The training focuses on measures for the hardening and secure configuration of Windows client and server systems as well as their effect against hacker attacks.

Instructors: Christian Strache and Constantin Tschürtz

Duration: 2 days
The secure configuration and hardening of client and server systems provides an important basis for the protection from attacks. Especially client systems have repeatedly been the focus of targeted attacks and serve as a starting point for further attacks on internal systems and services. With Windows 10, Microsoft has introduced various security-relevant innovations to protect client systems. In the default configuration, however, Windows systems as well as the web, application and database servers running on them provide a large attack surface.

This training will show you what hardening measures can help complicate or prevent typical hacker attacks. We will clearly demonstrate what kinds of threats exist for the respective systems and what an attacker can achieve due to poorly protected systems. For each threat scenario, we will then introduce you to the possibilities available with system tools to harden or securely configure client and server systems, application and web servers as well as databases in the Windows environment. In many practical examples and exercises, participants will learn how and with which tools they can identify, reconstruct and fix typical vulnerabilities on their own. We will directly compare the way the individual hardening measures work with the specific threat scenarios such as pass the hash, privilege escalation or ransomware.

In addition to the hardening and secure configuration of the systems as such, the training will demonstrate administrative and organizational measures on how to secure client and server environments. For instance, this includes ideas on secure administration (e.g. use of layered administration and privileged access workstations) or on dealing with local administrative permissions on client systems.

The training will cover not only the useful application of supporting tools such as Security Compliance Manager (SCM) or Attack Surface Analyzer (ASA) but also the use of tools to detect vulnerabilities such as Nessus and database scanners.

Examples of topics covered for Windows client systems

• Basic hardening of Windows clients
• Security-relevant innovations in Windows 10
• Client hardware requirements for the use of relevant security features
• Windows 10 versions and update methods (e.g. LTSB, Enterprise, Professional)
• Virtualization-based security features in Windows 10 (e.g. Credential Guard, Device Guard)
• Securing the boot process (e.g. BitLocker, UEFI, Secure Boot, Trusted Boot)
• Application control (e.g. AppLocker, Device Guard)
• Manageability of Windows 10
• Data protection in Windows 10 in enterprise environments

Examples of topics covered for Windows server systems

• Basic hardening of Windows servers
• Use of hardening measures, e.g. via GPOs
• Use of tools for security configuration and analysis (e.g. Security Compliance Manager)
• Service hardening
• Restriction of executable programs
• Terminal server protection
• File server protection

Examples of topics covered for web and application servers

• Microsoft IIS hardening
• Apache/Tomcat hardening on Windows Server

Examples of topics covered on the database level

• Basic measures for the protection of MSSQL databases
• Use of database scanners

Participants will use laptops in this intensive training course, so they can apply the acquired knowledge in practical exercises.

Target group:
Security managers and administrators looking for effective ways to protect their Windows systems and services.
Participants of our Hacking Extreme und Hacking Extreme Web Applications trainings who wish to learn about appropriate protection options in the Windows environment.

Prerequisite:
Basic knowledge in the Windows operating systems (clients, servers) and (IIS) web server fields. Some exercises require the use of command-line tools such as PowerShell. The trainers will be happy to assist in handling them in case you need help.

Maximum number of participants: 15 persons

Price: € 2,000

Date: January 29-30, 2018, the two days before the IT-Defense conference starts.

The training is conducted in German by two experienced trainers. They work as consultants and can thus complement the course with comprehensive and recent practical experience.

You will receive CPE Points for participating in the training. The training takes 16 hours. You will get a certificate after having completed the training.

Location:
Leonardo Royal Hotel Munich
Moosacher Strasse 90
80809 München
Tel: +49 (89) 288 538 0
Fax: +49 (89) 288 538 100
E-Mail: info.royalmunich@leonardo-hotels.com
www.leonardo-hotels.com