PowerShell for Security Analysts

No experience with PowerShell? No problem! Learn how to leverage the versatile toolkit installed on every Windows computer for security work — from everyday tasks to cloud interaction,  incident response, and more.

For anyone in the security field looking to expand their toolkit, this book will introduce you to a powerful set of resources that’s already installed on your Windows operating system — PowerShell. Even if you have no experience, it will teach you how to leverage PowerShell’s versatile capabilities to help with everyday security work, like deploying policies for a domain, rapidly auditing and configuring system-wide security settings, interacting with cloud environments, and investigating cybersecurity incidents. 

You’ll benefit from easy-to-understand examples that dig into core PowerShell concepts and techniques you can apply to accomplish difficult security work with ease. In addition to guiding you through everything you need to know about the command-line shell and the scripting language, you’ll also pick up defensive best practices for the Windows environment that will boost your overall security knowledge in identity management, control implementation, incident response, and more.

Among other power-user skills, you’ll learn:

• The basics of PowerShell syntax and scripting
  
• Commands and scripts for performing common security tasks
  
• Incident response functions that enable system troubleshooting 
  
• Techniques attackers often use to abuse PowerShell, and how to stop them
  

PowerShell for Security Analysts proves that you don’t have to look any further than the Windows OS for a robust, user-friendly suite of tools ready to make your security work easier.

Sam Grubb is a cybersecurity consultant for a managed service provider that works with a large variety of clients. He has six years of experience teaching cybersecurity to both adults and teenagers and holds several cybersecurity certifications, including the Certified Information Systems Security Professional (CISSP) certification. He is the author of How Cybersecurity Really Works (No Starch Press).