NTLM.HTTP
Description
This indicates an attempt to use the NTLM over HTTP protocol.NT LAN Manager (NTLM) is an authentication protocol used on networks running Microsoft Windows. It is the successor of the older protocol, Microsoft LAN Manager (LANMAN). NTLM is a challenge-response authentication protocol.
Affected Products
NTLM over HTTP
Impact
Unexpected network communication
Technology
Browser-Based, Network-Protocol, Client-Server, Peer-to-Peer, Cloud-Based, Mobile-Device
Behavior
- Reasonable
Default Ports
- TCP/80
- TCP/443