspace for NTLM relay attack. It matches the name as written, so it can find other things that share it.

The items that name it 2

Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use
article2026-09-17
Performed using impacket-partial-mic and related Impacket/NetExec tools against Windows authentication.
Unpatched NTLM Leakage in Windows search: URI Handler, Same Bug, No CVE, No Fix
writeup2026-06-02
Follow-on use of a captured Net-NTLMv2 hash to relay authentication against internal services.

All techniques in this workspace.