Windows Security Internals :A Deep Dive into Windows Authentication, Authorization, and Auditing

4.25 ( 4 Ratings by Goodreads)
Windows Security Internals

Windows Security Internals :A Deep Dive into Windows Authentication, Authorization, and Auditing

4.25 (4 Ratings by Goodreads)
paperback
Published: 30 April, 2024
Standard worldwide delivery by Tue, June 23 - Fri, June 26
Order within 0
Condition: NEW
$52.59
RRP $76.54
You save $23.95 (31%)
Price includes shipping
Available 11 in stock
- +
FREE Returns within 30 days

Description

Learn the core components and features of the Microsoft Windows threat-mitigation system from one of the world's foremost Windows security experts - and Microsoft's top bug hunter - James Forshaw. In this hands-on guidebook, Forshaw distils his more than 20 years of knowledge and practical experience working with Windows security, describing the system in greater depth than any ever before. In-depth technical discussions are rounded out with real-world examples that not only demonstrate how to use PowerShell in security work, but let you explore Windows security features for yourself as you follow along in the text. Early chapters cover the basics, including best practices for setting up a PowerShell environment, understanding the Windows kernel interface, and working within the security reference monitor. As you progress to more advanced topics, Forshaw walks you through highly relevant case studies, as well as the implementation of complex processes like access checking and network authentication. In addition, there are example scripts using the PowerShell scripting language throughout, which can be used to test the behaviour of Windows systems and, in turn, enable you to explore their security without needing a compiler or other development tools. Essential for anyone who works with Windows security, this book dives deeper into core components of the system than even Microsoft's own documentation.
See more

More Details

Type Book
ISBN13 9781718501980
ISBN10 1718501986
Number Of Pages 608
Item Weight 1000 g
Publisher / Reseller No Starch Press,US
Format paperback
See More +

Media Reviews

"This book . . . belongs on the desk of every security professional and developer working with Windows security."
Jeffrey Snover, Inventor of PowerShell, former Chief Architect for Windows Server

"James Forshaw’s understanding of Windows Security rivals that of some of our best security teams roaming throughout Microsoft. Windows Security Internals hits the mark for being an easy-to-read introductory text and equally advanced to teach even the best security folks a thing or two. This book should be required reading for anyone interested in understanding Windows Security and will be required reading for everyone on our team in the Windows Security org."
—Steve Syfuhs, Principal Developer, Windows Authentication, at Microsoft

"An invaluable gem of a book! Highly recommended for every security researcher or enthusiast that wants to understand yet undocumented Security perks of the Windows operating system. James is a fountain of knowledge; he explains clearly and concisely, but also very detailed, what you ever wanted to know about Windows security internals."
—Miriam C. Wiesner, Sr. Security Researcher at Microsoft, author of PowerShell Automation and Scripting for Cybersecurity

Show more

GoodReads Reviews

Author's Bio

James Forshaw is a renowned computer security expert on Google’s Project Zero team. In his more than 20 years of experience analyzing and exploiting security issues in Microsoft Windows and other products, he has discovered hundreds of publicly disclosed vulnerabilities in Microsoft platforms. Others frequently cite his research, which he presents in blogs, on the world stage, or through novel tooling, and he has inspired numerous researchers in the industry. When not breaking the security of other products, James works as a defender, advising teams on their security design and improving the Chromium Windows sandbox to secure billions of users worldwide. He’s also the author of Attacking Network Protocols (No Starch Press)

Show more