BIBLIO is the largest independent book marketplace in the world, with over 100 million books.

Skip to content

PowerShell Automation and Scripting for Cybersecurity: Hacking and defense for red and blue teamers

PowerShell Automation and Scripting for Cybersecurity: Hacking and defense for red and blue teamers

PowerShell Automation and Scripting for Cybersecurity: Hacking and defense for
Stock photo: cover may vary

PowerShell Automation and Scripting for Cybersecurity: Hacking and defense for red and blue teamers Paperback / softback - 2023

by Miriam C. Wiesner

Add to wish list
  • New
  • Paperback
New

Description

Paperback / softback. New. Explore PowerShell’s offensive and defensive capabilities to strengthen your organization’s security Purchase of the print or Kindle book includes a free PDF eBook Key Features Master PowerShell for security by configuring, auditing, monitoring, exploiting, and bypassing defenses Research and develop methods to bypass security features and use stealthy tradecraft Explore essential security features in PowerShell and protect your environment against exploits and bypasses Book DescriptionTake your cybersecurity skills to the next level with this comprehensive guide to PowerShell security! Whether you're a red or blue teamer, you'll gain a deep understanding of PowerShell's security capabilities and how to use them. After revisiting PowerShell basics and scripting fundamentals, you’ll dive into PowerShell Remoting and remote management technologies. You’ll learn to configure and analyze Windows’ event logs and understand the most important event logs and IDs to monitor your environment. You’ll dig deeper into PowerShell's capabilities to interact with the underlying system, active directory, and Azure AD. Additionally, you’ll explore Windows internals including APIs & WMI, and how to run PowerShell without powershell.exe. You’ll uncover authentication protocols, enumeration, credential theft, and exploitation, to help mitigate risks in your environment, along with a red and blue team cookbook for day-to-day security tasks. Finally, you’ll delve into mitigations, including Just Enough Administration (JEA), AMSI, application control, and code signing, with focus on configuration, risks, exploitation, bypasses, and best practices. By the end of this book, you'll have a deep understanding of how to employ PowerShell from both a red and blue team perspective.What you will learn Leverage PowerShell, its mitigation techniques, and detect attacks Fortify your environment and systems against threats Get unique insights into event logs and IDs in relation to PowerShell and detect attacks Configure PSRemoting and learn about risks, bypasses, and best practices Use PowerShell for system access, exploitation, and hijacking Red and blue team introduction to active directory and Azure AD security Discover PowerShell security measures for attacks that go deeper than simple commands Explore JEA to restrict what commands can be executed Who this book is forThis book is for security professionals, penetration testers, system administrators, and red and blue teams looking to learn how to leverage PowerShell for security operations. A basic understanding of PowerShell, cybersecurity fundamentals, and scripting is a must. For some parts a basic understanding of active directory, C++/C#, and assembly can be beneficial.
Ask the seller a question Add to wish list
A$94.56
A$19.05 Delivery to USA
Standard delivery: 14 to 21 days
More delivery options
Ships from The Saint Bookstore (Merseyside, United Kingdom)

Details

  • Title PowerShell Automation and Scripting for Cybersecurity: Hacking and defense for red and blue teamers
  • Author Miriam C. Wiesner
  • Binding Paperback
  • Condition New
  • Pages 572
  • Volumes 1
  • Language ENG
  • Publisher Packt Publishing
  • Publication date 2023-08-16
  • Bookseller's Inventory # B9781800566378
  • ISBN 9781800566378 / 1800566379
  • Weight 2.14 lbs (0.97 kg)
  • Dimensions 9.25 x 7.5 x 1.16 in (23.50 x 19.05 x 2.95 cm)
  • Category Computers - General Information
  • Quantity available 10

About The Saint Bookstore Merseyside, United Kingdom

Biblio member since 2018

The Saint Bookstore specialises in hard to find titles & also offers delivery worldwide for reasonable rates.

Terms of Sale: Refunds or Returns: A full refund of the price paid will be given if returned within 30 days in undamaged condition. If the product is faulty, we may send a replacement.

Browse books from The Saint Bookstore

Reader reviews for PowerShell Automation and Scripting for Cybersecurity: Hacking and defense for red and blue teamers

From the publisher

Written by a Microsoft security expert, this practical guide helps you harness PowerShell's offensive and defensive capabilities to strengthen your organization's security.

Purchase of the print or Kindle book includes a free PDF eBook

Key Features:

- Master PowerShell for security-configure, audit, monitor, exploit, and bypass defenses

- Gain insights from a Microsoft expert and creator of PowerShell tools EventList and JEAnalyzer

- Build stealthy techniques to evade controls while improving detection and response

- Learn practical techniques from real-world case studies to enhance your security operations

Book Description:

Take your cybersecurity skills to the next level with this comprehensive PowerShell security guide! Whether you're on the red or blue team, you'll gain a deep understanding of PowerShell's security capabilities and how to apply them.

With years of hands-on experience, the author brings real-world use cases to demonstrate PowerShell's critical role in offensive and defensive security.

After covering PowerShell basics and scripting fundamentals, you'll explore PowerShell Remoting and remote management technologies. You'll learn to configure and analyze Windows event logs, identifying crucial logs and IDs for effective monitoring. The book delves into PowerShell's interaction with system components, Active Directory, and Azure AD, including stealth execution methods. You'll uncover authentication protocols, enumeration, credential theft, and exploitation, providing strategies to mitigate these risks. A dedicated red and blue team cookbook offers practical security tasks. Finally, you'll delve into mitigations such as Just Enough Administration, AMSI, application control, and code signing, emphasizing configuration, risks, exploitation, bypasses, and best practices.

By the end of this book, you'll confidently apply PowerShell for cybersecurity, from detection to defense, staying ahead of cyber threats.

What You Will Learn:

- Leverage PowerShell, its mitigation techniques, and detect attacks

- Fortify your environment and systems against threats

- Get unique insights into event logs and IDs in relation to PowerShell and detect attacks

- Configure PSRemoting and learn about risks, bypasses, and best practices

- Use PowerShell for system access, exploitation, and hijacking

- Red and blue team introduction to Active Directory and Azure AD security

- Discover PowerShell security measures for attacks that go deeper than simple commands

- Explore JEA to restrict what commands can be executed

Who this book is for:

This book is for security professionals, penetration testers, system administrators, red and blue team members, and cybersecurity enthusiasts aiming to enhance their security operations using PowerShell. Whether you're experienced or new to the field, it offers valuable insights and practical techniques to leverage PowerShell for various security tasks. A basic understanding of PowerShell and cybersecurity fundamentals is recommended. Familiarity with concepts such as Active Directory, as well as programming languages like C and Assembly, can be beneficial.

Table of Contents

- Getting Started with PowerShell

- PowerShell Scripting Fundamentals

- Exploring PowerShell Remote Management Technologies and PowerShell Remoting

- Detection - Auditing and Monitoring

- PowerShell Is Powerful - System and API Access

- Active Directory - Attacks and Mitigation

- Hacking the Cloud - Exploiting Azure Active Directory/Entra ID

- Red Team Tasks and Cookbook

- Blue Team Tasks and Cookbook

(N.B. Please use the Read Sample option to see further chapters)

tracking-