Auditing Windows Server Active Directory Security Course

Course Curriculum

Chapter 1: Course Overview

Lecture 1: Overview of the Auditing Windows Server Active Directory Security Course

Chapter 2: Auditing Group Policy Objects (GPOs)

Lecture 1: 01a – Auditing Group Policy Objects (GPOs) using Group Policy Management

Lecture 2: 01b – Auditing Group Policy Objects (GPOs) Using Policy Analyzer

Chapter 3: Auditing AD Users, Groups and Organizational Units (OUs)

Lecture 1: 02a – Overview of AD Users, Groups and Organizational Units (OUs)

Lecture 2: 02b – Overview of LDAPSoft AD Browser with Query Examples

Lecture 3: 02c – Auditing AD Objects Using Built-in AD Features

Lecture 4: 02d – Auditing AD Objects Created Within a Custom Period

Lecture 5: 02e – Auditing AD Objects in the Administrators Group

Chapter 4: Auditing Administrative User Accounts Security

Lecture 1: 03a – Overview of Active Directory Administrative Accounts

Lecture 2: 03b – Audit the ‘Account is sensitive and cannot be delegated’ AD Option

Lecture 3: 03c – Audit the ‘Access this computer from the network’ User Right

Lecture 4: 03d – Audit the ‘Allow log on through Remote Desktop Services’ User Right

Lecture 5: 03e – Audit Members of the Enterprise Admins Group

Lecture 6: 03f – Auditing Local Administrator Accounts

Lecture 7: 03g – LAB: Auditing Local Administrator Accounts Using LAPS

Chapter 5: Auditing Windows Ports, Protocols, and Services

Lecture 1: 04a – Overview of Ports, Protocols, and Services

Lecture 2: 04b – Mapping Ports to Applications and Services

Lecture 3: 04c – LAB: Auditing Open Ports and Services with Nmap

Lecture 4: 04d – LAB: Auditing Ports Using Port Query UI

Chapter 6: Auditing Windows Firewall Policies and Rules

Lecture 1: 05a – Overview of Windows Firewall with Advanced Security

Lecture 2: 05b – LAB: Auditing Windows Firewall Profiles & Settings

Lecture 3: 05c – LAB: Auditing Firewall Inbound Rules

Lecture 4: 05d – LAB: Auditing the ICMP (Ping) Firewall Rule

Lecture 5: 05e – LAB: Auditing the HTTP (Port 80) Firewall Rule

Chapter 7: Auditing Windows Event Logs

Lecture 1: 06a – Overview of Windows Logs and Event Viewer

Lecture 2: 06b – Basic vs. Advanced Audit Policy & Log Configuration

Lecture 3: 06c – LAB: Using the Auditpol Command

Lecture 4: 06d – LAB: Auditing Event Log Files Permissions

Lecture 5: 06e – LAB: Auditing Windows Event Logs User Rights

Chapter 8: Auditing Windows Server Domain Name System (DNS)

Lecture 1: 07a – Overview of Windows DNS

Lecture 2: 07b – LAB: Auditing DNS Zones and Records

Lecture 3: 07c – LAB: Auditing Windows DNS Events

Chapter 9: Auditing Windows Transport Layer Security (TLS) Settings

Lecture 1: 08a – Overview of Transport Layer Security (TLS)

Lecture 2: 08b – TLS Support In Windows Operating Systems

Lecture 3: 08c – Transport Layer Security (TLS) Terminologies

Lecture 4: 08d – LAB: Auditing Transport Layer Security (TLS) Settings

Chapter 10: Auditing Windows Network Time Protocol (NTP)

Lecture 1: 09a – Windows NTP Overview and Terminologies

Lecture 2: 09b – LAB: Auditing Windows NTP Event Logs

Lecture 3: 09c – LAB: Auditing Windows NTP Configurations

Lecture 4: 09d – LAB: Auditing NTP Group Policy Configurations

Chapter 11: Course Summary

Lecture 1: Course Recap

Chapter 12: Course Quiz