October 2026
392 pages
6h 55m
Japanese
book
詳解 Active Directory & Windowsインフラ・ペネトレーションテスト ―Microsoft環境における攻撃手法から検知・修復までを体系的に学ぶ実践ガイド
by Denis Isakov, Ruslan Sayfiev, 石川 朝久, 北原 憲
Content preview from 詳解 Active Directory & Windowsインフラ・ペネトレーションテスト ―Microsoft環境における攻撃手法から検知・修復までを体系的に学ぶ実践ガイドBecome an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
7章ドメインレベルの持続性確保
攻撃を継続するために、攻撃者は対象環境へのアクセスを維持する必要があります。再起動やユーザーのパスワード変更により攻撃の継続が困難になり、作戦の変更が求められる可能性があります。こうした攻撃の中断を避けるために、持続性を確保する技術が存在します。この章では、Windowsワークステーションやサーバーのような単一のホストに対する持続化技術は扱いません。代わりに、ドメイン全体およびドメインコントローラーに特化した技法を掘り下げます。最初に、代表的な手法である偽造チケット（Golden Ticket、Silver Ticket、Diamond Ticket、Sapphire Ticket）を説明します。これらの違いについて解説し、OPSECを考慮した実用的な使用方法を示します。その他にも、SID History属性への追加、AdminSDHolderドメインオブジェクトのACLとDACLの操作、委任権限の付与、DCShadowやGolden gMSAなどのドメインレベルの持続化に関して、実用的な例を交えて解説します。ドメインコントローラーに対する持続化の手法としては Skeleton Key、悪性SSP（Security Support Provider）の登録、DSRM（Directory Services Restore Mode）へのアクセスによる認証情報の操作について取り上げます。最後に、WMI、PS-Remotingのセキュリティ記述子の操作と、コンピューター、SAM、またはキャッシュされたAD認証情報のNTハッシュ値を取得するためのバックドアレジストリの設定方法について説明します。
この章では以下のトピックについて解説します。
- ドメインに対する持続化技術：偽造チケット、ドメインオブジェクトのACLと属性の操作、DCShadow、Golden ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.