March 2025
Intermediate to advanced
616 pages
10h 34m
Japanese
Content preview from Windowsセキュリティインターナル ―PowerShellで理解するWindowsの認証、認可、監査の仕組み
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
6章セキュリティ記述子の読み取りと割り当て
前の章では、セキュリティ記述子を構成する様々な要素について学びました。また、PowerShellでセキュリティ記述子を操作する方法と、SDDLで記述子を表現する方法についても取り上げました。この章では、カーネルオブジェクトからセキュリティ記述子を読み取る方法と、これらのオブジェクトにセキュリティ記述子を割り当てる、より複雑な処理について解説します。
この章では、カーネルオブジェクトに割り当てられるセキュリティ記述子に焦点を絞ります。5章冒頭の「5.3 絶対セキュリティ記述子と相対セキュリティ記述子」で述べたように、セキュリティ記述子はファイルやレジストリなどの永続ストレージにも格納できます。この場合、セキュリティ記述子を検証できる形式に変換する前に相対形式で格納し、バイトストリームとして読み込む必要があります。
6.1 セキュリティ記述子の読み取り
カーネルオブジェクトのセキュリティ記述子を照会するには、システムコールNtQuerySecurityObjectを呼び出します。このシステムコールは、カーネルオブジェクトのハンドルを受け入れ、取得したいセキュリティ記述子の構成要素を指定するフラグを設定して用います。そのフラグ値はSecurityInformation列挙体として定義されています。
本書の執筆時点で最新のWindowsに定義されているSecurityInformation列挙体のフラグ情報を、対応するセキュリティ記述子の構成要素とハンドルに必要なアクセス権限の情報とともに、表6-1に示しています。
表6-1 SecurityInformationフラグと必要なアクセス権限
| フラグ名 | 概要 | 情報源 | 必要なアクセス権限 |
|---|---|---|---|
Owner ... |
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.