October 2026
392 pages
6h 55m
Japanese
book
詳解 Active Directory & Windowsインフラ・ペネトレーションテスト ―Microsoft環境における攻撃手法から検知・修復までを体系的に学ぶ実践ガイド
by Denis Isakov, Ruslan Sayfiev, 石川 朝久, 北原 憲
Content preview from 詳解 Active Directory & Windowsインフラ・ペネトレーションテスト ―Microsoft環境における攻撃手法から検知・修復までを体系的に学ぶ実践ガイドBecome an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
1章ラボ構築とExchange Serverへの攻撃
Microsoft Active Directoryは、Windows OSを根幹としたネットワークを運用する上で、多くの企業で採用されています。Active Directoryにより一元的な管理が可能となり、運用を効率化できます。一方で、設定に不備がある場合や、デフォルト設定のまま利用している場合には、セキュリティリスクが生じ、攻撃者に悪用されるおそれがあります。攻撃者からActive Directoryの環境を守る手法を学ぶためには、専用の実験環境を用意して攻撃手法を試し、悪意ある攻撃に対する防御や検知の手法を確認するのが最善でしょう。
本書ではActive Directoryのキルチェーン†1に焦点を当て、攻撃手法の仕組みを解説するとともに、その検知と防御について考察していきます。本章では、攻撃手法を安全に実験するためのラボ環境の構築方法を解説します。このラボ環境は本書を通じて利用するもので、後の章で利用する以下のサービスについては、必要になった際に追加していきます。
- ADCS（Active Directory Certificate Services）
- SQL Server
- WSUS（Windows Server Update Services）
- SCCM（System Center Configuration Manager）
まずは、Microsoft Exchange Serverに対する攻撃手法を解説します。Exchange Serverは単なる電子メールサーバーではなく、高度で複雑な連携機能を持つ製品です。セキュリティの観点では、インターネットからアクセス可能な基盤であり、企業環境を支える重要なサービスであるため、攻撃者にとって主要な攻撃対象の1つです。特にオンプレミスのExchange ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.