RDP Check (PORT 3389)

NLA,FIPS,ENC

Network Level Authentication (NLA) Disabled
Terminal Services Encryption Level is Medium or Low, or
Terminal Services Encryption Level is not FIPS-140 Compliant

Tools

https://github.com/portcullislabs/rdp-sec-check

Solution

videos:https://www.youtube.com/watch?v=nyBOJwvUaKQ
Link:https://www.phr33fall.co.uk/windows-rdp-hardening/

SMBv1 Check (PORT 445)

Smb protocols

nmap -sV -T5 -Pn -p 445 --script smb-protocols IPs

Solution

https://support.microsoft.com/en-us/help/2696547/detect-enable-disable-smbv1-smbv2-smbv3-in-windows-and-windows-server