4 ms·
I have a script running weekly that dumps the NTLM hashes from our domain controller and compares them against the HIBP hash list. It will then automatically fo
by chelmzy 8y ago
I have a script running weekly that dumps the NTLM hashes from our domain controller and compares them against the HIBP hash list. It will then automatically force a password reset on the user's account if found in the compromised hash list.
You can also subscribe your domain to get email alerts when one of your email addresses pops up in a new breach.
- who-knows95 8y agoAHH that is a brilliant idea, do you have this script posted? i guess, if i added the password databases to a blacklist it would do the same thing? i did see that, and i am tempted to test it on some of our clients to see what the feedback is. i know when i run a few of their emails through they do pop up in some of the breaches. kind regards