Top Tweets for #securevdichallenge

over 8 years ago

Today I'm working on an article that will be in some upcoming presentations and someday in a book if I'm cool enough for a VDI Lockdown guide. It amazes me what a "User" can do on a default Domain and OS Settings, going through it step-by-step is eye opening. #SecureVDIChallenge

Patrick Coble @VDIHacker

over 8 years ago

GPO, Should your users be able to get to the command prompt? Survey Says, "No". Most should not need access to it. The amount of recon and execution possibilities are near limitless there. #Test Can you do Phase 2 Script Blocking too? #SecureVDIChallenge https://t.co/S2JfLXuoRg

VDIHacker's tweet photo. GPO, Should your users be able to get to the command prompt? Survey Says, "No". Most should not need access to it. The amount of recon and execution possibilities are near limitless there. #Test Can you do Phase 2 Script Blocking too? #SecureVDIChallenge https://t.co/S2JfLXuoRg https://t.co/m8FhXPd1bi

Patrick Coble @VDIHacker

over 8 years ago

GPO, Do you publish a desktop? If so then you should Enable "Hide network locations icon on desktop" to ensure they cannot get somewhere they shouldn't that you haven't secured yet. #HaveYouSecuredYourShares? #SecureVDIChallenge https://t.co/S2JfLXcNZI

VDIHacker's tweet photo. GPO, Do you publish a desktop? If so then you should Enable "Hide network locations icon on desktop" to ensure they cannot get somewhere they shouldn't that you haven't secured yet. #HaveYouSecuredYourShares?

#SecureVDIChallenge https://t.co/S2JfLXcNZI https://t.co/awAWcA0pX5

Patrick Coble @VDIHacker

over 8 years ago

GPO Do you need your users to Run Server Manager or PowerShell or any AdminTools? There is a great GPO that will fix that up File System Restrictions feed it a path and it shall be blocked with some permissions. Groups are your friend #SecureVDIChallenge https://t.co/S2JfLXuoRg

VDIHacker's tweet photo. GPO Do you need your users to Run Server Manager or PowerShell or any AdminTools? There is a great GPO that will fix that up File System Restrictions feed it a path and it shall be blocked with some permissions. Groups are your friend #SecureVDIChallenge https://t.co/S2JfLXuoRg https://t.co/SITsrh0zZE

Patrick Coble @VDIHacker

over 8 years ago

GPO, I'm pretty sure opening the Registry Editor as a user is bad mmmkayy, lets lock that thing down. Prevent access to registry editing tools with a simple policy. #PenTestRecon #ILikeYourUNCPaths #SecureVDIChallenge https://t.co/S2JfLXuoRg

VDIHacker's tweet photo. GPO, I'm pretty sure opening the Registry Editor as a user is bad mmmkayy, lets lock that thing down. Prevent access to registry editing tools with a simple policy. #PenTestRecon #ILikeYourUNCPaths #SecureVDIChallenge https://t.co/S2JfLXuoRg https://t.co/1KQdnk4y0Z

Patrick Coble @VDIHacker

over 8 years ago

GPO, Do you publish a desktop? If so then you should Enable "Prohibit Changes" to ensure they are not able do something that will create a support or security incident #CreateShortcutParty. #SecureVDIChallenge https://t.co/S2JfLXuoRg

VDIHacker's tweet photo. GPO, Do you publish a desktop? If so then you should Enable "Prohibit Changes" to ensure they are not able do something that will create a support or security incident #CreateShortcutParty. #SecureVDIChallenge https://t.co/S2JfLXuoRg https://t.co/8hq1woFNYl

Patrick Coble @VDIHacker

over 8 years ago

GPO, Do your users have access to Windows Explorer? If they do, then please remove "No Computers Near Me in Network Locations" so they cannot just browse around to find what isn't secured. #NetworkRecon #AllTheShares #SecureVDIChallenge https://t.co/S2JfLXcNZI

VDIHacker's tweet photo. GPO, Do your users have access to Windows Explorer? If they do, then please remove "No Computers Near Me in Network Locations" so they cannot just browse around to find what isn't secured. #NetworkRecon #AllTheShares #SecureVDIChallenge https://t.co/S2JfLXcNZI https://t.co/jkSq2AVIng

