steampaster.blogg.se - Windows script control download

Windows script control download how to#
Windows script control download install#
Windows script control download plus#

Windows script control download plus#

A Digital Download Package with over 200 PowerShell scripts written by the course author, plus security templates and other tools used in the labs.

Harden essential protocols against exploitation, such as SSL, RDP, DNS, PowerShell Remoting, and SMB.

Windows script control download install#

Install and manage a full Windows Public Key Infrastructure (PKI), including smart cards, certificate auto-enrollment, Online Certificate Status Protocol (OCSP) web responders, and detection of spoofed root Certificate Authentications (CAs).

Configure mitigations against pass-the-hash attacks, Kerberos Golden Tickets, Remote Desktop Protocol (RDP) man-in-the-middle attacks, Security Access Token abuse, and other attacks discussed in SEC504 and other SANS hacking courses.

Configure PowerShell remoting to use Just Enough Admin (JEA) policies to create a Windows version of Linux sudo and setuid root.

Prevent exploitation using AppLocker and other Windows OS hardening techniques in a scalable way with PowerShell.

Block the lateral movement of hackers and ransomware using Windows Firewall, IPsec, admin credential protections, and more.

Use Group Policy and PowerShell to grant administrative privileges in a way that reduces the harm if an attack succeeds (assume breach).

Use PowerShell to access the WMI service for remote command execution, searching event logs, reconnaissance, and more.

Harden PowerShell itself against abuse, and enable transcription logging for your SIEM.

Execute PowerShell scripts on remote systems.

Write PowerShell scripts for security automation.

PowerShell ransomware - too easy, all too easy.

PowerShell malware and lateral movement inside the LAN.

PowerShell hardening of TLS, RDP and SMB.

PowerShell certificate authentication, such as with YubiKeys.

PowerShell scripts to replace Microsoft LAPS.

PowerShell scripting of Active Directory.

PowerShell scripting of Windows Management Instrumentation (WMI).

In fact, this course (SEC505) has had at least one day of PowerShell for more than ten years, and now PowerShell is the centerpiece of the course. The course author, Jason Fossen, is a SANS Institute Fellow and has been writing and teaching for SANS since 1998.

Come have fun learning PowerShell and Windows security at the same time. This is a fun course and a real eye-opener, even for Windows administrators with years of experience.

Windows script control download how to#

On the last day of the course, we will write our own ransomware script to see how to defend against scripts like it. Unfortunately, PowerShell is being abused by hackers and malware authors. WE WILL WRITE A POWERSHELL RANSOMWARE SCRIPT AND DEFEND AGAINST IT In this course we will learn how to use PowerShell as a platform for managing security, as a "force multiplier" for the Blue Team, and as a rocket booster for your Windows IT career. You can learn basic PowerShell syntax on YouTube for free, but this week goes far beyond syntax. You don't have to know any PowerShell to attend this course, we will learn it together during the labs. Employers are looking for IT people with PowerShell skills. Learning PowerShell is also useful for another kind of security: job security. There is another reason why PowerShell has become popular: PowerShell is just plain fun! You will be surprised at how much you can accomplish with PowerShell in a short period of time - it's much more than just a scripting language, and you don't have to be a coding guru to get going. It's easy to find Windows security checklists, but how do you automate those changes across thousands of machines? How do you safely run scripts on many remote boxes? In this course you will learn not just Windows and Active Directory security, but how to manage security using PowerShell.ĭON'T JUST LEARN POWERSHELL SYNTAX, LEARN HOW TO LEVERAGE POWERSHELL AS A FORCE MULTIPLIER FOR WINDOWS SECURITY You will leave this course ready to start writing your own PowerShell scripts to help secure your Windows environment. In particular, we will use PowerShell to secure Windows against many of the attacks described in the MITRE ATT&CK matrix, especially stolen administrative credentials, ransomware, hacker lateral movement inside the LAN, and insecure Windows protocols, like RDP and SMB. Harden Windows Server and Windows 10/11 against skilled attackers.Defend against PowerShell malware such as ransomware.Safely run PowerShell scripts on thousands of hosts over the network.Write PowerShell scripts for Windows and Active Directory security automation.In this course (SEC505) you will learn how to: WINDOWS SECURITY AUTOMATION MEANS POWERSHELL