Visão Geral

Este curso apresenta técnicas e boas práticas para hardening de Domain Controllers, com foco na proteção do Active Directory, credenciais privilegiadas, autenticação, serviços, políticas de segurança, auditoria e monitoramento. O participante aprenderá a reduzir a superfície de ataque e fortalecer a infraestrutura crítica de identidade.

Objetivo

Após realizar este curso, você será capaz de:

• Avaliar a segurança de Domain Controllers
• Aplicar hardening de sistemas críticos
• Proteger autenticação e credenciais
• Configurar auditoria e monitoramento
• Reduzir a superfície de ataque do Active Directory

Publico Alvo

• Administradores de Active Directory
• Administradores Windows Server
• Profissionais de Cybersecurity
• Analistas de SOC e Blue Team

Pre-Requisitos

• Conhecimentos de Windows Server
• Familiaridade com Active Directory
• Conhecimentos de Domain Controllers
• Noções de Kerberos e NTLM
• Familiaridade com Group Policy e Event Logs é recomendada

Conteúdo Programatico

Module 1: Domain Controller Security Fundamentals

1. Domain Controller security architecture
2. Active Directory security boundaries
3. Domain Controller attack surface
4. Identity infrastructure protection
5. Privileged infrastructure
6. Security baselines
7. Defense in depth
8. Least privilege
9. Administrative tiering
10. Domain Controller security lifecycle

Module 2: Operating System Hardening

1. Windows Server security configuration
2. Security options
3. User rights assignments
4. Local security policies
5. Windows Firewall
6. Unnecessary services
7. Remote administration
8. Server Core security
9. Patch management
10. Operating system security baseline

Module 3: Active Directory Hardening

1. Domain security configuration
2. Privileged group protection
3. Domain Administrator security
4. Enterprise Administrator security
5. Organizational Unit security
6. Group Policy protection
7. Delegated administration
8. Active Directory permissions
9. Directory service security
10. Domain security baseline

Module 4: Authentication Hardening

1. Kerberos security
2. NTLM security
3. NTLM reduction
4. LDAP signing
5. LDAP channel binding
6. SMB security
7. Authentication policies
8. Protected Users
9. Credential Guard
10. Authentication security architecture

Module 5: Credential and Privilege Protection

1. Privileged account security
2. Credential theft prevention
3. LAPS
4. Managed Service Accounts
5. Credential isolation
6. Administrative tiering
7. Privileged Access Workstations
8. Least privilege
9. Just-in-Time administration
10. Privileged identity security

Module 6: Domain Controller Services Hardening

1. DNS security
2. SYSVOL protection
3. Netlogon security
4. Kerberos Key Distribution Center
5. Global Catalog
6. Active Directory Web Services
7. Windows Time Service
8. Service account protection
9. Remote management security
10. Domain Controller service baseline

Module 7: Auditing and Monitoring

1. Advanced Audit Policy
2. Authentication monitoring
3. Privileged activity monitoring
4. Directory change auditing
5. Group membership auditing
6. PowerShell logging
7. Windows Event Logs
8. SIEM integration
9. Threat detection
10. Security monitoring architecture

Module 8: Attack Surface Reduction

1. Credential Dumping prevention
2. Pass-the-Hash mitigation
3. Pass-the-Ticket mitigation
4. DCSync risk reduction
5. Kerberoasting mitigation
6. AS-REP Roasting mitigation
7. Lateral Movement prevention
8. Remote administration restrictions
9. Network segmentation
10. Domain attack surface reduction

Module 9: Hardening Assessment

1. Security configuration assessment
2. Baseline comparison
3. Privileged access review
4. Authentication configuration review
5. Service configuration assessment
6. Firewall assessment
7. Audit configuration assessment
8. Credential protection assessment
9. Vulnerability and misconfiguration analysis
10. Remediation prioritization

Module 10: Practical Domain Controller Hardening

1. Domain Controller security assessment
2. Security baseline implementation
3. Privileged account hardening
4. Authentication hardening
5. Group Policy security configuration
6. Audit policy implementation
7. Event Log monitoring
8. Attack surface reduction
9. Hardening validation
10. Practical Domain Controller hardening case studies