October 2026
392 pages
6h 55m
Japanese
book
詳解 Active Directory & Windowsインフラ・ペネトレーションテスト ―Microsoft環境における攻撃手法から検知・修復までを体系的に学ぶ実践ガイド
by Denis Isakov, Ruslan Sayfiev, 石川 朝久, 北原 憲
Content preview from 詳解 Active Directory & Windowsインフラ・ペネトレーションテスト ―Microsoft環境における攻撃手法から検知・修復までを体系的に学ぶ実践ガイドBecome an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
8章Active Directory Certificate Servicesの悪用
本章と続く2章では、Active Directoryの構成時にデフォルトではインストールされないものの、実環境で広く利用されているサービスを対象とした攻撃手法について取り上げます。まずはAD CS（Active Directory Certificate Services：Active Directory証明書サービス）から始めます。このサービスは、Active DirectoryにPKI（Public Key Infrastructure：公開鍵基盤）を統合するためにMicrosoftにより実装されました。AD CSにより、証明書、デジタル署名、コード署名をはじめとする公開鍵暗号を用いた様々な機能がActive Directoryフォレスト全体で利用可能となります。当然ですが、大きな力には大きな責任が伴います。AD CSは、その複雑な性質のため、堅牢化や監視の観点では見落とされることが多々ありました。SpecterOps社は2021年6月に、AD CSに対する既知の攻撃方法と新たな攻撃方法を説明した包括的な研究論文を発表しました†1。
まずはこの章を通じて必要となるPKIの基本的な理論を解説します。続けて証明書の窃取方法、ユーザーやコンピューターのドメインアカウントに対する持続化の手法を解説し、最後にドメインレベルでの権限昇格と持続化の手法を取り上げます。他の章と同様に、攻撃手法の検出手法や防止のための推奨事項についても触れます。
この章では以下の題材について解説します。
- PKIの理論
- 証明書の窃取方法
- アカウント持続化の手法
- ドメイン権限昇格の手法
- ドメイン持続化の手法
8.1 技術要件 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.