ketshash v1.5 releases: detecting suspicious privileged NTLM connections Defense ketshash v1.5 releases: detecting suspicious privileged NTLM connections do son July 24, 2019 Ketshash A little tool for detecting suspicious privileged NTLM connections, in particular, Pass-The-Hash attack, based on event... Read More Read more about ketshash v1.5 releases: detecting suspicious privileged NTLM connections