Relaying NTLM authentication over RPC

Due to the absence of global integrity verification requirements for the RPC protocol, a man-in-the-middle attacker can relay his victim’s NTLM authentication to a target using the RPC protocol.