What do you get with eBook?

Instant access to your Digital eBook purchase

Download this book in EPUB and PDF formats

Access this title in our online reader with advanced features

DRM FREE - Read whenever, wherever and however you want

AI Assistant (beta) to help accelerate your learning

Key benefits

Find out how to attack real-life Microsoft infrastructure

Discover how to detect adversary activities and remediate your environment

Apply the knowledge you’ve gained by working on hands-on exercises

Purchase of the print or Kindle book includes a free PDF eBook

Description

This book teaches you the tactics and techniques used to attack a Windows-based environment, along with showing you how to detect malicious activities and remediate misconfigurations and vulnerabilities. You’ll begin by deploying your lab, where every technique can be replicated. The chapters help you master every step of the attack kill chain and put new knowledge into practice. You’ll discover how to evade defense of common built-in security mechanisms, such as AMSI, AppLocker, and Sysmon; perform reconnaissance and discovery activities in the domain environment by using common protocols and tools; and harvest domain-wide credentials. You’ll also learn how to move laterally by blending into the environment’s traffic to stay under radar, escalate privileges inside the domain and across the forest, and achieve persistence at the domain level and on the domain controller. Every chapter discusses OpSec considerations for each technique, and you’ll apply this kill chain to perform the security assessment of other Microsoft products and services, such as Exchange, SQL Server, and SCCM. By the end of this book, you'll be able to perform a full-fledged security assessment of the Microsoft environment, detect malicious activity in your network, and guide IT engineers on remediation steps to improve the security posture of the company.

Who is this book for?

This book is for pentesters and red teamers, security and IT engineers, as well as blue teamers and incident responders interested in Windows infrastructure security. The book is packed with practical examples, tooling, and attack-defense guidelines to help you assess and improve the security of your real-life environments. To get the most out of this book, you should have basic knowledge of Windows services and Active Directory.

What you will learn

Understand and adopt the Microsoft infrastructure kill chain methodology

Attack Windows services, such as Active Directory, Exchange, WSUS, SCCM, AD CS, and SQL Server

Disappear from the defender's eyesight by tampering with defensive capabilities

Upskill yourself in offensive OpSec to stay under the radar

Find out how to detect adversary activities in your Windows environment

Get to grips with the steps needed to remediate misconfigurations

Prepare yourself for real-life scenarios by getting hands-on experience with exercises

What do you get with eBook?

Instant access to your Digital eBook purchase

Download this book in EPUB and PDF formats

Access this title in our online reader with advanced features

DRM FREE - Read whenever, wherever and however you want

AI Assistant (beta) to help accelerate your learning

Frequently bought together

PowerShell Automation and Scripting for Cybersecurity

£37.99

£37.99

Pentesting Active Directory and Windows-based Infrastructure

£33.99

Total £ 109.97

N/A Feb 21, 2024

Pubblicazioni interessanti scritti con il giusto livello tecnico ma soprattutto in modo chiaro.

Feefo Verified review

Vedant Gavde Dec 16, 2023

Denis Isakov's "Pentesting Active Directory and Windows-based Infrastructure" serves as an indispensable handbook for cybersecurity professionals and enthusiasts seeking to delve deep into the intricate realm of Windows-based infrastructure security. This book stands out for its focused exploration of lab environment setup and sophisticated evasion and penetration testing techniques specifically targeting Windows environments.From the outset, Isakov's approach is commendable. The book seamlessly introduces readers to the intricacies of setting up lab environments, laying a strong foundation for understanding and implementing effective penetration testing on Windows Active Directory. What makes this guide invaluable is its applicability not only to beginners but also as a comprehensive reference for seasoned professionals navigating the complexities of Windows-based infrastructure security.One of the book's notable strengths is its ability to make complex concepts accessible to a wide audience. Isakov's lucid explanations ensure that even intricate technical details are conveyed in an easy-to-understand manner. The clarity with which he articulates sophisticated evasion and pentesting techniques makes this book a go-to resource for anyone venturing into or honing their skills in this domain.The practicality of this guide cannot be overstated. Isakov skillfully intertwines real-world scenarios and practical examples throughout the book, offering hands-on experience and insights into tackling security challenges in Windows environments. This hands-on approach fosters a deeper understanding of the tools, methodologies, and tactics used in actual penetration testing scenarios.Having delved into "Pentesting Active Directory and Windows-based Infrastructure," I am convinced of its immense value in augmenting skills and techniques essential for securing Windows infrastructures. Whether you're a novice seeking to understand Windows penetration testing or an experienced professional looking to enhance your skill set, this book is an invaluable asset.In conclusion, Denis Isakov's "Pentesting Active Directory and Windows-based Infrastructure" is an essential guide that combines theory with practical application, making it a must-read for cybersecurity professionals aiming to elevate their knowledge and expertise in securing Windows-based networks.

