E-Books Pentesting Active Directory and Windows-based Infrastructure

[Astaroth]

Spoiler

Key Features
Find out how to attack real-life Microsoft infrastructure
Discover how to detect adversary activities and remediate your environment
Apply the knowledge you’ve gained by working on hands-on exercises
Book Description
This book teaches you the tactics and techniques used to attack a Windows-based environment, along with showing you how to detect malicious activities and remediate misconfigurations and vulnerabilities.
You’ll begin by deploying your lab, where every technique can be replicated. The chapters help you master every step of the attack kill chain and put new knowledge into practice. You’ll discover how to evade defense of common built-in security mechanisms, such as AMSI, AppLocker, and Sysmon; perform reconnaissance and discovery activities in the domain environment by using common protocols and tools; and harvest domain-wide credentials. You’ll also learn how to move laterally by blending into the environment’s traffic to stay under radar, escalate privileges inside the domain and across the forest, and achieve persistence at the domain level and on the domain controller. Every chapter discusses OpSec considerations for each technique, and you’ll apply this kill chain to perform the security assessment of other Microsoft products and services, such as Exchange, SQL Server, and SCCM.
By the end of this book, you’ll be able to perform a full-fledged security assessment of the Microsoft environment, detect malicious activity in your network, and guide IT engineers on remediation steps to improve the security posture of the company.
What you will learn
Understand and adopt the Microsoft infrastructure kill chain methodology
Attack Windows services, such as Active Directory, Exchange, WSUS, SCCM, AD CS, and SQL Server
Disappear from the defender’s eyesight by tampering with defensive capabilities
Upskill yourself in offensive OpSec to stay under the radar
Find out how to detect adversary activities in your Windows environment
Get to grips with the steps needed to remediate misconfigurations
Prepare yourself for real-life scenarios by getting hands-on experience with exercises
Who this book is for
This book is for pentesters and red teamers, security and IT engineers, as well as blue teamers and incident responders interested in Windows infrastructure security. The book is packed with practical examples, tooling, and attack-defense guidelines to help you assess and improve the security of your real-life environments. To get the most out of this book, you should have basic knowledge of Windows services and Active Directory.

Improve your pentesting skills on real-world Microsoft infrastructure with hands-on exercises and following OpSec-based attack detection best practices
Key Features
Learn how to attack real-world Microsoft infrastructure
Learn how to detect adversary activity and remediate your environment
Apply what you learn with hands-on exercises
Book Description
In this book, you'll learn the tactics and techniques used to attack Windows environments, as well as how to detect malicious activity and resolve misconfigurations and vulnerabilities.
You'll start by setting up your lab where each technique can be replicated. The chapters will help you master each step of the attack kill chain and put your new knowledge into practice. You'll learn how to bypass common built-in security mechanisms such as AMSI, AppLocker, and Sysmon; Perform reconnaissance and detection activities in a domain environment using common protocols and tools; and collect credentials for the entire domain. You will also learn how to move laterally, blending with environment traffic to remain visible, escalate privileges within a domain and across the forest, and achieve persistence at the domain level and at the domain controller. Each chapter covers OpSec considerations for each method, and you will apply this troubleshooting chain to perform security assessments of other Microsoft products and services, such as Exchange, SQL Server, and SCCM.
After reading this book, you will be able to conduct a comprehensive security assessment of your Microsoft environment, detect malicious activity on your network, and provide troubleshooting guidance to IT engineers to improve your company's security posture.
What you will learn
Understand and adopt Microsoft infrastructure kill chain methodology
Attack Windows services such as Active Directory, Exchange, WSUS, SCCM, AD CS and SQL Server
Get out of the defender's sight by interfering with defensive capabilities
Improve your skills in offensive OpSec to remain undetected
Learn how to detect adversary activity in your Windows environment
Learn the steps required to troubleshoot misconfigurations
Prepare for real-life scenarios with hands-on exercise experience
Who is this book for?
This book is intended for pentesters and red teams, security and IT engineers, blue teams and incident responders interested in Windows infrastructure security. The book is equipped with practical examples, tools, and attack defense recommendations to help you evaluate and improve the security of your real-world environments. To get the most out of this book, you should have a basic knowledge of Windows Services and Active Directory.

---