NTLM
Technology & Computing abbreviation · Cybersecurity
| Stands for | NT LAN Manager |
|---|---|
| Categories | Technology & Computing |
NTLM stands for NT LAN Manager, a cybersecurity abbreviation.
A family of Microsoft challenge-response authentication protocols used in Windows networks before and alongside Kerberos. It remains enabled in many environments for compatibility with older systems and applications.
Example: The pentest relayed NTLM authentication from a printer to take over a file server.
Usage notes
NTLM is vulnerable to pass-the-hash and relay attacks, and captured hashes can be cracked offline. Kerberos replaced it as the default domain protocol in Windows 2000. Microsoft declared all versions of NTLM deprecated in 2024 and plans to disable it in future Windows releases.
Related abbreviations
More cybersecurity abbreviations
- MITM – Man-in-the-middle
- MSSP – Managed security service provider
- mTLS – Mutual TLS
- NAC – Network access control
- NDR – Network detection and response
- NGFW – Next-generation firewall
- NVD – National Vulnerability Database
- OAuth – Open Authorization
- OIDC – OpenID Connect
- OSCP – Offensive Security Certified Professional
- OSINT – Open-source intelligence
- OTP – One-time password