User computer security analysis

Shtein Solutions provides technical penetration testing services. Our experience of 13 years, speaks for itself.

Hardening computers in the workplace involves implementing a series of security measures to protect systems from potential threats and vulnerabilities. This process includes installing and regularly updating antivirus software, configuring firewalls, and ensuring that operating systems and applications receive timely patches. Additionally, hardening entails setting up strong authentication mechanisms such as multi-factor authentication, enforcing strict access controls, and using encryption to safeguard sensitive data. Regular security audits, employee training on cybersecurity best practices, and the establishment of incident response protocols are also crucial. By taking these steps, organizations can significantly reduce the risk of cyberattacks, data breaches, and other security incidents, ensuring a safer and more secure computing environment for all employees.

One of the important areas in strengthening computer security in the workplace is control and monitoring of processes, networks and data. Analysis of computer security of workstations allows you to identify shortcomings and eliminate them.

We use modern standards and practices to analyze computer security of workstations:

• MITRE ATT&CK® Matrix for Enterprise
• NIST SP 800-115
• PCI Penetration Testing Guidance

In general, the order of work is as follows:

• Getting preliminary information about the customer's environment.
• Obtaining access to a workstation with non-privileged access
• Security analysis. Vulnerabilities are detected using automated utilities and manual methods, including the following techniques:
  • Content Injection
  • Drive-by Compromise
  • External Remote Services
  • Hardware Additions
  • Supply Chain Compromise
  • Local Accounts
  • Command and Scripting Interpreter
  • Inter-Process Communication
  • and more
• Exploitation of vulnerabilities. Methods and tools are selected individually for each type of vulnerability. Both publicly available utilities and proprietary tools are used.

The result of the work will be a report containing:

• Test procedure.
• Conclusions for management containing an overall assessment of the level of security.
• Description of identified deficiencies.
• Recommendations for eliminating identified vulnerabilities.

The following works can be a logical continuation of a penetration test:

• Design and implementation of security systems
• Design and implementation of a security level management system
• Monitoring the security of the corporate network perimeter