9781800569263_

Explore PowerShells offensive and defensive capabilities to strengthen your organizations security Purchase of the print or Kindle book includes a free PDF eBook

Key Features

Master PowerShell for security by configuring, auditing, monitoring, exploiting, and bypassing defenses
Research and develop methods to bypass security features and use stealthy tradecraft
Explore essential security features in PowerShell and protect your environment against exploits and bypasses

Book Description

Take your cybersecurity skills to the next level with this comprehensive guide to PowerShell security! Whether youre a red or blue teamer, youll gain a deep understanding of PowerShells security capabilities and how to use them. After revisiting PowerShell basics and scripting fundamentals, youll dive into PowerShell Remoting and remote management technologies. Youll learn how to configure and analyze Windows event logs and understand the most important event logs and IDs to monitor your environment. Youll dig deeper into PowerShells capabilities to interact with the underlying system, Active Directory and Azure AD. Additionally, youll explore Windows internals including APIs and WMI, and how to run PowerShell without powershell.exe. Youll uncover authentication protocols, enumeration, credential theft, and exploitation, to help mitigate risks in your environment, along with a red and blue team cookbook for day-to-day security tasks. Finally, youll delve into mitigations, including Just Enough Administration, AMSI, application control, and code signing, with a focus on configuration, risks, exploitation, bypasses, and best practices. By the end of this book, youll have a deep understanding of how to employ PowerShell from both a red and blue team perspective.

What you will learn

Leverage PowerShell, its mitigation techniques, and detect attacks
Fortify your environment and systems against threats
Get unique insights into event logs and IDs in relation to PowerShell and detect attacks
Configure PSRemoting and learn about risks, bypasses, and best practices
Use PowerShell for system access, exploitation, and hijacking
Red and blue team introduction to Active Directory and Azure AD security
Discover PowerShell security measures for attacks that go deeper than simple commands
Explore JEA to restrict what commands can be executed

Who this book is for

This book is for security professionals, penetration testers, system administrators, and red and blue teams looking to learn how to leverage PowerShell for security operations. A basic understanding of PowerShell, cybersecurity fundamentals, and scripting is a must. For some parts a basic understanding of active directory, C/C#, and assembly can be beneficial.

...(*_*)9781800569263_

Explore PowerShells offensive and defensive capabilities to strengthen your organizations security with this practical guide Purchase of the print or Kindle book includes a free PDF eBook

Key Features

Master PowerShell for security by configuring, auditing, monitoring, exploiting, and bypassing defenses
Research and develop methods to bypass security features and use stealthy tradecraft
Explore essential security features in PowerShell and protect your environment against exploits and bypasses

Book Description

What you will learn

Leverage PowerShell, its mitigation techniques, and detect attacks
Fortify your environment and systems against threats
Get unique insights into event logs and IDs in relation to PowerShell and detect attacks
Configure PSRemoting and learn about risks, bypasses, and best practices
Use PowerShell for system access, exploitation, and hijacking
Red and blue team introduction to Active Directory and Azure AD security
Discover PowerShell security measures for attacks that go deeper than simple commands
Explore JEA to restrict what commands can be executed

Who this book is for

...(*_*)9781800569263_

Written by a Microsoft security expert, this practical guide helps you harness PowerShells offensive and defensive capabilities to strengthen your organizations security. Purchase of the print or Kindle book includes a free PDF eBook

Key Features

Master PowerShell for securityconfigure, audit, monitor, exploit, and bypass defenses
Gain insights from a Microsoft expert and creator of PowerShell tools EventList and JEAnalyzer
Build stealthy techniques to evade controls while improving detection and response
Learn practical techniques from real-world case studies to enhance your security operations

Book Description

Take your cybersecurity skills to the next level with this comprehensive PowerShell security guide! Whether youre on the red or blue team, youll gain a deep understanding of PowerShells security capabilities and how to apply them. With years of hands-on experience, the author brings real-world use cases to demonstrate PowerShells critical role in offensive and defensive security. After covering PowerShell basics and scripting fundamentals, youll explore PowerShell Remoting and remote management technologies. Youll learn to configure and analyze Windows event logs, identifying crucial logs and IDs for effective monitoring. The book delves into PowerShells interaction with system components, Active Directory, and Azure AD, including stealth execution methods. Youll uncover authentication protocols, enumeration, credential theft, and exploitation, providing strategies to mitigate these risks. A dedicated red and blue team cookbook offers practical security tasks. Finally, youll delve into mitigations such as Just Enough Administration, AMSI, application control, and code signing, emphasizing configuration, risks, exploitation, bypasses, and best practices. By the end of this book, youll confidently apply PowerShell for cybersecurity, from detection to defense, staying ahead of cyber threats.

What you will learn

Leverage PowerShell, its mitigation techniques, and detect attacks
Fortify your environment and systems against threats
Get unique insights into event logs and IDs in relation to PowerShell and detect attacks
Configure PSRemoting and learn about risks, bypasses, and best practices
Use PowerShell for system access, exploitation, and hijacking
Red and blue team introduction to Active Directory and Azure AD security
Discover PowerShell security measures for attacks that go deeper than simple commands
Explore JEA to restrict what commands can be executed

Who this book is for

This book is for security professionals, penetration testers, system administrators, red and blue team members, and cybersecurity enthusiasts aiming to enhance their security operations using PowerShell. Whether youre experienced or new to the field, it offers valuable insights and practical techniques to leverage PowerShell for various security tasks. A basic understanding of PowerShell and cybersecurity fundamentals is recommended. Familiarity with concepts such as Active Directory, as well as programming languages like C and Assembly, can be beneficial.

...

PowerShell Automation and Scripting for Cybersecurity

Comentarios