PowerShell Automation and Scripting for Cybersecurity: Hacking and defense for red and blue teamers

Miriam C. Wiesner

$9.99 ~~$39.99~~

4.8 (23 Ratings)

eBook Aug 2023 572 pages 1st Edition

Miriam C. Wiesner

$9.99 ~~$39.99~~

4.8 (23 Ratings)

eBook Aug 2023 572 pages 1st Edition

What do you get with eBook?

Instant access to your Digital eBook purchase

Download this book in EPUB and PDF formats

Access this title in our online reader with advanced features

DRM FREE - Read whenever, wherever and however you want

AI Assistant (beta) to help accelerate your learning

View table of contents

Preview Book

Download Code

Key benefits

Master PowerShell for security by configuring, auditing, monitoring, exploiting, and bypassing defenses
Research and develop methods to bypass security features and use stealthy tradecraft
Explore essential security features in PowerShell and protect your environment against exploits and bypasses

Description

Take your cybersecurity skills to the next level with this comprehensive guide to PowerShell security! Whether you’re a red or blue teamer, you’ll gain a deep understanding of PowerShell’s security capabilities and how to use them. After revisiting PowerShell basics and scripting fundamentals, you’ll dive into PowerShell Remoting and remote management technologies. You’ll learn how to configure and analyze Windows event logs and understand the most important event logs and IDs to monitor your environment. You’ll dig deeper into PowerShell’s capabilities to interact with the underlying system, Active Directory and Azure AD. Additionally, you’ll explore Windows internals including APIs and WMI, and how to run PowerShell without powershell.exe. You’ll uncover authentication protocols, enumeration, credential theft, and exploitation, to help mitigate risks in your environment, along with a red and blue team cookbook for day-to-day security tasks. Finally, you’ll delve into mitigations, including Just Enough Administration, AMSI, application control, and code signing, with a focus on configuration, risks, exploitation, bypasses, and best practices. By the end of this book, you’ll have a deep understanding of how to employ PowerShell from both a red and blue team perspective.

Who is this book for?

This book is for security professionals, penetration testers, system administrators, and red and blue teams looking to learn how to leverage PowerShell for security operations. A basic understanding of PowerShell, cybersecurity fundamentals, and scripting is a must. For some parts a basic understanding of active directory, C++/C#, and assembly can be beneficial.

What you will learn

Leverage PowerShell, its mitigation techniques, and detect attacks
Fortify your environment and systems against threats
Get unique insights into event logs and IDs in relation to PowerShell and detect attacks
Configure PSRemoting and learn about risks, bypasses, and best practices
Use PowerShell for system access, exploitation, and hijacking
Red and blue team introduction to Active Directory and Azure AD security
Discover PowerShell security measures for attacks that go deeper than simple commands
Explore JEA to restrict what commands can be executed

What do you get with eBook?

Instant access to your Digital eBook purchase

Download this book in EPUB and PDF formats

Access this title in our online reader with advanced features

DRM FREE - Read whenever, wherever and however you want

AI Assistant (beta) to help accelerate your learning

Frequently bought together

$49.99

Effective Threat Investigation for SOC Analysts

$54.99

Total $ 154.97

Filter reviews by

All

Packt verified reviews

Feefo verified reviews

Amazon verified reviews

N/A Feb 21, 2024

Pubblicazioni interessanti scritti con il giusto livello tecnico ma soprattutto chiaro.

Feefo Verified review

Dominik Dennert Sep 08, 2023

Sehr informativ 👍👍

Amazon Verified review

Franziska Jan 04, 2024

Miriam C. Wiesner's "PowerShell Automation and Scripting for Cybersecurity" is an exceptional resource for both beginners and seasoned professionals. As someone new to PowerShell, I found the explanations incredibly clear and accessible. What truly impressed me was the depth of content covered in this book. Miriam Wiesner's expertise shines through every chapter, making complex concepts easy to grasp. The book strikes the perfect balance between explaining to beginners and offering invaluable insights for PowerShell experts. I highly recommend this book to anyone seeking a comprehensive understanding of PowerShell and its applications in cybersecurity. It's an invaluable addition to any professional's library.

Jamaal Gervais Dec 11, 2023

I have understood so many things more clearly after reading this book.I am already on the hunt for other books authored by Miriam C. Wiesner.

Rio Sep 06, 2023

From the very beginning, it's clear that the author is a seasoned expert in the field of cybersecurity. The book starts with a strong foundation, ensuring that readers of all backgrounds can follow along. Whether you are an aspiring penetration tester, a security analyst, or an experienced hacker, this book caters to a wide range of skill levels.

PowerShell Automation and Scripting for Cybersecurity: Hacking and defense for red and blue teamers

What do you get with eBook?