Point 4:
With EternalBlue exploit, the vulnerability is typically associated with Microsoft Security Bulletin MS17-010
EternalBlue exploits a vulnerability in the SMBv1 protocol, allowing remote code execution.
Point 7:
Disable SMB1 protocol
Disable-WindowsOptionalFeature -Online -FeatureName smb1protocol
Enable Firewall:
Ensure the Windows Firewall is enabled and configured properly.
Enforce Strong Password Policies:
Open Local Security Policy (type secpol.msc in the Run dialog).
Navigate to Account Policies > Password Policy.
Set policies for password length, complexity, and expiration.
Enable Windows Defender:
Ensure Windows Defender or another antivirus software is installed and active.
Enable Automatic Updates:
Ensure Windows is configured to automatically download and install updates.