---
id: 5861
title: "Pass the Hash Attack Defense: AD Security 101"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/how-to-defend-against-pass-the-hash-attack/"
published_at: "2024-01-18T19:58:54Z"
tags: ["active-directory", "credential-theft", "ntlm", "defense", "pass-the-hash", "lateral-movement", "mimikatz"]
phying_url: "https://phying.com/item/5861"
lang: en
---

# Pass the Hash Attack Defense: AD Security 101

## Summary

Pass the Hash attacks skip cracking: attackers dump NTLM hashes (e.g., Mimikatz) and replay them to authenticate across networks, enabling stealthy lateral movement and privilege escalation.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2024-01-18T19:58:54Z
- **Original:** https://www.semperis.com/blog/how-to-defend-against-pass-the-hash-attack/
- **Phying News:** https://phying.com/item/5861
