Create a defensive blue team version of LPLITE - Githubissues

7MinSec / LPLITE

A place to track issues/changes to LPLITE curriculum

2 stars 0 forks source link

Create a defensive blue team version of LPLITE #81

Open 7MinSec opened 1 year ago

7MinSec commented 1 year ago

Maybe take the existing lab and give individual access to the lab for a period of time to close all the holes, like:

Things to have to fix:

cpasswords in GPOs
Enable SMB signing
Enable LAPS
Fix SQL stored procedure weakness
Clean up descriptions in Active Directory
etc.
Implement better password policy
Implement broadcast poisoning protections

Possible beta testers:

d1ddy (Discord)
Dan (Discord)
DKnight (Discord)
RM (Discord)
Sergio (Discord)
Tmaz (Discord)

Potential titles:

Light Pentest DIE (Defensive Independent Experience!)
Light Pentest DADDY (Do Active Directory Defense Yeah!)
Light Pentest ADD (Active Directory Defense)

The "exam" could be a 7MinSec resource running through a checklist and ensuring all "holes" are closed.