External Password Spray

Attack Tool(s): CredMaster, MSOLSpray, FireProx, FindMeAccess

• CredMaster: https://github.com/knavesec/CredMaster
• MSOLSpray: https://github.com/dafthack/MSOLSpray
• FireProx: https://github.com/ustayready/fireprox
• FindMeAccess: https://github.com/absolomb/FindMeAccess

Detection Link(s):

• Security Information and Event Management (SIEM) Log Analysis
• Active Defense and Cyber Deception
• User and Entity Behavior Analytics (UEBA)
• Cloud Event Log Analysis