Visão Geral

Este curso apresenta os fundamentos de hardening aplicados a ambientes Windows, Active Directory e infraestrutura corporativa. O participante aprenderá a reduzir a superfície de ataque, fortalecer configurações, proteger identidades e privilégios, implementar controles de segurança e monitorar continuamente a postura de segurança dos sistemas.

Objetivo

Após realizar este curso, você será capaz de:

• Compreender os princípios de hardening
• Identificar configurações inseguras
• Reduzir a superfície de ataque
• Proteger identidades e privilégios
• Implementar e monitorar controles de segurança

Publico Alvo

• Administradores Windows
• Administradores de Active Directory
• Profissionais de Cybersecurity
• Analistas de SOC e Blue Team
• Profissionais de infraestrutura

Pre-Requisitos

• Conhecimentos de Windows Server
• Familiaridade com Active Directory
• Conhecimentos básicos de redes
• Noções de segurança da informação
• Familiaridade com PowerShell e Group Policy é recomendada

Conteúdo Programatico

Module 1: Windows Security Hardening Fundamentals

1. System hardening concepts
2. Security baselines
3. Attack surface reduction
4. Secure configuration principles
5. Least privilege
6. Defense in depth
7. Security configuration management
8. Hardening standards
9. Configuration assessment
10. Hardening lifecycle

Module 2: Windows Server Hardening

1. Windows Server security configuration
2. Unnecessary services
3. Windows Firewall
4. Network security configuration
5. Local security policies
6. User rights assignments
7. Security options
8. Administrative access
9. Remote management security
10. Server security baselines

Module 3: Active Directory Hardening

1. Active Directory security architecture
2. Privileged group protection
3. Administrative tiering
4. Domain Administrator protection
5. Domain Controller hardening
6. Organizational Unit security
7. Delegated administration
8. Group Policy security
9. Active Directory attack surface
10. Domain security baseline

Module 4: Identity and Credential Hardening

1. Identity security
2. Password policies
3. Account lockout
4. Privileged account management
5. Service account security
6. Managed Service Accounts
7. Credential Guard
8. Local Administrator Password Solution
9. Credential isolation
10. Authentication security

Module 5: Authentication Protocol Hardening

1. Kerberos security
2. NTLM security
3. NTLM reduction strategies
4. LDAP security
5. LDAP signing
6. LDAP channel binding
7. SMB security
8. Authentication protocol monitoring
9. Legacy protocol assessment
10. Secure authentication architecture

Module 6: Privilege and Access Control

1. Least privilege
2. Role-Based Access Control
3. Access Control Lists
4. Security groups
5. Nested group risks
6. Privileged Access Management
7. Just-in-Time administration
8. Just Enough Administration
9. Administrative workstation security
10. Privileged session protection

Module 7: Endpoint and Network Hardening

1. Endpoint protection
2. Windows Defender
3. Attack Surface Reduction rules
4. Application control
5. Network segmentation
6. Firewall policies
7. Remote access restrictions
8. RDP security
9. SMB security
10. Lateral Movement prevention

Module 8: Logging, Monitoring and Detection

1. Windows Event Logs
2. Advanced Audit Policy
3. Authentication monitoring
4. Privileged activity monitoring
5. PowerShell logging
6. Process monitoring
7. Active Directory auditing
8. SIEM integration
9. Threat hunting
10. Security detection coverage

Module 9: Vulnerability and Configuration Assessment

1. Security configuration assessment
2. Baseline comparison
3. Vulnerability identification
4. Misconfiguration analysis
5. Privileged access review
6. Account security review
7. Service exposure assessment
8. Protocol security assessment
9. Remediation prioritization
10. Hardening validation

Module 10: Hardening Implementation and Continuous Security

1. Hardening implementation planning
2. Configuration change management
3. Security baseline deployment
4. Group Policy implementation
5. Security control validation
6. Exception management
7. Continuous monitoring
8. Compliance verification
9. Security posture measurement
10. Practical Windows and Active Directory hardening case studies