Visão Geral

Este curso apresenta o modelo de Administrative Tiering aplicado à segurança de ambientes Windows e Active Directory. O participante compreenderá a separação de níveis administrativos, proteção de recursos críticos, isolamento de credenciais e redução de caminhos para movimentação lateral e escalada de privilégios.

Objetivo

Após realizar este curso, você será capaz de:

• Compreender o modelo de tiering
• Classificar recursos e contas administrativas
• Separar privilégios entre níveis
• Reduzir riscos de movimentação lateral

Publico Alvo

• Administradores de Active Directory
• Profissionais de Cybersecurity
• Analistas de SOC e Blue Team
• Arquitetos de segurança

Pre-Requisitos

• Conhecimentos de Active Directory
• Familiaridade com Domain Controllers
• Conhecimentos de contas privilegiadas
• Noções de autenticação Windows
• Conhecimentos básicos de Group Policy são recomendados

Conteúdo Programatico

Module 1: Administrative Tiering Fundamentals

1. Administrative tiering concepts
2. Privilege separation
3. Trust boundaries
4. Credential exposure risks
5. Administrative account separation
6. Resource classification
7. Tier-based administration
8. Security boundaries
9. Attack path reduction
10. Tiering lifecycle

Module 2: Tier 0 Architecture

1. Tier 0 concepts
2. Domain Controllers
3. Active Directory infrastructure
4. Enterprise Administrator accounts
5. Domain Administrator accounts
6. PKI infrastructure
7. Identity management systems
8. Tier 0 administrative workstations
9. Tier 0 credential protection
10. Tier 0 security boundaries

Module 3: Tier 1 and Tier 2 Architecture

1. Tier 1 server infrastructure
2. Application servers
3. Database servers
4. Tier 2 endpoint infrastructure
5. User workstations
6. Administrative accounts
7. Account-to-tier mapping
8. Cross-tier access risks
9. Authentication restrictions
10. Tier separation

Module 4: Credential Isolation

1. Credential exposure
2. Credential Guard
3. Protected Users
4. Privileged Access Workstations
5. Administrative accounts
6. Credential reuse risks
7. Authentication restrictions
8. Local administrator protection
9. Service account security
10. Credential isolation strategies

Module 5: Tier Enforcement

1. Group Policy controls
2. Logon restrictions
3. Authentication policies
4. Security groups
5. Administrative workstation controls
6. Network restrictions
7. Firewall policies
8. Remote administration controls
9. Tier boundary enforcement
10. Policy validation

Module 6: Tiering and Lateral Movement

1. Lateral Movement concepts
2. Credential-based movement
3. Pass-the-Hash
4. Pass-the-Ticket
5. Remote administration
6. Privileged session abuse
7. Cross-tier authentication
8. Attack path analysis
9. Movement prevention
10. Security monitoring

Module 7: Monitoring and Governance

1. Tier activity monitoring
2. Privileged authentication events
3. Administrative activity
4. Cross-tier access detection
5. Group membership monitoring
6. Windows Event Logs
7. SIEM integration
8. Security reporting
9. Tier compliance assessment
10. Governance processes

Module 8: Practical Tiering Implementation

1. Resource classification
2. Administrative account mapping
3. Tier architecture design
4. Credential isolation assessment
5. Group Policy implementation
6. Access restriction implementation
7. Monitoring configuration
8. Tiering validation
9. Security gap analysis
10. Practical administrative tiering case studies