Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

CVE-2024-43451 Zero-Day (NTLM Hash Disclosure Spoofing Vulnerability)

Steven Lim@KQLWizard

•updated Jul 1, 2025•2•1•77

KQL Query

Microsoft Sentinel (KQL)

Tags

T1550.002 - Pass the Hash TA0005 - Defense Evasion TA0008 - Lateral Movement T1075 - Pass the Hash S0122 - Pass-The-Hash Toolkit C0036 - Pikabot Distribution February 2024 C0045 - ShadowRay C0048 - Operation MidnightEclipse T1218.005 - Mshta T1170 - Mshta T1027.006 - HTML Smuggling T1021.002 - SMB/Windows Admin Shares T1557.001 - LLMNR/NBT-NS Poisoning and SMB Relay T1496.003 - SMS Pumping TA0002 - Execution TA0006 - Credential Access TA0009 - Collection TA0040 - Impact Network Connection File Creation Credential Access Exploit Attempt Windows Windows Defender Atp Windows Ntlm Auth Windows Smb Clientkql

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?