[{"_1":2,"_46":-5,"_47":-5},"loaderData",{"_3":4,"_14":15,"_44":-5,"_45":-5},"root",{"_5":-5,"_6":-5,"_7":-5,"_8":9,"_10":11},"user","shoppingCartId","toast","locale","en","constants",{"_12":13},"paypalClientId","AenrHU49peF-ZUH-Yq7AXLLNZYGUGlml474U16NCjB4ZznmQCEjiliN3whyuVZmkb7VxEzmTALgtKEKE","routes/_store+/_readers+/email_author.$slug/route",{"_16":17,"_43":-5},"book",{"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":29},"id","Z2lkOi8vbGVhbnB1Yi9TdG9yZTo6Qm9va1Byb2R1Y3QvNTQ4MzA","title","Blue Team Primer: Detecting A Hacker","state","published","contactAuthorMethod","email","aboutText","

\tMost modern-day businesses are required to have a Penetration Tester or Security Auditor review their systems annually for flaws and holes in their security. The professional tester will generally come onsite and spend on average two to three days on premise for the engagement before departing to write up their report, which will then be handed to IT Security to start remediation efforts.

\tThis book looks at how to maximize the two to three-day window that the Penetration Tester is onsite, focusing not on how the tester finds the flaws, but instead on how the defensive security team can track the tester as they move through the network. The final goal being able to apply these tactical lessons learned to improving continuous monitoring and alerting for adverse behavior.

Topics Covered:

Reconnaissance
Scanning & Enumeration
Gaining Access
Maintaining Access
Credential Stealing & Privilege Escalation
Command & Control
Data Exfiltration

Note: This book will never reach 100% completion. I expect to update, as new attacks are discovered. Upon purchase, you will receive free updates for life.

","authors",[30],{"_18":31,"_32":33,"_5":34},"Z2lkOi8vbGVhbnB1Yi9TdG9yZTo6UHJvZHVjdEF1dGhvci81NzgyNg","name","Derek Carlin",{"_35":36},"avatar",{"_37":38,"_39":40,"_41":42},"url","https://d308did4coypzi.cloudfront.net/avatars/2964881/medium/ptaas.jpg?1682387855","styleName","medium","exists",true,"currentUser","routes/_store+/_layout","routes/_store+/_readers+/_layout","actionData","errors"]

Email the Author