Visão Geral

Este curso apresenta os fundamentos de segurança do Active Directory, abordando arquitetura, identidades, autenticação, autorização, Group Policy, contas privilegiadas, auditoria e principais riscos de segurança.

Objetivo

Após realizar este curso, você será capaz de:

• Compreender a arquitetura segura do Active Directory
• Gerenciar identidades e privilégios
• Identificar riscos de configuração
• Aplicar controles básicos de segurança

Publico Alvo

• Administradores de Active Directory
• Administradores Windows
• Profissionais de Cybersecurity
• Analistas de SOC

Pre-Requisitos

• Conhecimentos básicos de Windows Server
• Familiaridade com redes
• Noções de DNS
• Conhecimentos básicos de Active Directory
• Familiaridade com PowerShell é recomendada

Conteúdo Programatico

Module 1: Active Directory Architecture

1. Active Directory Domain Services
2. Domains and forests
3. Organizational Units
4. Domain Controllers
5. Global Catalog
6. Sites and replication
7. Active Directory objects
8. Trust relationships
9. Directory services architecture
10. Security boundaries

Module 2: Identity and Access Management

1. User accounts
2. Computer accounts
3. Security groups
4. Group membership
5. Access Control Lists
6. Permissions
7. Delegation
8. Least privilege
9. Identity lifecycle
10. Access governance

Module 3: Authentication Security

1. Kerberos authentication
2. NTLM authentication
3. LDAP authentication
4. Authentication policies
5. Service accounts
6. Managed Service Accounts
7. Credential protection
8. Authentication risks
9. Authentication monitoring
10. Authentication hardening

Module 4: Group Policy Security

1. Group Policy architecture
2. GPO security
3. Password policies
4. Account lockout policies
5. User rights assignments
6. Security options
7. Windows Defender policies
8. Firewall policies
9. Audit policies
10. GPO governance

Module 5: Privileged Access Security

1. Privileged accounts
2. Domain Administrators
3. Enterprise Administrators
4. Administrative tiering
5. LAPS
6. Credential Guard
7. Protected Users
8. Privileged Access Workstations
9. Just-in-Time administration
10. Privileged identity protection

Module 6: Active Directory Threats

1. Credential Dumping
2. Kerberoasting
3. AS-REP Roasting
4. Pass-the-Hash
5. Pass-the-Ticket
6. DCSync
7. Golden Ticket
8. Silver Ticket
9. Lateral Movement
10. Persistence techniques

Module 7: Auditing and Monitoring

1. Windows Event Logs
2. Advanced Audit Policy
3. Authentication events
4. Account management events
5. Group membership monitoring
6. Privileged activity monitoring
7. Domain Controller auditing
8. SIEM integration
9. Threat detection
10. Security reporting

Module 8: Active Directory Security Baseline

1. Security configuration assessment
2. Privileged access review
3. Authentication hardening
4. Group Policy hardening
5. Domain Controller security
6. Credential protection
7. Audit configuration
8. Monitoring implementation
9. Security baseline validation
10. Active Directory security best practices