TOMORISUNIVERSITY03
TRACK 11 · 56 COURSES
FROM DEFAULT TO FORTRESS.
Active Directory is still the crown jewel attackers go after. This track goes deeper than any standard course: GPO internals, tiering, Kerberos and NTLM hardening, attack paths and the hardening baselines our engineers build and run for real customers.
WHO IT’S FOR
- 01SERVER & AD ADMINS
Those responsible for Windows Server and Active Directory.
- 02SECURITY ENGINEERS
Anyone hardening on-prem and hybrid environments.
- 03MSP ENGINEERS
Teams standardizing hardening across many customers.
56 COURSES
The courses.
| Code | Course | Level | Duration |
|---|---|---|---|
| SRV-01 | Windows Server 2025 Administration | Advanced | 3 days |
| SRV-02 | Active Directory Administration | Advanced | 2 days |
| SRV-03 | Group Policy Fundamentals | Fundamentals | 1 day |
| SRV-04 | Hyper-V & failover clustering | Advanced | 2 days |
| SRV-05 | Windows Admin Center & hybrid management | Advanced | 1 day |
| SRV-06 | DNS & DHCP for Windows Server | Advanced | ½ day |
| SRV-07 | AD Certificate Services (PKI) Deep Dive | Expert | 2 days |
| SRV-08 | Remote Desktop Services | Advanced | 1 day |
| SRV-09 | File servers, DFS & Storage Spaces | Advanced | 1 day |
| SRV-10 | Windows Server hardening & security baselines | Advanced | 1 day |
| SRV-11 | Windows Server upgrade & migration playbook | Advanced | 1 day |
| SRV-12 | VMware exit: migrating to Hyper-V, Azure Local or Azure | Advanced | 1 day |
| SRV-13 | GPO Deep Dive 1: processing, precedence, loopback & filtering | Expert | 1 day |
| SRV-14 | GPO Deep Dive 2: preferences, item-level targeting & WMI filters | Expert | 1 day |
| SRV-15 | GPO Deep Dive 3: Registry.pol, delvals & why settings do not merge | Expert | 1 day |
| SRV-16 | GPO troubleshooting: gpresult, RSoP & event logs | Advanced | 1 day |
| SRV-17 | GPO design patterns: standalone, scalable baselines | Advanced | 1 day |
| SRV-18 | Central Store, ADMX management & versioning | Advanced | ½ day |
| SRV-19 | GPO backup, change control & documentation | Advanced | ½ day |
| SRV-20 | Microsoft security baselines in practice: SCT, PolicyAnalyzer, LGPO | Advanced | 1 day |
| SRV-21 | TOMORIS Hardening Baselines: the complete series | Expert | 3 days |
| SRV-22 | Baseline workshop: ASR rules as standalone GPOs | Advanced | 1 day |
| SRV-23 | Baseline workshop: LDAP signing, channel binding & NTLM hardening | Advanced | 1 day |
| SRV-24 | NTLM audit & roadmap to retirement | Advanced | 1 day |
| SRV-25 | Baseline workshop: hardening Windows services | Advanced | ½ day |
| SRV-26 | Baseline workshop: hardening name resolution (LLMNR, NBT-NS, mDNS) | Advanced | ½ day |
| SRV-27 | Baseline workshop: Defender for Identity sensor & audit baseline | Advanced | ½ day |
| SRV-28 | SMB hardening: signing, encryption & SMBv1 removal | Advanced | ½ day |
| SRV-29 | Kerberos Deep Dive: tickets, delegation & armoring | Expert | 1 day |
| SRV-30 | Kerberos hardening: AES only, RC4 removal & delegation cleanup | Expert | 1 day |
| SRV-31 | Active Directory tiering model: design for Tier 0, 1, 2 | Expert | 2 days |
| SRV-32 | Tier 0 hardening: domain controllers, PKI, Entra Connect | Expert | 1 day |
| SRV-33 | Privileged Access Workstations (PAW) Build Lab | Advanced | 1 day |
| SRV-34 | Authentication Policies & Silos | Advanced | ½ day |
| SRV-35 | Protected Users, Credential Guard & LSA protection | Advanced | ½ day |
| SRV-36 | AD delegation model & least privilege administration | Advanced | 1 day |
| SRV-37 | AD attack paths: BloodHound & PingCastle hands-on | Expert | 1 day |
| SRV-38 | AD attacks live: Kerberoasting, Pass-the-Hash, DCSync | Expert | 1 day |
| SRV-39 | AD CS attack & defense: the ESC attack classes | Expert | 1 day |
| SRV-40 | AD Forest Recovery & DC restore | Expert | 1 day |
| SRV-41 | AD health check: replication, FSMO, DNS, sites | Advanced | 1 day |
| SRV-42 | AD cleanup: stale objects, ACLs & AdminSDHolder | Advanced | ½ day |
| SRV-43 | Fine-Grained Password Policies & Password Protection | Advanced | ½ day |
| SRV-44 | Advanced Audit Policy & Windows logging design | Expert | 1 day |
| SRV-45 | Windows Event Forwarding & Sysmon | Advanced | 1 day |
| SRV-46 | Server Core & remote management | Advanced | ½ day |
| SRV-47 | PowerShell for AD administrators | Advanced | 1 day |
| SRV-48 | Patch management: from WSUS to Azure Update Manager | Advanced | ½ day |
| SRV-49 | Hyper-V security: shielded VMs & host hardening | Advanced | ½ day |
| SRV-50 | Storage Spaces Direct & hyperconverged Windows Server | Advanced | 1 day |
| SRV-51 | Print server hardening: lessons from PrintNightmare | Advanced | ½ day |
| SRV-52 | RDP hardening & secure remote administration | Advanced | ½ day |
| SRV-53 | Hardening day for domain controllers | Advanced | 1 day |
| SRV-54 | Windows Server 2025: new features deep dive | Expert | 1 day |
| SRV-55 | Hardening Bootcamp: from default to fortress | Expert | 5 days |
| SRV-56 | Group Policy Masterclass Extreme | Expert | 3 days |
YOUR NEXT STEP
Get your team
ready for tomorrow.
Together we find the right training.