Removing Windows Authentication Credentials via Centralized Active Directory Account Invalidation

The invention relates to network security and more specifically to Pass-the-Hash and Pass-the-Ticket credential theft attacks. Our invention is a way to centrally trigger the removal of all previously issued authentication credentials for a user on particular client computer, thus preventing their use by attackers and to immediately stopping the spread of an attacker through the network.

---

---