|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/windows-security-secrets-location/
课程评论:没有评论
**课程名称:** Windows 安全 - 凭证存储位置揭秘 **课程概述:** 本课程深入剖析 Windows 身份验证机制中凭证(认证秘密)的存储位置,揭示攻击者如何利用这些信息窃取凭证,并教授您如何有效保护系统免受此类威胁。 **您将学到:** * **Windows 凭证存储位置:** 了解 SAM 数据库、LSASS 进程、LSA Secrets 以及凭证管理器 (Credential Manager) 等多种凭证存储的详细信息。 * **攻击者凭证提取方法:** 学习黑客如何使用 Mimikatz 等工具提取凭证,以及如何滥用不安全的配置。 * **安全最佳实践:** 掌握 Credential Guard、LAPS 和高级组策略设置等技术,以阻止凭证窃取并加固 Windows 身份验证。 * **常见安全配置错误:** 识别实际系统中的安全漏洞,并学会如何在攻击者利用这些漏洞之前修复它们。 * **防御策略:** 获得专家级别的安全防护思路,包括如何 secured 身份验证机制、限制访问权限和加固 Windows 基础设施。 **课程成果:** 学完此课程,您将明确知晓身份验证秘密在 Windows 中的存储位置,了解攻击者的作案手法,以及如何实施安全最佳实践来有效防止凭证被盗。 **目标受众:** 本课程基于真实的安评实践,适合 Windows 管理员、安全工程师及所有负责保障 Windows 环境安全的 IT 专业人士。 **扩展知识:** 鼓励您探索我们其他的安全课程和免费资源,以进一步加深您对 Windows 基础设施的理解和防护能力。
Windows stores authentication secrets in multiple locations, making it a prime target for attackers. Do you know where your credentials are stored and how to protect them? This course takes a deep dive into Windows authentication secrets, showing you exactly where credentials are stored, how attackers extract them, and how to secure your systems against credential theft.What You'll Learn:Where Windows Stores Credentials - Understand the different locations used for storing authentication secrets, including SAM, LSASS, LSA Secrets, and Credential Manager.How Attackers Extract Credentials - Learn how hackers dump credentials using tools like Mimikatz and abuse weak security configurations.Security Best Practices - Implement Credential Guard, LAPS, and advanced GPO settings to prevent credential theft and secure Windows authentication.Common Security Misconfigurations - Discover real-world security gaps and learn how to fix them before attackers exploit them.Defensive Strategies - Gain expert-level insights into securing authentication mechanisms, restricting access, and hardening your Windows infrastructure.By the end of this course, you'll know exactly where authentication secrets are stored, how attackers target them, and how to implement security best practices to prevent credential theft.This course is based on real-world security assessments, making it practical for Windows admins, security engineers, and IT professionals securing Windows environments.Expand Your Knowledge - Be sure to check out our other security courses and free resources to strengthen your Windows infrastructure even further!