Skip to content
hands-on lab

Detecting Windows Vulnerabilities

Difficulty: Intermediate
Duration: Up to 3 hours and 53 minutes
Students: 857
Rating: 3.8/5
You can pause this lab for up to 4h
Start lab
On average, students complete this lab in10m
Get guided in a real environmentPractice with a step-by-step scenario in a real, provisioned environment.
Learn and validateUse validations to check your solutions every step of the way.
See resultsTrack your knowledge and monitor your progress.
About
Author

Description

Most estimates put Microsoft's Windows operating system running on the vast majority of Desktop computers. With such a large installed base, Windows systems are attractive targets for attackers. This Lab will detect and analyze the vulnerabilities of a Windows host. You will learn how to prevent having vulnerabilities exploited and learn how to investigate specific vulnerabilities. Host security is one layer in a multi-layered security strategy. This Lab focuses on host security and does not discuss other layers such as network and application security.

The Windows host that you will check for vulnerabilities is a Windows 7 virtual machine running in a Hyper-V virtual environment.

This Lab is designed for the CREST Practitioner Security Analyst (CPSA) certification examination but is of value to security practitioners in general.

Learning Objectives

Upon completion of this Lab you will be able to:

  • Understand different categories of host vulnerabilities
  • Learn how to protect against host vulnerabilities
  • Find out more information about specific vulnerabilities
  • Learn about Windows tools that can help identify system vulnerabilities

Intended Audience

This Lab is intended for:

  • CREST CPSA certification examinees
  • Security practitioners
  • Windows administrators

Prerequisites

You should be familiar with:

  • Working with the Windows operating system at a basic level

Updates

October 30th, 2023 - Updated the instructions and screenshots to reflect the latest UI

April 20th, 2021 - Updated instructions to reflect changes to security analyzer

July 9th, 2020 - Enabled direct browser RDP connection for a streamlined experience

Environment before

Environment after

Covered topics

Security
Hands-on Lab UUID

Lab steps

0 of 1 steps completed.Use arrow keys to navigate between steps. Press Enter to go to a step if available.
  1. Detecting and Analyzing Vulnerabilities in Windows

Lab Rules