Visão Geral

Este curso apresenta técnicas de hardening para ambientes Active Directory, com foco na redução da superfície de ataque, proteção de Domain Controllers, credenciais, autenticação, privilégios e mecanismos de auditoria.

Objetivo

Após realizar este curso, você será capaz de:

• Avaliar a segurança do Active Directory
• Aplicar hardening em componentes críticos
• Proteger credenciais e privilégios
• Implementar auditoria e monitoramento

Publico Alvo

• Administradores de Active Directory
• Administradores Windows Server
• Profissionais de Cybersecurity
• Blue Team e SOC

Pre-Requisitos

• Conhecimentos de Active Directory
• Familiaridade com Domain Controllers
• Conhecimentos de Kerberos e NTLM
• Conhecimentos de Group Policy
• Noções de Windows Event Logs

Conteúdo Programatico

Module 1: Active Directory Security Baseline

1. Active Directory security architecture
2. Security baselines
3. Domain security configuration
4. Forest security
5. Domain Controller security
6. Organizational Unit security
7. Privileged infrastructure
8. Security boundaries
9. Configuration assessment
10. Baseline implementation

Module 2: Identity and Privilege Hardening

1. Privileged account management
2. Least privilege
3. Administrative tiering
4. Domain Administrator protection
5. Enterprise Administrator protection
6. Privileged group management
7. Delegated administration
8. LAPS
9. Protected Users
10. Privileged identity hardening

Module 3: Authentication Hardening

1. Kerberos security
2. NTLM security
3. NTLM reduction
4. LDAP signing
5. LDAP channel binding
6. SMB security
7. Authentication policies
8. Credential Guard
9. Authentication monitoring
10. Authentication security baseline

Module 4: Domain Controller Hardening

1. Operating system hardening
2. Windows Firewall
3. Service reduction
4. Patch management
5. Remote administration controls
6. Domain Controller services
7. DNS security
8. SYSVOL protection
9. Netlogon security
10. Domain Controller security baseline

Module 5: Attack Surface Reduction

1. Credential Dumping mitigation
2. Kerberoasting mitigation
3. AS-REP Roasting mitigation
4. Pass-the-Hash mitigation
5. Pass-the-Ticket mitigation
6. DCSync protection
7. Golden Ticket risk reduction
8. Lateral Movement prevention
9. Privilege escalation prevention
10. Attack surface reduction

Module 6: Group Policy and Security Controls

1. Secure GPO design
2. Password policies
3. User rights assignments
4. Security options
5. Windows Defender policies
6. Firewall policies
7. Audit policies
8. Administrative restrictions
9. GPO delegation
10. Group Policy security validation

Module 7: Monitoring and Auditing

1. Advanced Audit Policy
2. Authentication events
3. Account management events
4. Privileged activity
5. Directory changes
6. Group membership changes
7. Domain Controller events
8. SIEM integration
9. Threat detection
10. Security monitoring

Module 8: Practical Hardening

1. Active Directory security assessment
2. Configuration baseline comparison
3. Privileged account review
4. Authentication assessment
5. Domain Controller assessment
6. GPO security assessment
7. Audit configuration review
8. Remediation planning
9. Hardening validation
10. Practical Active Directory hardening cases