GitHub repository: mehrdad-shokri/ketshash
Primary language: PowerShell
Description: A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.