浏览代码

added printer spooler disable

Marius Schwarz 4 年之前
父节点
当前提交
33ae262fb9
共有 1 个文件被更改,包括 7 次插入0 次删除
  1. 7 0
      checklists/hardening/win10-AD-hardening.md

+ 7 - 0
checklists/hardening/win10-AD-hardening.md

@@ -18,3 +18,10 @@ tags: [windows, hardening, AD]
 ## Credential hardening
 
 * [ ] Disable LM hashes via GPO noLMHash
+
+## Domain Controler Hardening
+
+* [ ] Disable the printer spooler service (`spoolsv.exe`)
+    - Used for several exploits
+    - CVE-2021-1675
+    - CVE-2020-1048