PowerShell Automation and Windows Security Training Workshop

This PowerShell Automation and Windows Security Training Workshop is a comprehensive 4-day training course that covers the key concepts of hacking with PowerShell. We know that most companies have an Active Directory infrastructure that manages authentication and authorization to most devices and objects within the organization.

Many use PowerShell to speed up and simplify management, which is only sensible. Did you know that a large percentage of hacks over the last year included PowerShell-based attacks? Well, they did, which is why we spend four days learning how to hack like the pros using nothing but what is already available to us in Windows, or now in open-source code on Mac and Linux.

The PowerShell Automation and Windows Security Training Workshop course is based on real-world implementations of a Windows infrastructure along with real-world penetration testing techniques. You will leave with a robust skill set to help test your Windows environment like never before. An attendee will also walk away with a strong skill set on how to help prevent these attacks from happening in the first place!

WHAT’S INCLUDED?

• 4 days of PowerShell Automation and Windows Security Training with an expert instructor
• PowerShell Automation and Windows Security Electronic Course Guide
• 100% Satisfaction Guarantee
• Certificate of Completion

Audience/Target Group:

The target audience for this PowerShell Automation and Windows Security Training Workshop course:

• Penetration Testers
• Microsoft Administrators
• Security Administrators
• Active Directory Administrators
• Anyone looking to learn more about security

RESOURCES

• PowerShell Automation and Windows Security – https://www.wiley.com/
• PowerShell Automation and Windows Security – https://www.packtpub.com/
• PowerShell Automation and Windows Security – https://store.logicaloperations.com/
• PowerShell Automation and Windows Security – https://us.artechhouse.com/
• PowerShell Automation and Windows Security Training – https://www.amazon.com/

RELATED COURSES

• 5G Wireless Security Training
• Intrusion Prevention Training
• Malicious Network Traffic Analysis Training
• Cybersecurity Foundations Training

Objectives:

Upon completing the PowerShell Automation and Windows Security Training, the candidate will be able to:

Here are just a few things you will take away from this course

• New ideas on testing your AD infrastructure
• Attacks you can use immediately
• How to secure against PowerShell attacks

PowerShell Automation and Windows Security Training Workshop

Course Syllabus:

Module 1: Introduction to PowerShell

• Different Tool Options
• Installing everything needed
• Language Basics
• Using the Windows API and WM
• Interacting with the Registry
• Managing Objects and COM Objects

Module 2 –Introduction to Active Directory and Kerberos

• Overview of Kerberos
• The three-headed monster
• Key Distribution Center
• Kerberos in Detail
• Why we care about Kerberos as a Hacker
• Overview of Active Directory
• Understanding AD concepts
• AD Objects and Attributes

Module 3 –Pen Testing Methodology Revisited

• Introduction to the methodology
• The Plan!!
• Vulnerability Identification
• Client-side attacks with and without PowerShell
• PowerShell Automation and Windows Security Training

Module 4 –Information Gathering and Enumeration

• What can a domain user see?
• Domain Enumeration
• Trust and Privileges Mapping
• After the client exploit

Module 5 –Privilege Escalation

• Local Privilege Escalation
• Credential Replay Attacks
• Domain Privilege Escalation
• Dumping System and Domain Secrets
• PowerShell with Human Interface Devices

Module 6 –Lateral Movements and Abusing Trust

• Kerberos attacks (Golden, Silver Tickets, and more)
• Delegation Issues
• Attacks across Domain Trusts
• Abusing Forest Trusts
• Abusing SQL Server Trusts
• Pivoting to other machines
• PowerShell Automation and Windows Security Training

Module 7–Persistence and Bypassing Defenses

• Abusing Active Directory ACLs
• Maintaining Persistence
• Bypassing Defenses
• Attacking Azure Active Directory

Module 8–Defending Against PowerShell Attacks

• Defending an Active Directory Infrastructure
• Detecting Attacks
• Logging
• Transcripts
• Using Certificates
• Using Bastion Hosts
• Using AppLocker

PowerShell Automation and Windows Security Training Workshop Recap, Q/A, and Evaluations