Visão Geral

Este curso apresenta os principais ataques relacionados a senhas e credenciais, além de mecanismos de proteção, políticas de senha, autenticação multifator e controles de identidade.

Objetivo

Após realizar este curso, você será capaz de:

• Compreender ataques contra senhas
• Identificar riscos de credenciais
• Avaliar políticas de autenticação
• Implementar controles de proteção

Publico Alvo

• Profissionais de Cybersecurity
• SOC e Blue Team
• Administradores de sistemas
• Penetration Testers

Pre-Requisitos

• Conhecimentos básicos de redes
• Familiaridade com Windows e Linux
• Noções de autenticação
• Conhecimentos básicos de Active Directory
• Noções de segurança da informação

Conteúdo Programatico

Module 1: Password Security Fundamentals

1. Password authentication
2. Credential lifecycle
3. Password attack surface
4. Weak passwords
5. Password reuse
6. Credential exposure
7. Authentication risks
8. Password security principles
9. Identity protection
10. Password security assessment

Module 2: Password Spraying and Brute Force

1. Password Spraying
2. Brute Force attacks
3. Online authentication attacks
4. Account lockout considerations
5. Authentication rate limiting
6. Attack indicators
7. Detection strategies
8. SIEM monitoring
9. Defensive controls
10. Attack response

Module 3: Credential Stuffing

1. Credential Stuffing concepts
2. Password reuse
3. Credential breach databases
4. Automated authentication abuse
5. Account takeover
6. Detection indicators
7. Risk assessment
8. Credential monitoring
9. MFA protection
10. Credential Stuffing defense

Module 4: Password Hashes and Hash Cracking

1. Password hashing
2. Hash algorithms
3. Password hash storage
4. Salt and key stretching
5. Hash exposure
6. Offline password attacks
7. Hash cracking concepts
8. Password complexity
9. Secure password storage
10. Hash security assessment

Module 5: Password Policies and MFA

1. Password policies
2. Password length
3. Password history
4. Account lockout
5. Password expiration
6. Risk-based authentication
7. Multi-Factor Authentication
8. MFA methods
9. MFA security
10. Authentication policy design

Module 6: Detection and Defense

1. Authentication monitoring
2. Failed login analysis
3. Suspicious login patterns
4. Account compromise indicators
5. SIEM correlation
6. Identity threat detection
7. Password attack detection
8. Credential protection
9. Incident response
10. Password security best practices