Home
Recent Pastes
Top Pastes
Advertisement
Account
Pentesting Active Directory
Anduril
TheLeaker
95 Pastes
1.5K Views
Full Title Wont Fit Pentesting Active Directory and Windows-based Infrastructure ------------------------------------------------------------------ Key Features Find out how to attack real-life Microsoft infrastructure Discover how to detect adversary activities and remediate your environment Apply the knowledge you’ve gained by working on hands-on exercises Book Description This book teaches you the tactics and techniques used to attack a Windows-based environment, along with showing you how to detect malicious activities and remediate misconfigurations and vulnerabilities. You’ll begin by deploying your lab, where every technique can be replicated. The chapters help you master every step of the attack kill chain and put new knowledge into practice. You’ll discover how to evade defense of common built-in security mechanisms, such as AMSI, AppLocker, and Sysmon; perform reconnaissance and discovery activities in the domain environment by using common protocols and tools; and harvest domain-wide credentials. You’ll also learn how to move laterally by blending into the environment’s traffic to stay under radar, escalate privileges inside the domain and across the forest, and achieve persistence at the domain level and on the domain controller. Every chapter discusses OpSec considerations for each technique, and you’ll apply this kill chain to perform the security assessment of other Microsoft products and services, such as Exchange, SQL Server, and SCCM. By the end of this book, you’ll be able to perform a full-fledged security assessment of the Microsoft environment, detect malicious activity in your network, and guide IT engineers on remediation steps to improve the security posture of the company. What you will learn Understand and adopt the Microsoft infrastructure kill chain methodology Attack Windows services, such as Active Directory, Exchange, WSUS, SCCM, AD CS, and SQL Server Disappear from the defender’s eyesight by tampering with defensive capabilities Upskill yourself in offensive OpSec to stay under the radar Find out how to detect adversary activities in your Windows environment Get to grips with the steps needed to remediate misconfigurations Prepare yourself for real-life scenarios by getting hands-on experience with exercises Who this book is for This book is for pentesters and red teamers, security and IT engineers, as well as blue teamers and incident responders interested in Windows infrastructure security. The book is packed with practical examples, tooling, and attack-defense guidelines to help you assess and improve the security of your real-life environments. To get the most out of this book, you should have basic knowledge of Windows services and Active Directory. Improve your pentesting skills on real-world Microsoft infrastructure with hands-on exercises and following OpSec-based attack detection best practices Key Features Learn how to attack real-world Microsoft infrastructure Learn how to detect adversary activity and remediate your environment Apply what you learn with hands-on exercises Book Description In this book, you'll learn the tactics and techniques used to attack Windows environments, as well as how to detect malicious activity and resolve misconfigurations and vulnerabilities. You'll start by setting up your lab where each technique can be replicated. The chapters will help you master each step of the attack kill chain and put your new knowledge into practice. You'll learn how to bypass common built-in security mechanisms such as AMSI, AppLocker, and Sysmon; Perform reconnaissance and detection activities in a domain environment using common protocols and tools; and collect credentials for the entire domain. You will also learn how to move laterally, blending with environment traffic to remain visible, escalate privileges within a domain and across the forest, and achieve persistence at the domain level and at the domain controller. Each chapter covers OpSec considerations for each method, and you will apply this troubleshooting chain to perform security assessments of other Microsoft products and services, such as Exchange, SQL Server, and SCCM. After reading this book, you will be able to conduct a comprehensive security assessment of your Microsoft environment, detect malicious activity on your network, and provide troubleshooting guidance to IT engineers to improve your company's security posture. What you will learn Understand and adopt Microsoft infrastructure kill chain methodology Attack Windows services such as Active Directory, Exchange, WSUS, SCCM, AD CS and SQL Server Get out of the defender's sight by interfering with defensive capabilities Improve your skills in offensive OpSec to remain undetected Learn how to detect adversary activity in your Windows environment Learn the steps required to troubleshoot misconfigurations Prepare for real-life scenarios with hands-on exercise experience Who is this book for? This book is intended for pentesters and red teams, security and IT engineers, blue teams and incident responders interested in Windows infrastructure security. The book is equipped with practical examples, tools, and attack defense recommendations to help you evaluate and improve the security of your real-world environments. To get the most out of this book, you should have a basic knowledge of Windows Services and Active Directory. https://pixeldrain.com/u/G6G9D1xb
April 27, 2024
Public Paste
Never Expires
5.39 KB
16 Views
Raw
Download
