The Auditing Windows Server Active Directory Security course will showcase and demonstrate practical steps, in assessing and reviewing the management and security of Windows Servers and Clients.
In this course, you will learn the key enterprise principles and practices in auditing a Windows Server Active Directory infrastructure, including how to identify potential security risks and misconfigurations, review Group Policy auditing settings, and analyze Windows event logs.
You will also gain practical experience in using in-built windows features, and free/open source tools to independently verify various Windows Server Active Directory settings and configurations.
Information Technology and Cybersecurity auditors, and general IT enthusiasts, will be better equipped to analyze, test, review and verify the key configurations and security of Windows Systems for compliance.
Course Content
Course Overview
1 - Auditing Group Policy Objects (GPOs)
2 - Auditing AD Users, Groups and Organizational Units (OUs)
3 - Auditing Administrative Accounts Security
4 - Auditing Windows Ports, Protocols, and Services
5 -Auditing Windows Firewall Policies and Rules
6 - Auditing Windows Event Logs
7 - Auditing Windows Server Domain Name System (DNS)
8 - Auditing Windows Transport Layer Security (TLS) Settings
9 - Auditing Windows Network Time Protocol (NTP)
Course Summary
01a – Auditing Group Policy Objects (GPOs) using Group Policy Management
You don't currently have access to this content
01b – Auditing Group Policy Objects (GPOs) Using Policy Analyzer
You don't currently have access to this content
02a – Overview of AD Users, Groups and Organizational Units (OUs)
You don't currently have access to this content
02b – Overview of LDAPSoft AD Browser with Query Examples
You don't currently have access to this content
02c – Auditing AD Objects Using Built-in AD Features
You don't currently have access to this content
02d – Auditing AD Objects Created Within a Custom Period
You don't currently have access to this content
02e – Auditing AD Objects in the Administrators Group
You don't currently have access to this content
03a – Overview of Active Directory Administrative Accounts
You don't currently have access to this content
03b – Audit the ‘Account is sensitive and cannot be delegated’ AD Option
You don't currently have access to this content
03c – Audit the ‘Access this computer from the network’ User Right
You don't currently have access to this content
03d – Audit the ‘Allow log on through Remote Desktop Services’ User Right
You don't currently have access to this content
03e – Audit Members of the Enterprise Admins Group
You don't currently have access to this content
03f – Auditing Local Administrator Accounts
You don't currently have access to this content
03g – LAB: Auditing Local Administrator Accounts Using LAPS
You don't currently have access to this content
04a – Overview of Ports, Protocols, and Services
You don't currently have access to this content
04b – Mapping Ports to Applications and Services
You don't currently have access to this content
04c – LAB: Auditing Open Ports and Services with Nmap
You don't currently have access to this content
04d – Auditing Ports Using Port Query
You don't currently have access to this content
05a – Overview of Windows Firewall with Advanced Security
You don't currently have access to this content
05b – LAB: Auditing Windows Firewall Profiles and Settings
You don't currently have access to this content
05c – LAB: Auditing Firewall Inbound Rules
You don't currently have access to this content
05d – LAB: Auditing the ICMP (Ping) Firewall Rule
You don't currently have access to this content
05e – LAB: Auditing the HTTP (Port 80) Firewall Rule
You don't currently have access to this content
06a – Overview of Windows Logs and Event Viewer
You don't currently have access to this content
06b – Basic vs. Advanced Audit Policy Configuration
You don't currently have access to this content
06c – LAB: Using the Auditpol Command
You don't currently have access to this content
06d – LAB: Auditing Event Log Files Permissions
You don't currently have access to this content
06e – LAB: Auditing Windows Event Logs User Rights
You don't currently have access to this content
07a – Overview of Windows DNS
You don't currently have access to this content
07b – LAB: Auditing DNS Zones and Records
You don't currently have access to this content
07c – LAB: Auditing Windows DNS Events
You don't currently have access to this content
08a – Overview of Transport Layer Security (TLS)
You don't currently have access to this content
08b – TLS Support In Windows Operating Systems
You don't currently have access to this content
08c – Transport Layer Security (TLS) Terminologies
You don't currently have access to this content
08d – LAB: Auditing Transport Layer Security (TLS) Settings
You don't currently have access to this content
09a – Windows NTP Overview and Terminologies
You don't currently have access to this content
09b – LAB: Auditing Windows NTP Event Logs
You don't currently have access to this content
09c – LAB: Auditing Windows NTP Configurations
You don't currently have access to this content
09d – LAB: Auditing NTP Group Policy Configurations
You don't currently have access to this content
Includes
41 Lessons