1. Bethesda Cybersecurity Club
Lesson 4
MS Windows and Practice Images

2. Agenda MS Windows background Windows Versions System accounts
Windows 7 & 8 security tools
practice images

3. Cybersecurity Tasks Readme / Forensics Questions Configure Firewalls
Disable ports
Update OS
Update Software/applications
Audit User Accounts
Delete
Change permissions
Add
Passwords
Password Policy
Length
Complexity
Duration
Lockout
Manage Services
Disable / Enable
File management
Delete
Adjust permissions
Antivirus application
Enable
Configure
Update
Enable Encryption

4. Microsoft Windows
1981
1992
1995
2001
2006
2009
2012
2015

5. Windows XP and Server 2003 Lightweight (64 MB Ram, 1.5GB HD)
User Experience Focus
XP is first version to use Remote Desktop
Security Concerns:
2014 – discontinued support and updates
250 million people still use XP
Outdated hardware and software may have more issues

6. Windows VISTA and Server 2008
Updated GUI and windows sidebard for gadgets
Windows defender
Backup and restore center
User account control (UAC)
Bitlocker – full disk encryption
Security concern: UAC is useful, but not very usable

7. Windows 7 and server 2008 R2 Significant speed improvements over vista
Improved searching and more nuanced UAC
Action Center – centralized location to notify user of major security issues
Supports biometric authorization
Security concern: Most widely used OS is the most targeted by malicious users

8. Windows 8/8.1 and server 2012
Focus on support for tablets and touch screens
Windows store and Tiled Start Screen
Windows 8.1 restored the Start Button
Windows Defender includes MS Security Essentials which provides antivirus support
Cloud storage and sync
Security concern: “Picture passwords” can be more easily cracked than traditional strong passwords

9. Who was able to create user accounts?
System Accounts

21. Windows 7 & 8 security tools
Start  Control Panel  System and Security  Administrative Tools  Local Security Policy
Click Account Policies  Password Policies

22. Account Lockout policies
Account policies govern unsuccessful attempts to log into an account
Account policies  account lockout policies

23. Windows updates
Control panel  system and security  windows update

24. Action center and Windows Defender
Start  Control panel  system and security  action center
Notifies you if windows identifies problems with or updates for:
Windows updates
Internet security settings
Network firewall
Spyware and related protection
User account control
Virus protections
Windows backups
Windows troubleshooting
Control panel  system and security  Action center

25. Firewalls
Control panel  system and security  action center  turn on now

28. Practice Images Download ZIP File Check Md5 hash Unzip File
Provision Virtual Machine

29. Next week Windows security auditing Server 2016
Pico Capture the Flag (CTF): picoctf.com
“free, online” computer security game targeted at middle and high school students created by Carnegie Mellon University
Competition Dates: September 27, October 11, 2019
Participants: age 13 or older; Individual or team up to 5 participants
General Skills
Linux and Command Prompt
Cryptography
Web Exploitation
Forensics
Binary Exploration
Reverse engineering
Ctf101.org