Detecting Pass-The-hash with Honeypots
blog.stealthbits.com