You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
@@ -24,6 +24,7 @@ Below is a set of default Windows client and server settings right after install
*[RDP](https://securitree.xyz/windows-lateral-movement/rdp) service is disabled.
* RDP Pass-The-Hash (Restricted Admin Mode) is disabled. [Read more here](https://securitree.xyz/windows-lateral-movement/rdp).
*[WMI](https://securitree.xyz/windows-lateral-movement/ms-wmi) is allowed on firewall.
* SMB is allowed on firewall. This is especially important for [RPC-named-pipe-based lateral movement techniques](https://securitree.xyz/windows-lateral-movement/ms-rpc) such as [PsExec or SmbExec](https://securitree.xyz/windows-lateral-movement/ms-scmr).
Default Domain Controller (with AD DS enabled) port scan:
