Visão Geral

Este curso aborda atividades de análise e avaliação realizadas após a obtenção de acesso a sistemas Windows em exercícios autorizados. O conteúdo contempla enumeração, análise de privilégios, credenciais, configuração do sistema, Active Directory, movimentação lateral e avaliação de controles defensivos.

Objetivo

• Conhecimentos de Windows
• Familiaridade com PowerShell
• Conhecimentos básicos de redes
• Familiaridade com Active Directory
• Conhecimentos de penetration testing

Publico Alvo

• Penetration Testers
• Red Team Operators
• Analistas de Cybersecurity
• Threat Hunters

Pre-Requisitos

• Conhecimentos de Windows
• Familiaridade com PowerShell
• Conhecimentos básicos de redes
• Familiaridade com Active Directory
• Conhecimentos de penetration testing

Conteúdo Programatico

Module 1: Windows Post-Exploitation Fundamentals

1. Post-exploitation lifecycle
2. Windows system enumeration
3. Host information
4. User and group enumeration
5. Process enumeration
6. Service enumeration
7. Network configuration
8. Security configuration
9. Endpoint security controls
10. Post-exploitation documentation

Module 2: Privilege and Identity Assessment

1. Current user context
2. Local groups
3. Administrative privileges
4. Token privileges
5. Service identities
6. Scheduled task identities
7. Privileged account discovery
8. Credential exposure
9. Privilege escalation opportunities
10. Privilege assessment

Module 3: Credential and Secret Discovery

1. Windows credential architecture
2. Credential stores
3. Cached credentials
4. Service account exposure
5. Configuration secrets
6. Application credentials
7. DPAPI concepts
8. Credential protection
9. Credential exposure indicators
10. Credential security assessment

Module 4: Windows Environment Enumeration

1. Installed software
2. Running services
3. Scheduled tasks
4. Network connections
5. Firewall configuration
6. Security products
7. System configuration
8. Domain membership
9. Network shares
10. Environment mapping

Module 5: Active Directory Post-Exploitation

1. Domain enumeration
2. Domain users
3. Security groups
4. Domain Controllers
5. Trust relationships
6. Privileged groups
7. Kerberos environment
8. Authentication paths
9. Domain attack surface
10. Active Directory security assessment

Module 6: Lateral Movement Assessment

1. Lateral Movement concepts
2. Remote administration
3. SMB
4. WinRM
5. Remote Desktop
6. Credential reuse risks
7. Administrative access
8. Movement detection
9. Network segmentation
10. Lateral Movement defense

Module 7: Persistence and Detection

1. Persistence concepts
2. Windows persistence mechanisms
3. Scheduled task monitoring
4. Service monitoring
5. Registry persistence indicators
6. Authentication persistence
7. Windows Event Logs
8. Endpoint detection
9. Persistence hunting
10. Persistence remediation

Module 8: Practical Windows Post-Exploitation

1. Host enumeration
2. Privilege assessment
3. Credential exposure assessment
4. Domain enumeration
5. Lateral Movement assessment
6. Persistence assessment
7. Defensive control evaluation
8. Evidence collection
9. Attack path documentation
10. Windows post-exploitation case studies