Visão Geral

Este curso apresenta os fundamentos de gerenciamento, proteção e monitoramento de contas privilegiadas em ambientes Windows e Active Directory. Aborda riscos associados a privilégios elevados, modelos de administração, controles de acesso e estratégias para reduzir o impacto de comprometimentos.

Objetivo

Após realizar este curso, você será capaz de:

• Identificar contas privilegiadas e seus riscos
• Aplicar controles de proteção
• Implementar princípios de least privilege
• Monitorar atividades privilegiadas

Publico Alvo

• Administradores de Windows e Active Directory
• Analistas de Cybersecurity
• Profissionais de SOC e Blue Team
• Profissionais de infraestrutura

Pre-Requisitos

• Conhecimentos de Windows Server
• Familiaridade com Active Directory
• Conhecimentos básicos de Group Policy
• Noções de autenticação e autorização
• Familiaridade com PowerShell é recomendada

Conteúdo Programatico

Module 1: Privileged Account Fundamentals

1. Privileged account concepts
2. Administrative accounts
3. Domain administrators
4. Enterprise administrators
5. Local administrators
6. Service accounts
7. Built-in privileged groups
8. Privileged identities and attack surface
9. Risks of excessive privileges
10. Privileged account lifecycle

Module 2: Privileged Groups and Permissions

1. Active Directory privileged groups
2. Group membership management
3. Nested privileged groups
4. Delegated administration
5. Access Control Lists
6. Security descriptors
7. Permission inheritance
8. Excessive permissions
9. Privilege review
10. Administrative access governance

Module 3: Privileged Access Management

1. Least privilege
2. Privileged Access Management concepts
3. Just-in-Time administration
4. Just Enough Administration
5. Privileged session management
6. Administrative account separation
7. Privileged workstation concepts
8. Temporary administrative access
9. Access approval workflows
10. Privileged access lifecycle

Module 4: Credential Protection

1. Credential theft risks
2. Credential Guard
3. Protected Users
4. Local Administrator Password Solution
5. Managed Service Accounts
6. Password management
7. Credential isolation
8. Authentication restrictions
9. Credential exposure prevention
10. Privileged credential security

Module 5: Administrative Tiering

1. Administrative tiering concepts
2. Tier 0 resources
3. Tier 1 resources
4. Tier 2 resources
5. Domain Controller protection
6. Administrative account separation
7. Privileged workstation security
8. Cross-tier authentication risks
9. Tier enforcement
10. Tiering implementation

Module 6: Monitoring Privileged Activity

1. Privileged authentication monitoring
2. Account logon events
3. Group membership changes
4. Administrative actions
5. Process creation monitoring
6. PowerShell activity
7. Windows Event Logs
8. SIEM correlation
9. Suspicious privileged behavior
10. Security alerting

Module 7: Privileged Account Hardening

1. Account configuration
2. Password security
3. MFA implementation
4. Administrative restrictions
5. Remote administration controls
6. Service account protection
7. Domain Administrator protection
8. Credential isolation
9. Privilege reduction
10. Privileged account security baseline

Module 8: Practical Privileged Account Security

1. Privileged account inventory
2. Privileged group assessment
3. Permission review
4. Credential exposure assessment
5. Administrative activity analysis
6. Security baseline validation
7. Monitoring implementation
8. Remediation planning
9. Hardening validation
10. Practical privileged account security case studies