Windows Exploits and Forensics: SMB & PsExec
“When carrying out security operations in a Windows environment you need to know what kind of attacks exploits and vulnerabilities to look out for. This course covers two of the most common services used to attack a Windows-based network – SMB and PsExec – along with some popular attack methodologies.
You ll start by examining SMB permissions and default settings. You ll then explore tools to enumerate SMB shares and data. Next you ll investigate how to identify SMB vulnerabilities and recognize SMB attacks. You ll then conduct different SMB exploits including brute force and denial of service attacks.
You ll move on to outline how PsExec works and use it to execute remote commands. Finally you ll practice exploiting PsExec using various tools including the EternalBlue exploit.”