These slides expose how LLMNR poisoning works – how a single poisoned response silently captures usernames, hashes, and tokens as the first step toward lateral movement across your network.

Each slide breaks down what makes this attack so dangerous in practice and walks through concrete defenses to help you catch legacy weaknesses before attackers do.

For a full definition and a technical breakdown of how these poisoning attacks work, check our glossary article on LLMNR poisoning attack.