Nessus can obtain information about the host by examining the NTLM SSP challenge issued during NTLM authentication, over HTTP.
Binary data http_ntlm_info.nbin