Patrick Coble @VDIHacker

over 8 years ago

GPO, Do your users need to get to the Control Panel? In 99.9% of deployments that is a "NO" and that means "Prohibit access to the Control Panel" is your bestest friend. #HrmWhatCanIDoInHere? #HeyLookWhatICanDo #SecureVDIChallenge https://t.co/S2JfLXcNZI

VDIHacker's tweet photo. GPO, Do your users need to get to the Control Panel? In 99.9% of deployments that is a "NO" and that means "Prohibit access to the Control Panel" is your bestest friend. #HrmWhatCanIDoInHere? #HeyLookWhatICanDo #SecureVDIChallenge https://t.co/S2JfLXcNZI https://t.co/xMxKFQFgAD

Patrick Coble @VDIHacker

over 8 years ago

GPO, Do you like your users viewing and or modifying your NTFS Permissions? I don't think most admins would, a simple "Remove Security tab" can fix that. #SecureVDIChallenge https://t.co/S2JfLXcNZI

VDIHacker's tweet photo. GPO, Do you like your users viewing and or modifying your NTFS Permissions? I don't think most admins would, a simple "Remove Security tab" can fix that. #SecureVDIChallenge https://t.co/S2JfLXcNZI https://t.co/m8IvK9bstV

Patrick Coble @VDIHacker

over 8 years ago

GPO, Do your users need the ability to Map Network Drives within a session? Most are already mapped for the user so there isn't a need for them to do it on their own. #DidYouSecureAllTheShares? #SecureVDIChallenge https://t.co/S2JfLXcNZI

VDIHacker's tweet photo. GPO, Do your users need the ability to Map Network Drives within a session? Most are already mapped for the user so there isn't a need for them to do it on their own. #DidYouSecureAllTheShares? #SecureVDIChallenge https://t.co/S2JfLXcNZI https://t.co/UFpaFdIphC

Patrick Coble @VDIHacker

over 8 years ago

GPO, Did you know Help is one of the best Application Jail break methods? Limiting what can be launched from Help is your best defense. Help->About has lead me to a Browser, CMD, PS and PartyTime123.ps1 #SecureVDIChallenge https://t.co/S2JfLXuoRg

VDIHacker's tweet photo. GPO, Did you know Help is one of the best Application Jail break methods? Limiting what can be launched from Help is your best defense. Help->About has lead me to a Browser, CMD, PS and PartyTime123.ps1
#SecureVDIChallenge https://t.co/S2JfLXuoRg https://t.co/jtgItjFsYR

Patrick Coble @VDIHacker

over 8 years ago

GPO, I like shopping in the stores like everyone else but should your users be heading to the Windows Store to get some Sweet Apps? Lock it down so they don��t go wondering by disabling the Windows Store. #SecureVDIChallenge https://t.co/S2JfLXuoRg

VDIHacker's tweet photo. GPO, I like shopping in the stores like everyone else but should your users be heading to the Windows Store to get some Sweet Apps? Lock it down so they don��t go wondering by disabling the Windows Store. #SecureVDIChallenge https://t.co/S2JfLXuoRg https://t.co/ar9x2lgUTZ

Patrick Coble @VDIHacker

over 8 years ago

GPO, Do your users really need access to the local drives on the server and or desktop? This can be prevented by "Hide the specified drives in My Computer" #Jailbreaking #TreasureHunting #SecureVDIChallenge https://t.co/S2JfLXcNZI

VDIHacker's tweet photo. GPO, Do your users really need access to the local drives on the server and or desktop? This can be prevented by "Hide the specified drives in My Computer" #Jailbreaking #TreasureHunting #SecureVDIChallenge https://t.co/S2JfLXcNZI https://t.co/ul2nZt9pxt

Patrick Coble @VDIHacker

over 8 years ago

GPO, Do you let your user Run "Run"? This is the #1 of the Application Jailbreak methods from almost any application. When I can type regedit, cmd, PowerShell, file:\\\c:\ that is when bad things start happening. #SecureVDIChallenge https://t.co/S2JfLXcNZI

$VDIHacker's tweet photo. GPO, Do you let your user Run "Run"? This is the #1 of the Application Jailbreak methods from almost any application. When I can type regedit, cmd, PowerShell, file:\\\c:\ that is when bad things start happening. #SecureVDIChallenge https://t.co/S2JfLXcNZI https://t.co/vcsm3y71rF$

Top Tweets for #securevdichallenge

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users