cyberark/ketshash

A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.

by CyberArk PowerShell GPL-3.0 licence 42 forks Created Nov 2017 View on GitHub

Stars
168
1% of cyberark's stars
Rank
#320,322
of 852,369 repos, top 38%
In PowerShell
#1,201
of 3,266 repos, top 37%

Among 852,369 repos

Compare with

160–250 stars: 104,156 repos, including ketshash

Stars along the bottom, and repos in each band on a log scale

Quick stats

Next rank
+1 star to reach #318,756
Next milestone
+53 stars to reach the top 30%
Popular
One of 490,939 repos with 100+ stars
Yearly average
19 stars a year since Nov 2017

Stars counted Recounted daily Next count around