{"product_id":"persistence-in-active-directory-mikhailen-vostorov-9798242523449","title":"Persistence in Active Directory: Red Team Tactics and Evasion Methods","description":"\u003cp\u003ePersistence is the quiet art of staying put. In Active Directory environments, it's the difference between a minor security incident and a months-long breach that costs millions.\u003c\/p\u003e\u003cp\u003eI'm Mikhailen Vostorov, and in \u003ci\u003ePersistence in Active Directory: Red Team Tactics and Evasion Methods\u003c\/i\u003e, I'll show you exactly how attackers establish long-term footholds in AD environments - and how defenders detect, hunt, and eliminate them.\u003c\/p\u003e\u003cp\u003e\u003cb\u003eWhat You'll Learn\u003c\/b\u003e\u003c\/p\u003e\u003cp\u003eThis book delivers hands-on, practical knowledge of Active Directory persistence techniques used in real-world attacks: \u003c\/p\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cb\u003eAccount-Based Persistence\u003c\/b\u003e - Hidden admins, skeleton keys, and DSRM abuse\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eGPO Exploitation\u003c\/b\u003e - Group Policy manipulation for persistent access\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eService \u0026amp; Scheduled Task Abuse\u003c\/b\u003e - Maintaining access through legitimate Windows features\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eRegistry \u0026amp; WMI Tricks\u003c\/b\u003e - Stealthy persistence using built-in mechanisms\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eKerberos Attacks\u003c\/b\u003e - Golden Tickets, Silver Tickets, and certificate-based persistence\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eAD Object Tampering\u003c\/b\u003e - Schema modifications and AdminSDHolder abuse\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eDLL \u0026amp; COM Hijacking\u003c\/b\u003e - Application-level persistence without detection\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eFileless Techniques\u003c\/b\u003e - Memory-resident payloads that evade traditional defenses\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eCloud \u0026amp; Hybrid Persistence\u003c\/b\u003e - Azure AD Connect exploitation and cross-environment attacks\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003eEvery technique includes defender-focused detection methods, SIEM hunting queries, and incident response playbooks you can implement immediately.\u003c\/p\u003e\u003cp\u003e\u003cb\u003eWho This Book Is For\u003c\/b\u003e\u003c\/p\u003e\u003cp\u003e\u003cb\u003eRed Teamers \u0026amp; Penetration Testers\u003c\/b\u003e: Refine your offensive tradecraft with realistic, ethical persistence scenarios that mirror actual APT campaigns.\u003c\/p\u003e\u003cp\u003e\u003cb\u003eBlue Teamers \u0026amp; SOC Analysts\u003c\/b\u003e: Build robust detection rules and hunting strategies to identify covert access before it becomes a breach.\u003c\/p\u003e\u003cp\u003e\u003cb\u003eIncident Responders\u003c\/b\u003e: Get actionable containment steps and forensic indicators to evict persistent attackers from compromised environments.\u003c\/p\u003e\u003cp\u003e\u003cb\u003eSecurity Architects\u003c\/b\u003e: Understand attacker methodology to design resilient Active Directory infrastructures.\u003c\/p\u003e\u003cp\u003e\u003cb\u003ePart of the Active Directory Exploited Series\u003c\/b\u003e\u003c\/p\u003e\u003cp\u003eThis volume integrates seamlessly with the complete ethical hacker's collection, covering AD reconnaissance, initial access, privilege escalation, lateral movement, persistence, cloud attacks, and comprehensive defensive strategies.\u003c\/p\u003e\u003cp\u003eNew to Active Directory? Start with \u003ci\u003eActive Directory for Beginners\u003c\/i\u003e. Want hands-on practice? Pair this with the \u003ci\u003eActive Directory Hacking Lab Manual\u003c\/i\u003e. Prefer defense-first approaches? Complement with \u003ci\u003eActive Directory Defense: Detecting and Stopping Real-World Cyber Attacks\u003c\/i\u003e.\u003c\/p\u003e\u003cp\u003e\u003cb\u003eWhy This Book Is Different\u003c\/b\u003e\u003c\/p\u003e\u003cul\u003e\n\u003cli\u003e\n\u003cb\u003ePractical, Not Theoretical\u003c\/b\u003e: Real attack scenarios from actual investigations (anonymized and ethically presented)\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eDefender-First Mindset\u003c\/b\u003e: Every offensive technique paired with detection and mitigation strategies\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eSIEM-Ready Content\u003c\/b\u003e: Copy-paste hunting queries and detection rules for Splunk, Elastic, Microsoft Sentinel, and more\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eNo Reckless Recipes\u003c\/b\u003e: Responsible disclosure of techniques with emphasis on authorized testing and ethical boundaries\u003c\/li\u003e\n\u003cli\u003e\n\u003cb\u003eEngaging Writing\u003c\/b\u003e: Coffee-fueled, witty, and candid - cybersecurity content that refuses to be boring\u003c\/li\u003e\n\u003c\/ul\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003e\u003cb\u003eYour Next Step\u003c\/b\u003e\u003c\/p\u003e\u003cp\u003eWhether you're hardening an enterprise network, building detection capabilities, or conducting authorized security assessments, this book teaches you to think like an attacker so you can stop one.\u003c\/p\u003e\u003cp\u003eReady to master Active Directory persistence and elevate your cybersecurity skills?\u003c\/p\u003e\u003cp\u003eOpen the book, pour a strong coffee, and let's get to work.\u003c\/p\u003e\u003cbr\u003e\u003cbr\u003e\u003cb\u003eAuthor:\u003c\/b\u003e Mikhailen Vostorov\u003cbr\u003e\u003cb\u003eISBN-13:\u003c\/b\u003e 9798242523449\u003cbr\u003e\u003cb\u003ePublisher:\u003c\/b\u003e Independently Published\u003cbr\u003e\u003cb\u003eLanguage:\u003c\/b\u003e English\u003cbr\u003e\u003cb\u003ePublished:\u003c\/b\u003e 01\/04\/2026\u003cbr\u003e\u003cb\u003ePages:\u003c\/b\u003e 338\u003cbr\u003e\u003cb\u003eFormat:\u003c\/b\u003e Paperback\u003cbr\u003e\u003cb\u003eWeight:\u003c\/b\u003e 1.73lbs\u003cbr\u003e\u003cb\u003eSize:\u003c\/b\u003e 11.00h x 8.50w x 0.70d","brand":"Mikhailen Vostorov","offers":[{"title":"Paperback","offer_id":49083941060863,"sku":"9798242523449","price":39.99,"currency_code":"USD","in_stock":true}],"url":"https:\/\/www.whiterainbookhouse.com\/products\/persistence-in-active-directory-mikhailen-vostorov-9798242523449","provider":"WR Book House","version":"1.0","type":"link"}