PowerShell for Security Analysts

No experience with PowerShell? No problem! Learn how to leverage the versatile toolkit installed on every Windows computer for security work - from everyday tasks to cloud interaction,  incident response, and more.

For anyone in the security field looking to expand their toolkit, this book will introduce you to a powerful set of resources that's already installed on your Windows operating system - PowerShell. Even if you have no experience, it will teach you how to leverage PowerShell's versatile capabilities to help with everyday security work, like deploying policies for a domain, rapidly auditing and configuring system-wide security settings, interacting with cloud environments, and investigating cybersecurity incidents. 

You'll benefit from easy-to-understand examples that dig into core PowerShell concepts and techniques you can apply to accomplish difficult security work with ease. In addition to guiding you through everything you need to know about the command-line shell and the scripting language, you'll also pick up defensive best practices for the Windows environment that will boost your overall security knowledge in identity management, control implementation, incident response, and more.

Among other power-user skills, you'll learn:

• The basics of PowerShell syntax and scripting
  
• Commands and scripts for performing common security tasks
  
• Incident response functions that enable system troubleshooting 
  
• Techniques attackers often use to abuse PowerShell, and how to stop them