Book Image

Mastering Windows Security and Hardening

By : Mark Dunkerley, Matt Tumbarello
Book Image

Mastering Windows Security and Hardening

By: Mark Dunkerley, Matt Tumbarello

Overview of this book

Are you looking for effective ways to protect Windows-based systems from being compromised by unauthorized users? Mastering Windows Security and Hardening is a detailed guide that helps you gain expertise when implementing efficient security measures and creating robust defense solutions. We will begin with an introduction to Windows security fundamentals, baselining, and the importance of building a baseline for an organization. As you advance, you will learn how to effectively secure and harden your Windows-based system, protect identities, and even manage access. In the concluding chapters, the book will take you through testing, monitoring, and security operations. In addition to this, you’ll be equipped with the tools you need to ensure compliance and continuous monitoring through security operations. By the end of this book, you’ll have developed a full understanding of the processes and tools involved in securing and hardening your Windows environment.
Table of Contents (19 chapters)
Section 1: Getting Started
Section 2: Applying Security and Hardening
Section 3: Protecting, Detecting, and Responding for Windows Environments


In this chapter, we extensively covered identity and access management and its importance to ensure you provide the best protection for your users and Windows devices. We started with an overview, covering the foundation of IAAA and what each component of it is. We then reviewed account and access management, which covered the life cycle of identity management, as well as external access and privileged access.

Next, we covered authentication methods, including password management, SSPR, and different SSO methods. The remainder of this section included a review of MFA and Windows Hello and an overview of the future of a passwordless world. We finished this chapter by covering some new advanced cloud authentication tools, known as Conditional Access and Identity Protection.

In the next chapter, we will be looking at the administration and remote management of your Windows environment. In this chapter, we will review device administration, modern device management, security...