NTLM Brute Force — Detection Rule

Detects common NTLM brute force device names

Read the full analysis on IntelFusions