Cybersecurity Recommendations Gone Wrong

Here are the list of recommendations to avoid such a things in future: - Turn off local passwords - Force end of administrators sessions - In group policy set up widgest value to "0", If the UseLogonCredential value is set to 0, WDigest will not store credentials in memory. - Update passwords every month - Check the granted privileges for users, to make them maximum reduced privileges and access only to exact applications - In most cases there would enough standard windows software like an AppLocker. - Approve to run only necessaries applications ONLY. - Don't count on the Anti-Virus, there is no one AV that really helps, they can be useful only in long-term infections, if hackers for some reasons didn't attack in short time. - Install Endpoint Detection and Response security (EDR) and then use the IT-admin to work with it. - For huge companies we suggest at least 3 system administrators working 24 hours, maximum 4 admins working 3 shifts for 8 hours per day, that would be enough.

A screenshot lists awkwardly written recommendations for protecting corporate Windows systems, including disabling local passwords, reducing privileges, updating passwords, using AppLocker and EDR, and hiring several administrators. The joke is that the advice is impractical or contradictory, especially the suggestion to turn off passwords and rely on an absurdly large administration team, making it a humorous cybersecurity reaction image. EN: A screenshot lists awkwardly written recommendations for protecting corporate Windows systems, including disabling local passwords, reducing privileges, updating passwords, using AppLocker and EDR, and hiring several administrators. The joke is that the advice is impractical or contradictory, especially the suggestion to turn off passwords and rely on an absurdly large administration team, making it a humorous cybersecurity reaction image.

• @infosecmemes / 348 2020-08-02