Module 1

Module 1: Windows system binaries hardening

1. 1.(W37M01) Introduction
2. 2.(W37M01) Applocker bypass using MSIEXEC
3. 3.(W37M01) Applocker bypass using control panel
4. 4.(W37M01) Applocker bypass using CreateRestrictedToken API
5. 5.(W37M01) Applocker bypass using MSXSL
6. 6.(W37M01) Applocker bypass using bginfo
7. 7.(W37M01) UAC bypass using fodhelper
8. 8.(W37M01) Conclusion + Assessment

Module 2

Windows security auditing and logging

1. 1.(W37M02) Introduction
2. 2.(W37M02) Auditing security events: logging powershell attacks or activity
3. 3.(W37M02) Powershell v5 Enhancements
4. 4.(W37M02) Collecting and making sense of logs using splunk
5. 5.(W37M02) Conclusion + Assignment

Module 3

Hardening Windows Active Directory

1. 1.(W37M03) Introduction
2. 2.(W37M03) From Normal AD user to domain administrator (part 1)
3. 3.(W37M03) From Normal AD user to domain administrator (part 2)
4. 4.(W37M03) From Normal AD user to domain administrator (part 3)
5. 5.(W37M03) From guest to domain administrator (part 1)
6. 6.(W37M03) From guest to domain administrator (part 2)
7. 7.(W37M03) Conclusion + Assignment

Module 4

Tools to perform windows audit

1. 1.(W37M04) Introduction
2. 2.(W37M04) Auditing with powershell scripts
3. 3.(W37M04) Auditing with Nessus Home
4. 4.(W37M04) Conclusion and Assignment