In this video we trim a few info alerts out of Nessus, this is a completely unnecessary task, but an easy way to rectify some of the informational configuration limitations.
——————————————————————————————————————–
* Fix the users/password
* Fix the Password policy
* Fix the SMB Issue (See script)
* Fix the LanMan Server settings (Other script)
* Cleanup the nessus scan details (Review removed configuration)
* Disable the Advertising ID in windows for Edge
* Run a multitude of re-scans with Nessus.
———————————————————————————————————————-
SMB Script (Save as Bat)
———————————————————————————————————————-
reg add “HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesLanmanServerParameters” /f /v requiresecuritysignature /t Reg_DWORD /d 1
reg add “HKEY_LOCAL_MACHINESystemCurrentControlSetServicesLanManServerParameters” /f /v EnableSecuritySignature /t REG_DWORD /d 1
reg add “HKEY_LOCAL_MACHINESystemCurrentControlSetServicesLanManWorkstationParameters” /f /v RequireSecuritySignature /t REG_DWORD /d 1
reg add “HKEY_LOCAL_MACHINESystemCurrentControlSetServicesLanManWorkstationParameters” /f /v EnableSecuritySignature /t REG_DWORD /d 1
—————————————————————————————————————————
Make sure this key exists:
—————————————————————————————————————————
HKEY_LOCAL_MACHINESystemCurrentControlSetServicesLanManServerParameters
————————————————————————————————————————–
DWORD (32bit) – RestrictNullSessAccess with the value 1
————————————————————————————————————————–
Disable Service CPDSVC – see video
—————————————————————————————————————————
See Video 1:
See Video 2:
This is Video 3:
Subscribe to the X-Lite channel:
———————————————————————————————————————–
#windows11 #windows #homebrew #windows10 #customized #custombuild #xlite
[ad_2]
source
