Glossary: Network Attacks, Social Engineering and Indicators

authentication downgrade

Pushing Windows logins from Kerberos or NTLMv2 down to the weaker NTLMv1 or LM. The sign is NTLMv1 or LM logons in the Security log.