[03] - #Anonymous [#opNewBlood] Microsoft - Windows 8 - Test

/====================================================================================\
|      _____   ___     _     __  __   ___   ___   ___   ___   ___   ___   _  __      |
|     |_   _| | __|   /_\   |  \/  | | _ ) | __| | _ \ / __| | __| | _ \ | |/ /      |
|       | |   | _|   / _ \  | |\/| | | _ \ | _|  |   / \__ \ | _|  |   / | ' <       |
|       |_|   |___| /_/ \_\ |_|  |_| |___/ |___| |_|_\ |___/ |___| |_|_\ |_|\_\      |
\====================================================================================/
    | - T E A M B E R S E R K -
    | Corporations, Governments and PsyOps Regarded as Apostles.
    | Without hatred your life is pointless, but this hellfire, isn’t it what supports your legs ?
    | IRC >> IIP->127.0.0.1 6668 << Channel: #TeamBerserk
    | https://www.Twitter.com/TeamBerserk
--------------------------------------------------------------------------------------

/=====================================================================================\
|             __ __              _   __             ____  __                __        |
|          __/ // /_____  ____  / | / /__ _      __/ __ )/ /___  ____  ____/ /        |
|         /_  _  __/ __ \/ __ \/  |/ / _ \ | /| / / __  / / __ \/ __ \/ __  /         |
|        /_  _  __/ /_/ / /_/ / /|  /  __/ |/ |/ / /_/ / / /_/ / /_/ / /_/ /          |
|         /_//_/  \____/ .___/_/ |_/\___/|__/|__/_____/_/\____/\____/\__,_/           |
|                     /_/                                                             |
\=====================================================================================/
    | Anonymous Operation: New Blood
    | Articles and Guides written by Gutts of TeamBerserk
    | IRC.AnonNet.ORG - IRC.AnonOps.COM - IRC.AnonPlus.COM - IRC.AnonPlusRadio.COM
    | IRC.AnonSet.COM - IRC.Cryto.NET - IRC.CyberGuerrilla.ORG - IRC.VoxAnon.SE
---------------------------------------------------------------------------------------

/======================================================================================\
|           _       ___           __                      ____  _____                  |
|          | |     / (_)___  ____/ /___ _      _______   / __ \/ ___/                  |
|          | | /| / / / __ \/ __  / __ \ | /| / / ___/  / / / /\__ \                   |
|          | |/ |/ / / / / / /_/ / /_/ / |/ |/ (__  )  / /_/ /___/ /                   |
|          |__/|__/_/_/ /_/\__,_/\____/|__/|__/____/   \____//____/ 8 Enterprise RTM   |
\======================================================================================/
    | Microsoft Windows Operating System - 8 - Enterprise - RTM
    | Local and Remote Security Hardening and Mitigation Techniques for Workstations
    | Updated: 09-10-2013
----------------------------------------------------------------------------------------

HashTags: #Anonymous, #opNewBlood, #Setup, #Security #Hardening, #Security #Testing

[ Computer Security ] -> [ Operating System Setup and Security ] -> [ Microsoft Windows: 8 Enterprise RTM - Testing Your Hardened Security Configurations ]

============================================
+ Building a Strong Foundation of Security +
============================================

** This is the third text/video tutorial of a series of tutorials that we have made for Anonymous Operation: New Blood  **

- Testing Your Hardened Security Configurations of Microsoft Windows 8 Enterprise RTM -
--------------------------------------------------------------------------------------

Ok, let's recap:

In the previous guide you completely secured and hardened the security of your Microsoft Windows 8 Enterprise RTM Operating System Installation
by configuring numerous security options that were built into Microsoft Windows 8 Enterprise RTM and by adding other essential security tools.

The Enterprise edition of Microsoft Windows 8 is geared toward corporations and large enterprise, and by default it is also configured for maximum usability
and ease of use, but you were shown how to further configure and harden it and you completed doing that.

Your configurations provide you Maximum local and remote security at the base layer. Locally you cannot be fucked with, in other words it is impossible for
anyone to get into your computer locally unless they are hovering over your shoulder and memorize the password(s) you type to boot up your computer.

If your computer is stolen, the BIOS is configured to keep them out because you placed a password on this BIOS. If your BIOS is LEGACY and the thief knows a little
bit about computers they can simply remove the CMOS ( Central Metal Oxide Semiconductor ) Battery, this battery looks like a small watch battery and if removed
it clears the CMOS and thus the BIOS settings thereby removing the password on the BIOS, but that's okay! because they will never be able to get into the hard drive
contents because you completed encrypting your hard disk drive and its partitions with BitLocker Drive Encryption, also if you had the option to place a password
on the hard drive from the BIOS layer it will essentially make the entire laptop a paperweight for the thief depending on what kind of hardware you have, placing a
password on the hard drive from the BIOS layer, especially if it's UEFI BIOS with Secure Boot the encrypted string for your hard drive password is kept in a completely
seperate ROM chip on the motherboard and removing the hard drive will prevent any other hard drive from being usable on that system.

If you're ever staying in a hotel and someone comes in when you're not there and decides to remove the hard drive from your laptop and copy the entire hard drive
they won't be able to do anything with the data because it is completely encrypted and this type of encryption cannot be broken. The algorithm used by the BitLocker
that is in use by Microsoft Windows 8 Enterprise RTM essentially breaks up strings into several parts with diffusers to prevent any possibility of brute force cracking methods.

