Home » Blog » Mitigating a detected threat

Point 4:

With EternalBlue exploit, the vulnerability is typically associated with Microsoft Security Bulletin MS17-010

EternalBlue exploits a vulnerability in the SMBv1 protocol, allowing remote code execution.

 

 

 

 

 

Point 7:

Disable SMB1 protocol

Disable-WindowsOptionalFeature -Online -FeatureName smb1protocol

 

Enable Firewall:

Ensure the Windows Firewall is enabled and configured properly.

 

Enforce Strong Password Policies:

Open Local Security Policy (type secpol.msc in the Run dialog).

Navigate to Account Policies > Password Policy.

Set policies for password length, complexity, and expiration.

 

Enable Windows Defender:

Ensure Windows Defender or another antivirus software is installed and active.

 

Enable Automatic Updates:

Ensure Windows is configured to automatically download and install updates.

Scroll to Top
0%