Amazon Verified review

Amazon Customer May 23, 2024

I liked this book, as an experienced AD tester, it made me feel at home :)I think this book is a good resource for penetration testers, and I strongly recommend to replicate the techniques used in a lab environment, which is essential for practical learning and to master the concepts.I appreciated the coverage of topics such as defence evasion, reconnaissance, and domain privilege escalation from a windows environment perspective. I often test AD from windows, and don’t touch Kali. This knowledge will help you on real tests.And I liked the book touching on SCCM, Exchange, CS and MSSQL.However, like all resources, this book can’t cover everything. It serves as a robust foundation, and it is ultimately up to the reader to expand on the topics presented. The book is infact full of resources and links.For junior pentesters, the book may take longer to digest due to the complexity and depth of Active Directory. However, this should not discourage you, but trigger your curiosity and interest.For more experienced testers, it still holds value in my opinion, offering insights that can refine your existing knowledge. There is always something to learn, whether it is a new tool or a different way to achieve the same goal.A book to read, especially if you love Active Directory or if you want to get better at it.

Amazon Verified review

Victor kolawole May 25, 2024

This book has the best content when it comes to an active directory penetration testing, I never regretted buying this book, the hands-on labs are top notch and I will recommend it for anyone who want to learn more about active directory pentesting and it's environment.

Amazon Verified review

D Aug 08, 2024

Great read and top-notch info!I think "Pentesting Active Directory: Windows-based Infrastructure" is an outstanding resource for cybersecurity professionals looking to deepen their knowledge of Active Directory (AD) security testing. This book is a goldmine for anyone involved in penetration testing, red teaming, or network defense, especially in environments heavily reliant on Windows infrastructure.The authors have done an exceptional job of breaking down complex concepts into easily digestible sections, making it accessible even for those who may not be seasoned experts in Active Directory. The book covers a wide range of topics, from the basics of AD structure to advanced exploitation techniques, ensuring that readers understand the subject matter comprehensively.One of the highlights of this book is its practical approach. It doesn't just bombard you with theory; it provides real-world examples, step-by-step guides, and hands-on labs that allow readers to apply what they've learned in a controlled environment. This practical focus makes it an invaluable tool for beginners and experienced professionals looking to sharpen their skills.Additionally, the book's organization is commendable. The chapters are well-structured, progressing logically from foundational knowledge to more advanced topics. Including detailed diagrams and screenshots further enhances the learning experience, making it easier to visualize complex attack scenarios and defenses.What sets this book apart from others in the field is its focus on modern threats and up-to-date techniques and not just generalities. The authors address the latest security challenges organizations face, ensuring readers know how to defend against current and emerging threats.Overall, I think this is a must-have for anyone serious about mastering AD security. Whether you're preparing for a pen testing engagement, strengthening your organization's defenses, or expanding your knowledge, this book will serve as an indispensable guide.Highly recommended!

Amazon Verified review

Pentesting Active Directory and Windows-based Infrastructure: A comprehensive practical guide to penetration testing Microsoft infrastructure

What do you get with eBook?

Key benefits

Description

Who is this book for?

What you will learn

Product Details

What do you get with eBook?

Product Details

Frequently bought together

Recommendations for you

Customer reviews

Filter reviews by

People who bought this also bought

About the author

FAQs

Pentesting Active Directory and Windows-based Infrastructure: A comprehensive practical guide to penetration testing Microsoft infrastructure

What do you get with eBook?

Contact Details

Billing Address

Key benefits

Description

Who is this book for?

What you will learn

Product Details

What do you get with eBook?

Contact Details

Billing Address

Product Details

Packt Subscriptions

Frequently bought together

Recommendations for you

Customer reviews

Filter reviews by

People who bought this also bought

About the author

FAQs