SLIDE 1
Windows 10 – Security
Piet Carpentier
Senior IT Consultant Xylos
Piet Carpentier
About me
Piet.carpentier@xylos.com @dfter https://be.linkedin.com/in/pcarpentier Windows Client Consultant
Windows 10 Security Piet Carpentier Senior IT Consultant Xylos - - PowerPoint PPT Presentation
Windows 10 Security Piet Carpentier Senior IT Consultant Xylos - - PowerPoint PPT Presentation
Windows 10 Security Piet Carpentier Senior IT Consultant Xylos About me Piet Carpentier Piet.carpentier@xylos.com @dfter https://be.linkedin.com/in/pcarpentier Windows Client Consultant Agenda Intro Windows 10: which security tools
SLIDE 2
SLIDE 3
Agenda
Intro Windows 10: which security tools does it offer Device Security Windows Hello Demo: Credential Guard Demo: Device Guard Demo: Windows ATP Windows 7: not ready for modern threats Tips from the field What can Xylos do for you! Q&A
SLIDE 4
SLIDE 5
SLIDE 6
Layered Defence – Defence in Depth
Network Firewall w AV Scanning Edge Microsoft SmartScreen Endpoint FW Endpoint AV PC
# Layers > $ attacker
SLIDE 7
Windows 10: Defence Stack
Device Security
UEFI Secure Boot Trusted Boot with ELAM Code Integrity Virtualization based Security Health Attestation TPM …
Identity Protection
Windows Defender and SmartScreen Device Guard Credential Guard Windows Defender Application Guard Windows Hello ...
Information Protection
BitLocker Windows Information Protection Device Encryption …
Threat Resistance
Windows Defender Microsoft Edge SmartScreen App Locker …
Windows Defender ATP
SLIDE 8
Positioning Device Guard
UEFI Secure Boot KMCI Platform Secure Boot UMCI AppLocker
ROM/Fuses Bootloaders
Native UEFI Windows OS Loader
Windows Kernel, Boot Drivers, System Files
ELAM, AV Driver, and 3rd Party Drivers User mode code (apps, etc.)
SLIDE 9
Device Guard
Requires Enterprise, Education SKU Kernel Mode code signing User Mode code signing Has a audit / enforce mode Virtualization Based Security (VBS) Requires TPM, UEFI DMA Protection
SLIDE 10
The Problems of passwords today ... Passwords ...
SLIDE 11
Windows Hello
Microsoft Passport
PIN Face IRIS
Finger Print (WBF)
Windows Hello companion Devices Framework
SLIDE 12
Demo: Credential Guard
SLIDE 13
Demo: Windows ATP
SLIDE 14
Windows 7 and 8.1: “Not ready for modern threats”
Windows 7: Extended support DMA attack Mimikatz …
SLIDE 15
Notes from the field
Deploy UEFI Facilitate your devices with TPM chips Move away from Windows 7 and 8.1 Think about implementing code signing into your packaging processes
SLIDE 16
What can Xylos do for you!
Xylos Lifecycle CC : Windows Client : Consultancy, Workshops, Guidance
- Contact : David Biot
- Email : David.Biot@xylos.com
Security guidance
- Contact : Johan Celis
- Email : Johan.Celis@xylos.com
Information security campaign
- Contact : Thomas Lauwers
- Email: thomaslauwers@neolearning.eu
SLIDE 17
- Why is a migration to Windows 10 different than previous Windows migrations
9th of March 2017
- Windows 10 and security: a scenario-based approach
16th of March 2017
- Managing Windows 10 from the cloud
23rd of March 2017
- Onboarding your Windows 10 users with Oase
30th of March 2017
www.xylos.com/windows10
SLIDE 18
If you have more questions or you want more information about our end-to-end solutions with Windows 10, feel free to contact us! Piet Carpentier - Piet.carpentier@xylos.com David Biot - David.biot@xylos.com