Archived Content
In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.Microsoft Releases Guidance for Mitigating PetitPotam NTLM Relay Attacks
Last Revised
On July 23, Microsoft released KB5005413: Mitigating NTLM Relay Attacks on Active Directory Certificate Services (AD CS) to address a NTLM Relay Attack named PetitPotam. CISA encourages users and administrators to review KB5005413 and apply the necessary mitigations.
This product is provided subject to this Notification and this Privacy & Use policy.