Przemysław Kłys

As per: https://support.microsoft.com/en-gb/topic/kb5008380-authentication-updates-cve-2021-42287-9dafac11-e0d0-4cb8-959a-143bd0201041 To protect your environment and avoid outages, please complete the following steps: - Update all devices that host the Active Directory domain controller role by installing the...

SPN consistency (Duplicate SPN)

1

setspn.exe -X

MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)

3

This control determines if Windows will accept source routed packets. How to Validate To validate this, go to the registery key (HKLM\System\CurrentControlSet\Services\Tcpip6\Parameters) and look for the value named (DisableIPSourceRouting), check...

Link: https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/monitoring-active-directory-for-signs-of-compromise

Systems with RDMA NICs shouldn't have encryption or signing enabled

9

Title: Systems with RDMA NICs shouldn't have encryption or signing enabled Severity Warning Date: 31.05.2018 22:33:35 Category: Configuration Problem: Either signing or Encryption is used in this server which has...

Network security: Minimum session security for NTLM SSP based (including secure RPC) servers

2

- https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers - https://www.stigviewer.com/stig/windows_server_2016/2018-03-07/finding/V-73697 - https://www.ultimatewindowssecurity.com/wiki/page.aspx?spid=NSrpcclients

https://blogs.technet.microsoft.com/secguide/2016/10/02/the-mss-settings/