However, since other methods can be used to get your password for your encrypted hard drive such as extracting the key from the Memory chips while it is booted up
and running you should always turn off the machine completely and remove any power source when it is not in use. The other method would be dusting the keyboard for the
strongest keypresses, when someone locally dusts your keyboard they are looking for the hardest keypresses so they can calculate all possibilities of character combinations
so they can then guess the password that way, so always keep your machine and its keyboard clean and wiped after usage.

Your remote security configurations make your Internet/Intranet presence completely invisible, your network ports are stealth and invisible and will not respond to probes.
Your Security Policies prevent anyone from even being able to query anything inbound on you let alone get access or any possibility of enumeration of your system.
Ports are only opened when an allowed application is going outbound as allowed in your outbound rules in your Firewall configuration and then immediately closed when the application is closed.
You're only using windows services that you need and all others are disabled.
You're running Microsoft's Research and Defense Enhanced Mitigation Experience Toolkit EMET and if you happen to get any type of mal-ware or RAT on your system
it will not be able to run, even if it's Crypted with the most expensive or custom written Crypter.
--------------------------------------------------------------------------------------

/=====================================================================================\
|             ____      __                 __           __  _                         |
|            /  _/___  / /__________  ____/ /_  _______/ /_(_)___  ____               |
|            / // __ \/ __/ ___/ __ \/ __  / / / / ___/ __/ / __ \/ __ \              |
|          _/ // / / / /_/ /  / /_/ / /_/ / /_/ / /__/ /_/ / /_/ / / / /              |
|         /___/_/ /_/\__/_/   \____/\__,_/\__,_/\___/\__/_/\____/_/ /_/               |
\=====================================================================================/
    | Guide Introduction
---------------------------------------------------------------------------------------

You previously hardened your Microsoft Windows 8 Enterprise Operating System Installation, now you are going to put all of these configurations to the test and you
will then get a System Security rating from a utility provided by the National Security Agency, Department of Defense and the Department of Homeland Security, these utilities are used by
NSA, DoD and DHS employees/agents to test their own Microsoft Windows Systems.

So, let's begin!

Update: We cannot provide the NSA, DoD and DHS utilities because they were removed from the NSA, DoD and DHS Web Servers. Once they become available again we will provide the links here.
These utilities are Open Source and provided with Checksums, but for the life of me I can't find them or any mirror now.
--------------------------------------------------------------------------------------

Browser Fingerprinting:
(01): - You can check for Browser Fingerprinting scores at:
        ( http://browserspy.dk )
        ( https://panopticlick.eff.org )

        If you Configured your Web Browser how it should be Configured as explained in the previous Guide it will be impossible to Fingerprint your Web Browser.
    You can also download an add-on for FireFox called: User-Agent Switcher -- This plug-in will let you change your User-Agent Strings and make them blank/null.
    Once you have loaded all of the recommended FireFox add-ons and changed your User-Agent Strings to null it will be impossible for any Web Servers to Fingerprint you.
--------------------------------------------------------------------------------------

Testing your Network Settings:
(02): - Download NMap Scanner From:
        ( http://nmap.org/dist/nmap-6.25-setup.exe )
        Install NMap.
        Scan your local IP address with NMap for Open Ports.
    If everything was done correctly there will be no Open Ports.

Download Nessus Security Scanner From:
    ( http://www.tenable.com/products/nessus )
    Install Nessus.

Configure Nessus
    Open the Windows Firewall with Advanced Configurations and allow all of the executables within the Nessus installation directory OUTBOUND.

    Scan your local IP address with Nessus for Open Ports and Vulnerabilities.
    If everything was configured correctly there will be no Vulnerabilities or Open Ports found with Nessus.

Web Application Port Scanners:
    Head to these sites to scan your Computer for Open Ports:
    ( http://www.speedguide.net/scan.php )
    ( https://www.grc.com/x/ne.dll?bh0bkyd2 )

    Let this Web Application Scan your Ports.
    If any of your ports are open at all, then you must have missed something in the previous tutorials, try and determine what you may have done incorrectly and fix it.
        If everything is configured properly you will receive the True Stealth Analysis proving that all of your Network Ports are undetectable.
    First you should run the GRC Network Test against your Computer ( after you have hardened the OS ) without any hardware Firewall boxes or Routers connected.
    If your RAW connection yields the True Stealth results you're good to go.
    After you have tested your RAW connection connected your Hardware Firewall box and/or Router and rerun the test.
---------------------------------------------------------------------------------------

TCPView, WireShark and NetStat -nab
(03): - Download TCPView From:
        ( http://technet.microsoft.com/en-us/sysinternals/bb897437.aspx )
    Install and Run TCPView

    Download WireShark From:
    ( http://www.wireshark.org/download.html )
    Install and Run WireShark

        Run these programs to monitor TCP/UDP Inbound/Outbound connections with listed applications. This will tell you if there is any-
        suspicious packet activity happening on your network. TCP stands for Transmission Control Protocol, UDP stands for User Datagram Protocol.
        It would be wise of you to learn each of the several Internet Protocols. IGMP, GRE, ICMP, etcetera.
    Additionally you can open an elevated CMD Prompt Terminal and type "NetStat -nab", this will show all inbound/outbound connections with detailed information-
    being, owned process, local ip:port, foreign ip:port, protocol type and status of the connection.
---------------------------------------------------------------------------------------