TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Black Hills InfoSec

How To Disable LLMNR & Why You Want To

BHIS · 2018-06-07 · Read original ↗

ATT&CK techniques detected

3 predictions
T1482Domain Trust Discovery
45%
“com / en - us / security - updates / securitybulletins / 2011 / ms11 - 030 black hills information security links : llmnr blog posts : https : / / www. blackhillsinfosec. com /? s = llmnr active directory blog posts : https : / / www. blackhillsinfosec. com /? s = active + direct…”
T1484.001Group Policy Modification
31%
“fix what broke. in my opinion, this is legacy protocol and presents enough risk that you are better to make whatever breaks work without llmnr enabled. disable llmnr with active directory gpo : active directory has a gpo you can configure to prevent its domain workstations from u…”
T1557.001Name Resolution Poisoning and SMB Relay
30%
“how to disable llmnr & why you want to how to disable llmnr & why you want to kent ickler / / link - local multicast name resolution ( llmnr ) this one is a biggie, and you ’ ve probably heard jordan, john, me, and all the others say it many many times. llmnr was ( is ) a protoco…”

Summary

Kent Ickler // Link-Local Multicast Name Resolution (LLMNR) This one is a biggie, and you’ve probably heard Jordan, John, me, and all the others say it many many times. LLMNR […]

The post How To Disable LLMNR & Why You Want To appeared first on Black Hills Information Security, Inc..