Bethesda Cybersecurity Club Lesson 4 MS Windows and Practice Images

Agenda MS Windows background Windows Versions System accounts Windows 7 & 8 security tools practice images

Cybersecurity Tasks Readme / Forensics Questions Configure Firewalls Disable ports Update OS Update Software/applications Audit User Accounts Delete Change permissions Add Passwords Password Policy Length Complexity Duration Lockout Manage Services Disable / Enable File management Delete Adjust permissions Antivirus application Enable Configure Update Enable Encryption

Microsoft Windows 1981 1992 1995 2001 2006 2009 2012 2015

Windows XP and Server 2003 Lightweight (64 MB Ram, 1.5GB HD) User Experience Focus XP is first version to use Remote Desktop Security Concerns: 2014 – discontinued support and updates 250 million people still use XP Outdated hardware and software may have more issues

Windows VISTA and Server 2008 Updated GUI and windows sidebard for gadgets Windows defender Backup and restore center User account control (UAC) Bitlocker – full disk encryption Security concern: UAC is useful, but not very usable

Windows 7 and server 2008 R2 Significant speed improvements over vista Improved searching and more nuanced UAC Action Center – centralized location to notify user of major security issues Supports biometric authorization Security concern: Most widely used OS is the most targeted by malicious users

Windows 8/8.1 and server 2012 Focus on support for tablets and touch screens Windows store and Tiled Start Screen Windows 8.1 restored the Start Button Windows Defender includes MS Security Essentials which provides antivirus support Cloud storage and sync Security concern: “Picture passwords” can be more easily cracked than traditional strong passwords

Who was able to create user accounts? System Accounts

Windows 7 & 8 security tools Start  Control Panel  System and Security  Administrative Tools  Local Security Policy Click Account Policies  Password Policies

Account Lockout policies Account policies govern unsuccessful attempts to log into an account Account policies  account lockout policies

Windows updates Control panel  system and security  windows update

Action center and Windows Defender Start  Control panel  system and security  action center Notifies you if windows identifies problems with or updates for: Windows updates Internet security settings Network firewall Spyware and related protection User account control Virus protections Windows backups Windows troubleshooting Control panel  system and security  Action center

Firewalls Control panel  system and security  action center  turn on now

Practice Images Download ZIP File Check Md5 hash Unzip File Provision Virtual Machine

Next week Windows security auditing Server 2016 Pico Capture the Flag (CTF): picoctf.com “free, online” computer security game targeted at middle and high school students created by Carnegie Mellon University Competition Dates: September 27, 2019 - October 11, 2019 Participants: age 13 or older; Individual or team up to 5 participants General Skills Linux and Command Prompt Cryptography Web Exploitation Forensics Binary Exploration Reverse engineering Ctf101.org