Thor's Microsoft Security Bible

Chapter 1 Securely Writing Web Proxy Log Data to Structured Query Language (SQL) Server and Programmatically Monitoring Web Traffic Data in Order to Automatically Inject Allow/Deny Rules into Threat Management Gateway (TMG)

Introduction

Scope and Considerations

Implementation

Securely Logging Data to SQL

Designing the Workflow

Execution

Summary

Chapter 2 Internet Information Server (IIS) Authentication and Authorization Models, and Locking Down File Access with Encrypting File System (EFS) and Web Distributed Authoring and Versioning (Web DAV)

Introduction

RSA and AES

Building the Web Application Structure

MISSING TITLE

Security in Depth

Securing Access with WebDAV

Conclusion

Summary

Chapter 3 Analyzing and Blocking Malicious Traffic Based on Geolocation

Introduction

Research and Due Diligence

Implementing a Solution

Integrating with TMG

Summary

References

Chapter 4 Creating an Externally Accessible Authenticated Proxy in a Secure Manner

Introduction

Build It, and They Will Come

Summary

Chapter 5 The Creation and Maintenance of Low Privileged Service Users (with a focus on SQL)

Introduction

Creating and Configuring Service User Accounts

Real, Quantifiable Password Strength, and How to Measure It

Summary

References

Chapter 6 Remote Security Log Collection in a Least Privilege Environment

Introduction

Log Fetcher Architecture

Accessing WMI

Show Me The Code!

Summary

Chapter 7 Securing RDP

Introduction

General RDP Attacks and Mitigation

RDP Solutions Overview

Direct Access of Multiple RDP Hosts

RDG/TSG

RDP Host Security

RDWeb and RemoteApp

Workstation Host Considerations

Limiting Access with Source Port Access Rules

Summary

Appendix A List Of Acronyms

Appendix B Full list of Server 2008 logs via WEVTUTIL tool