Updates and Firewall
Patch cadence and Windows Firewall posture — literacy on $LAB_HOST only.
Visual · windows_updates_firewall
Updates + firewall literacy. $LAB_HOST only. Original Cyberlium.
Unpatched and wide-open is how incidents start — on YOUR lab, you read both before you change either.
Windows Update closes known vulnerabilities; Windows Firewall filters inbound (and optionally outbound) traffic. Defenders verify update compliance and document allowed rules on owned hosts. Cyberlium teaches reading update status and firewall profiles on $LAB_HOST — not pushing patches to strangers or blocking café Wi-Fi for 'practice.' Commands like Get-HotFix and Get-NetFirewallProfile are literacy on your machine. Next: Accounts Hygiene.
1. Patch cadence on owned hosts
Defenders track missing critical updates, reboot windows, and WSUS or Windows Update for Business policies. On $LAB_HOST, read last installed update and pending reboot — plan maintenance you control.
Running wuauclt or DISM on a machine you do not administer is out of scope — even if updates are 'good for them.'
Command guide
Try these commands — Patch cadence on owned hosts
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Windows firewall — https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/windows-firewall/ Microsoft updates — https://learn.microsoft.com/en-us/windows/deployment/update/
═══ INSTALL ═══
Linux (Debian/Ubuntu):
macOS:
Windows:
═══ LINUX / macOS ═══
Command — copy this
ss -tulpn 2>/dev/null | grep LISTEN | head -8 || echo 'Compare with Windows Get-NetFirewallProfile on YOUR VM'
═══ WINDOWS ═══
Command — copy this
Get-NetFirewallProfile | Select-Object Name, Enabled Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 5 HotFixID, InstalledOn
Primary tools to practice this lesson: netsh, powershell. Reference sites: Windows firewall (https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/windows-firewall/); Microsoft updates (https://learn.microsoft.com/en-us/windows/deployment/update/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Firewall profiles: Domain, Private, Public
Windows Firewall applies different defaults per profile. Document which profile is active on $LAB_HOST and whether inbound rules exist for lab services you intentionally run.
Disabling firewall on a production café PC to 'test' is forbidden. Lab changes stay on $LAB_HOST with rollback plan.
3. Read, then change with rollback
Ship: update last-applied date + firewall profile summary for $LAB_HOST. Change one rule only if the brief allows — with snapshot. Next: Accounts Hygiene.
4. What you ship: update and firewall readout for $LAB_HOST
Last update date. Active firewall profile. Inbound rule count (read-only). No stranger hosts. chmod 600.
5. What you record before the next lesson
Date. Update status. Firewall profile on $LAB_HOST. File t16-m02-l02-windows-updates-firewall.txt chmod 600.
6. Wrong vs right: stranger hosts vs YOUR lab hosts
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Disable firewall on library PC to 'see what happens.' Force reboot classmate laptop for patches.
- Right: Read update and firewall state on $LAB_HOST. Next: Accounts Hygiene.
Mission: patch and firewall literacy readout
1) Record last installed update on $LAB_HOST. 2) Note active firewall profile and default inbound posture. 3) Do not change stranger machines. Never patch hosts you do not own.
Stuck? Ask Cyberlium AI Mentor
Pending reboot often blocks patch completion — note it in your baseline file.
APPLY: Windows Update on Cyberlium labs applies to:
APPLY: True or False: Disabling firewall on a stranger PC is acceptable defensive testing.
APPLY: Firewall profiles (Domain/Private/Public) matter because:
Accounts Hygiene
Part of Defensive Security Basics with AI — Windows Hardening Literacy.
Windows Lab
Part of Defensive Security Basics with AI — Windows Hardening Literacy.
Quiz — Windows Hardening Literacy
Part of Defensive Security Basics with AI — Windows Hardening Literacy.