Visão Geral

Este curso apresenta o grupo Protected Users do Active Directory e seus mecanismos adicionais de proteção para contas privilegiadas. O participante compreenderá restrições de autenticação, proteção contra exposição de credenciais e integração com estratégias de hardening e tiering.

Objetivo

Após realizar este curso, você será capaz de:

• Compreender o grupo Protected Users
• Avaliar contas elegíveis
• Aplicar restrições de autenticação
• Reduzir exposição de credenciais privilegiadas

Publico Alvo

• Administradores de Active Directory
• Profissionais de Cybersecurity
• Analistas de SOC
• Profissionais de infraestrutura

Pre-Requisitos

• Conhecimentos de Active Directory
• Familiaridade com Kerberos
• Conhecimentos básicos de NTLM
• Noções de contas privilegiadas
• Familiaridade com Group Policy é recomendada

Conteúdo Programatico

Module 1: Protected Users Fundamentals

1. Protected Users group
2. Privileged account protection
3. Credential exposure risks
4. Authentication restrictions
5. Active Directory security groups
6. Protected identity concepts
7. Security boundaries
8. Account eligibility
9. Protected Users benefits
10. Implementation considerations

Module 2: Authentication Restrictions

1. Kerberos authentication
2. NTLM restrictions
3. Credential caching limitations
4. Authentication delegation restrictions
5. Credential protection
6. Service authentication considerations
7. Interactive logon considerations
8. Remote authentication
9. Compatibility implications
10. Authentication troubleshooting

Module 3: Protected Users and Credential Theft

1. Credential dumping risks
2. Pass-the-Hash mitigation
3. Pass-the-Ticket mitigation
4. Credential caching protection
5. Authentication material
6. Privileged account exposure
7. Credential reuse risks
8. Lateral Movement reduction
9. Attack surface reduction
10. Identity protection strategy

Module 4: Deployment and Governance

1. Account identification
2. Group membership management
3. Privileged account classification
4. Tiering integration
5. Deployment planning
6. Compatibility assessment
7. Change management
8. Monitoring requirements
9. Rollback considerations
10. Governance practices

Module 5: Monitoring and Practical Implementation

1. Protected account monitoring
2. Authentication event analysis
3. Windows Event Logs
4. Failed authentication analysis
5. Compatibility troubleshooting
6. Privileged account monitoring
7. Security validation
8. Configuration review
9. Hardening assessment
10. Practical Protected Users implementation cases