PowerShell Automation and Scripting for Cybersecurity : Hacking and defense for red and blue teamers

Descripción

nach der Bestellung gedruckt Neuware - Printed after ordering - Explore PowerShell's offensive and defensive capabilities to strengthen your organization's security with this practical guidePurchase of the print or Kindle book includes a free PDF Elektronisches BuchKey Features Master PowerShell for security by configuring, auditing, monitoring, exploiting, and bypassing defenses Research and develop methods to bypass security features and use stealthy tradecraft Explore essential security features in PowerShell and protect your environment against exploits and bypassesBook DescriptionTake your cybersecurity skills to the next level with this comprehensive guide to PowerShell security! Whether you're a red or blue teamer, you'll gain a deep understanding of PowerShell's security capabilities and how to use them.After revisiting PowerShell basics and scripting fundamentals, you'll dive into PowerShell Remoting and remote management technologies. You'll learn how to configure and analyze Windows event logs and understand the most important event logs and IDs to monitor your environment. You'll dig deeper into PowerShell's capabilities to interact with the underlying system, Active Directory and Azure AD. Additionally, you'll explore Windows internals including APIs and WMI, and how to run PowerShell without powershell.exe. You'll uncover authentication protocols, enumeration, credential theft, and exploitation, to help mitigate risks in your environment, along with a red and blue team cookbook for day-to-day security tasks. Finally, you'll delve into mitigations, including Just Enough Administration, AMSI, application control, and code signing, with a focus on configuration, risks, exploitation, bypasses, and best practices.By the end of this book, you'll have a deep understanding of how to employ PowerShell from both a red and blue team perspective.What you will learn Leverage PowerShell, its mitigation techniques, and detect attacks Fortify your environment and systems against threats Get unique insights into event logs and IDs in relation to PowerShell and detect attacks Configure PSRemoting and learn about risks, bypasses, and best practices Use PowerShell for system access, exploitation, and hijacking Red and blue team introduction to Active Directory and Azure AD security Discover PowerShell security measures for attacks that go deeper than simple commands Explore JEA to restrict what commands can be executedWho this book is forThis book is for security professionals, penetration testers, system administrators, and red and blue teams looking to learn how to leverage PowerShell for security operations. A basic understanding of PowerShell, cybersecurity fundamentals, and scripting is a must. For some parts a basic understanding of active directory, C++/C#, and assembly can be beneficial.Table of Contents Getting Started with PowerShell PowerShell Scripting Fundamentals Exploring PowerShell Remote Management Technologies and PowerShell Remoting Detection - Auditing and Monitoring PowerShell Is Powerful - System and API Access Active Directory - Attacks and Mitigation Hacking the Cloud - Exploiting Azure Active Directory/Entra ID Red Team Tasks and Cookbook Blue Team Tasks and Cookbook Language Modes and Just Enough Administration (JEA) AppLocker, Application Control, and Code Signing Exploring the Antimalware Scan Interface (AMSI) What Else - Further Mitigations and Resources.

N° de ref. del artículo 9781800566378

Contactar al vendedor

Denunciar este artículo

Detalles bibliográficos

Título

PowerShell Automation and Scripting for Cybersecurity : Hacking and defense for red and blue teamers

Editor

Packt Publishing

Fecha de publicación

2023

Idioma

Inglés

ISBN 10

1800566379

ISBN 13

9781800566378

Encuadernación

Taschenbuch

Estado

Neu

Dimensiones

235 mm an. × 191 al. × 31 l. 235 milímetros de ancho por 191 de alto por 31 de largo

Peso

1054 gramos

Acerca de