PowerShell Automation and Scripting for Cybersecurity

eBook Details:

• Paperback: 572 pages
• Publisher: WOW! eBook (August 16, 2023)
• Language: English
• ISBN-10: 1800566379
• ISBN-13: 978-1800566378

eBook Description:

PowerShell Automation and Scripting for Cybersecurity: Explore PowerShell’s offensive and defensive capabilities to strengthen your organization’s security

Take your cybersecurity skills to the next level with this comprehensive guide to PowerShell security! Whether you’re a red or blue teamer, you’ll gain a deep understanding of PowerShell’s security capabilities and how to use them. After revisiting PowerShell basics and scripting fundamentals, you’ll dive into PowerShell Remoting and remote management technologies. You’ll learn how to configure and analyze Windows event logs and understand the most important event logs and IDs to monitor your environment.

You’ll dig deeper into PowerShell’s capabilities to interact with the underlying system, Active Directory and Azure AD. Additionally, you’ll explore Windows internals including APIs and WMI, and how to run PowerShell without powershell.exe. You’ll uncover authentication protocols, enumeration, credential theft, and exploitation, to help mitigate risks in your environment, along with a red and blue team cookbook for day-to-day security tasks.

Finally, you’ll delve into mitigations, including Just Enough Administration, AMSI, application control, and code signing, with a focus on configuration, risks, exploitation, bypasses, and best practices.

• Leverage PowerShell, its mitigation techniques, and detect attacks
• Fortify your environment and systems against threats
• Get unique insights into event logs and IDs in relation to PowerShell and detect attacks
• Configure PSRemoting and learn about risks, bypasses, and best practices
• Use PowerShell for system access, exploitation, and hijacking
• Red and blue team introduction to Active Directory and Azure AD security
• Discover PowerShell security measures for attacks that go deeper than simple commands
• Explore JEA to restrict what commands can be executed

By the end of this PowerShell Automation and Scripting for Cybersecurity book, you’ll have a deep understanding of how to employ PowerShell from both a red and blue team perspective.