Adversarial Tradecraft in Cybersecurity: Offense versus defense in real-time computer conflict

Dan Borges

£37.99

4.9 (43 Ratings)

Audiobook Jun 2021 8hrs 1min 1st Edition

Dan Borges

£37.99

4.9 (43 Ratings)

Audiobook Jun 2021 8hrs 1min 1st Edition

What do you get with Audiobook?

Download a zip folder containing audio files (MP3) and a supplementary PDF

DRM FREE - Listen whenever, wherever and however you want

View table of contents

Download Code

Key benefits

Gain an advantage against live hackers in a competition or real computing environment
Understand advanced red team and blue team techniques with code examples
Learn to battle in short-term memory, whether remaining unseen (red teams) or monitoring an attacker's traffic (blue teams)

Description

Little has been written about what to do when live hackers are on your system and running amok. Even experienced hackers tend to choke up when they realize the network defender has caught them and is zoning in on their implants in real time. This book will provide tips and tricks all along the kill chain of an attack, showing where hackers can have the upper hand in a live conflict and how defenders can outsmart them in this adversarial game of computer cat and mouse. This book contains two subsections in each chapter, specifically focusing on the offensive and defensive teams. It begins by introducing you to adversarial operations and principles of computer conflict where you will explore the core principles of deception, humanity, economy, and more about human-on-human conflicts. Additionally, you will understand everything from planning to setting up infrastructure and tooling that both sides should have in place. Throughout this book, you will learn how to gain an advantage over opponents by disappearing from what they can detect. You will further understand how to blend in, uncover other actors’ motivations and means, and learn to tamper with them to hinder their ability to detect your presence. Finally, you will learn how to gain an advantage through advanced research and thoughtfully concluding an operation. By the end of this book, you will have achieved a solid understanding of cyberattacks from both an attacker’s and a defender’s perspective.

Who is this book for?

Pentesters to red teamers, security operations center analysts to incident responders, attackers, defenders, general hackers, advanced computer users, and security engineers will benefit from this book. Participants in purple teaming or adversarial simulations will also learn a lot from its practical examples of processes for gaining an advantage over the opposing team. Basic knowledge of Python, Go, Bash, PowerShell, system administration as well as knowledge of incident response in Linux and prior exposure to any kind of cybersecurity knowledge, penetration testing, and ethical hacking basics will help you follow along.

What you will learn

Understand how to implement process injection and how to detect it
Turn the tables on the offense with active defense
Disappear on the defender's system, by tampering with defensive sensors
Upskill in using deception with your backdoors and countermeasures including honeypots
Kick someone else from a computer you are on and gain the upper hand
Adopt a language agnostic approach to become familiar with techniques that can be applied to both the red and blue teams
Prepare yourself for real-time cybersecurity conflict by using some of the best techniques currently in the industry

What do you get with Audiobook?

Download a zip folder containing audio files (MP3) and a supplementary PDF

DRM FREE - Listen whenever, wherever and however you want

Frequently bought together

£41.99

£41.99

Total £ 125.97

Filter reviews by

All

Amazon verified reviews

Rachel E Dec 29, 2021

PROS:1) The author does a really good job of balancing high-level security concepts with low-level techniques. He does this by focusing on principles and using his experience to break-down how the techniques have changed yet the fundamental principles stay the same. I am often worried about buying tech books because of how quickly they become out of date. I don't think this will be an issue with this book because of how it is written.2) The book is loaded with nuggets of wisdom and the author's industry experience really shines through.3) The book also strikes a balance between offense & defense and the difference between long-term and short-term engagements.4) The author provides a ton of great resources for you to check out, yet it can be read without visiting those resources (Some books require you to visit a ton of online resources to get through the material and I realize I would have rather have as an ebook because of the effort to switch back and forth. I liked reading the physical copy of the book).5) I learned a ton! I think this is most important :)CONS1) I don't think you a lot of prerequisite knowledge to read this book, but I think it would be difficult for an absolute newbie.

Amazon Verified review

A Jul 11, 2021

This was an outstanding book! I highly recommend it for both new and experienced infosec engineers. The book is crammed with helpful theory and realistic attacks, as well as being useful to both blue teams and red teams alike.

Ben Wabschall Feb 27, 2022

This book is beautifully presented and provides a valuable take on the intricacies of the growing field of cyber security. Bravo to Dan Borges!

Kaitlyn Apr 30, 2023

This is one of the best books on advance red team tradecraft. You need this book if you want to go beyond being a loud attacker who gets caught. You want to be invisible and not leave logs. This book will teach you stealth.

Dr. Roderick Arthur - Security Operations at Confidential Jul 05, 2021

I recently received a review copy of Adversarial Tradecraft in Cybersecurity by Dan Borges, and found myself tempted to skip ahead to what I considered the more fun, hands-on stuff, but even the beginning of the book captured my interest. The book is a great read for the average reader as well as cybersecurity professionals interested in the world of cyber conflict. In Chapter One, Borges explores both sides of cyber conflict, from attacker and defender perspectives, as well as associates the cybersecurity profession as a sort of a high stakes game between both parties. Throughout the book, Borges explains the use of an analog form of the still useful kill chain, known as attack trees, which is a conceptual flow diagram of how a target may be attacked.The book is designed for InfoSec attack and defense competitions, but the strategies discussed can be utilized by incident responders for real-world security incidents. In fact, Borges suggests installing a virtual box with Kali Linux and Metasploit to experiment with the exploits and techniques discussed in the book (which I started but using my favorite app, which is VMWare). Practitioners involved in security ops will find this book extremely useful and educational, and is easily a five star read!Dr. Rod Arthur

Adversarial Tradecraft in Cybersecurity: Offense versus defense in real-time computer conflict

What do you get with Audiobook?

Key benefits

Description

Who is this book for?

What you will learn

Product Details

What do you get with Audiobook?

Product Details

Frequently bought together

Table of Contents

Recommendations for you

Customer reviews

Filter reviews by

People who bought this also bought

About the author

FAQs

Adversarial Tradecraft in Cybersecurity: Offense versus defense in real-time computer conflict

What do you get with Audiobook?

Contact Details

Billing Address

Key benefits

Description

Who is this book for?

What you will learn

Product Details

What do you get with Audiobook?

Contact Details

Billing Address

Product Details

Packt Subscriptions

Frequently bought together

Table of Contents

Recommendations for you

Customer reviews

Filter reviews by

People who bought this also bought

About the author

FAQs