Peios Security Fundamentals

Topics

Identity

• Identity

  • Identity in Peios
  • SIDs
  • Well-known principals
  • Claims on a token

  4 articles · 26 min

• Tokens

  • Tokens
  • Token types and fields
  • Token lifecycle
  See all 6 articles

  6 articles · 50 min

• Logon Sessions

  • Logon sessions
  • Logon types
  • Session lifecycle
  • The logonse command

  4 articles · 23 min

• Signing In

  • Signing in
  • The login command

  2 articles · 11 min

• Managing Local Principals

  • Managing local principals
  • The local store
  • Creating accounts
  See all 6 articles

  6 articles · 39 min

• Impersonation

  • Impersonation
  • Impersonation levels
  • The two-gate model
  • Peer tokens and capture

  4 articles · 33 min

Access Control

• Security Descriptors

  • Security descriptors
  • ACLs, ACEs, and access masks
  • DACL evaluation
  See all 9 articles

  9 articles · 1 hr 19 min

• Privileges

  • Privileges
  • Privilege lifecycle
  • Intent-gated privileges
  See all 5 articles

  5 articles · 47 min

• Access Decisions

  • Access decisions
  • Mandatory integrity control
  • Privileges in the pipeline
  See all 5 articles

  5 articles · 53 min

• Central Access Policies

  • Central access policies
  • Policies and rules
  • Evaluation
  See all 5 articles

  5 articles · 41 min

• File access

  • File access
  • The handle model
  • Opening files
  See all 5 articles

  5 articles · 47 min

Sandboxing

• Confinement

  • Confinement
  • Capabilities and modes
  • The confinement pass
  • Positive confinement

  4 articles · 36 min

• Process Integrity Protection

  • Process integrity protection
  • The process security descriptor
  • The two-check rule
  • PIP in practice

  4 articles · 35 min

• Binary Signing

  • Binary signing
  • Signature format
  • Verification and pinning
  • Keys and image build

  4 articles · 34 min

• Process Mitigations

  • Process mitigations
  • Catalog
  • Applying and lifecycle

  3 articles · 30 min

Observability

• Auditing

  • Auditing
  • Audit ACEs
  • Policy-forced auditing
  • Events and transport

  4 articles · 38 min

• Inspecting security state

  • Inspecting security state
  • Inspecting tokens
  • Inspecting sessions
  See all 5 articles

  5 articles · 38 min

• Boot and trust establishment

  • Boot and trust establishment
  • Bootstrap tokens
  • The initramfs stage
  See all 9 articles

  9 articles · 1 hr 34 min