Since usernames and passwords uses sha2 hashes is there any way to use net flow to monitor these and compare the hashes and to set embedded event manager to check the hashes against set up hashes to sense this hash is flowing in areas and times at the internal on a device not connected to an IPS or Firewall.
