October 2026
392 pages
6h 55m
Japanese
book
詳解 Active Directory & Windowsインフラ・ペネトレーションテスト ―Microsoft環境における攻撃手法から検知・修復までを体系的に学ぶ実践ガイド
by Denis Isakov, Ruslan Sayfiev, 石川 朝久, 北原 憲
Content preview from 詳解 Active Directory & Windowsインフラ・ペネトレーションテスト ―Microsoft環境における攻撃手法から検知・修復までを体系的に学ぶ実践ガイドBecome an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
5章ドメイン内およびフォレスト間のラテラルムーブメント
攻撃者が環境に足場を築き、有効なクレデンシャルを取得したら、次の手順はラテラルムーブメント（Lateral Movement）です。ラテラルムーブメントとは、攻撃者が攻撃対象環境の奥深くへ移動し、新しいクレデンシャルを含む高価値の資産や機密データを探索する一連の手法です。
まず、攻撃者が平文パスワードを取得し（例：パスワードスプレー攻撃に成功）、管理プロトコルを悪用して正常な通信への介入を試みるシナリオから始めます。続けて、認証通信を悪用する方法と、ラテラルムーブメントが成功するための前提条件について説明します。ラテラルムーブメントのために攻撃者が必要とするのは、NTLM（New Technology LAN Manager）レスポンスや平文パスワードに限らず、様々な形式のクレデンシャルが悪用できます。例えば、NTハッシュ、鍵、チケットなどが挙げられます。Kerberos認証はドメイン環境における主要なセキュア認証プロトコルとしてMicrosoftが推奨しているため、ここでは3種類のKerberos委任（Kerberos Delegation）について詳細に説明します。最後に、フォレスト間のラテラルムーブメントと、SIDフィルタリングと呼ばれるセキュリティ機構がそれをどのように阻止できるか解説します。
この章では、主に以下の題材を取り上げます。
- ラテラルムーブメントのための管理プロトコルの悪用
- 認証通信のリレー攻撃
- Pass-the-*攻撃
- Kerberos委任
- ドメインとフォレスト間におけるラテラルムーブメント
5.1 ラボ環境について
この章の例示には、GOADv2ラボのすべてのVMを用いています。独自に構築した環境で実験する場合、1つのドメインコントローラーと数台のクライアント端末があれば十分でしょう。 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.