Pass-the-Hash Attacks and How to Prevent them in Windows Domains
Hackers often start out with nothing more than a low-level user account and then work to gain additional privileges that will allow them to take over the network. One of the methods that is commonly used to acquire these privileges is a pass-the-hash attack. Here are five steps to prevent a pass-the-hash attack in a Windows domain.
Security Authority Subsystem Service Active Directory Windows Defender Credential Local Security Authority Subsystem Service Least User Least User Access
Source: bleepingcomputer.com