Visão Geral

Este curso apresenta o Windows Defender Credential Guard e seus mecanismos de proteção de credenciais contra técnicas de roubo e reutilização. O participante compreenderá virtualização baseada em segurança, isolamento de segredos, compatibilidade, implantação, monitoramento e limitações do recurso.

Objetivo

Após realizar este curso, você será capaz de:

• Compreender o Credential Guard
• Configurar proteção de credenciais
• Avaliar compatibilidade
• Monitorar o recurso
• Reduzir riscos de credential theft

Publico Alvo

• Administradores Windows
• Administradores de Active Directory
• Analistas de Cybersecurity
• Profissionais de SOC

Pre-Requisitos

• Conhecimentos de Windows
• Familiaridade com Active Directory
• Conhecimentos básicos de virtualização
• Noções de Kerberos e NTLM
• Familiaridade com Group Policy é recomendada

Conteúdo Programatico

Module 1: Credential Guard Fundamentals

1. Credential Guard concepts
2. Credential theft risks
3. Credential isolation
4. Virtualization-Based Security
5. Security boundaries
6. Protected authentication material
7. LSASS protection
8. Windows security architecture
9. Credential Guard benefits
10. Credential Guard limitations

Module 2: Virtualization-Based Security

1. VBS architecture
2. Hypervisor-based isolation
3. Secure kernel
4. Virtual Secure Mode
5. Isolated security components
6. Trust boundaries
7. Credential isolation
8. Hardware requirements
9. Security dependencies
10. VBS security considerations

Module 3: Credential Protection

1. LSASS credential protection
2. NTLM credential protection
3. Kerberos credential protection
4. Domain authentication
5. Cached credentials
6. Credential theft prevention
7. Pass-the-Hash mitigation
8. Pass-the-Ticket mitigation
9. Privileged credential protection
10. Credential security architecture

Module 4: Deployment and Configuration

1. Credential Guard deployment
2. Group Policy configuration
3. Mobile Device Management concepts
4. Registry-based configuration
5. Enablement modes
6. Policy scope
7. Deployment planning
8. Compatibility assessment
9. Configuration validation
10. Deployment troubleshooting

Module 5: Monitoring and Troubleshooting

1. Credential Guard event logging
2. Windows Event Logs
3. VBS status verification
4. Credential Guard status monitoring
5. Authentication compatibility
6. Application compatibility
7. Configuration troubleshooting
8. Security validation
9. Endpoint monitoring
10. Operational troubleshooting

Module 6: Practical Credential Guard Implementation

1. Endpoint readiness assessment
2. Hardware requirement validation
3. Policy implementation
4. Configuration verification
5. Authentication testing
6. Event Log analysis
7. Security validation
8. Compatibility assessment
9. Hardening review
10. Practical Credential Guard deployment cases