---
id: 5855
title: "How to Defend Against an Overpass the Hash Attack"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/how-to-defend-against-overpass-the-hash-attack/"
published_at: "2024-02-09T01:38:33Z"
tags: ["active-directory", "credential-theft", "kerberos", "ntlm", "detection", "mimikatz", "overpass-the-hash"]
phying_url: "https://phying.com/item/5855"
lang: en
---

# How to Defend Against an Overpass the Hash Attack

## Summary

Overpass the Hash converts a captured NTLM hash into fresh Kerberos tickets, giving attackers an authenticated session beyond Pass the Hash. Details the Mimikatz technique, detection, and defenses.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2024-02-09T01:38:33Z
- **Original:** https://www.semperis.com/blog/how-to-defend-against-overpass-the-hash-attack/
- **Phying News:** https://phying.com/item/5855