Does HarmonyEndpoint use any type of mitigation/protection for devices that use credential snagging?

[DiegoFretes]

Does Harmony Endpoint use any type of mitigation/protection for devices that use credential snagging?

. This technique is performed using devices such as Raspberry Zero.

More information about the device and the technique.

https://zone13.io/post/Raspberry-Pi-Zero-for-credential-snagging/

https://gist.github.com/milo2012/1c638b19b61c1338e21bad23705ff8fb

https://medium.com/codex/raspberry-pi-zero-password-thief-cb2bea8d6dc0

https://www.reddit.com/r/netsecstudents/comments/mz4qbz/using_a_raspberry_pi_zero_as_a_physical_pent...

[PhoneBoy]

If I'm understanding this correctly, this is capturing password hashes sent on the wire, correct?

[DiegoFretes]

That's right

[Chris_Atkinson]

As I recall there were some general mitigation advice available for similar i.e.

- Port protection solutions ( HEP has MEPP )

- WPAD settings hardening via GPO or similar