Windows Security Internals: A Deep Dive Into Windows Authentication, Authorization, and Auditing

This book is a must read for any system or network admin, that want to add the security element to his skills. Its not simple, it’s quite extensive in terms of notions, but if you read it you’ll deep dive into windows security mechanisms. It takes the latest windows 11 version, down to windows 7 or 8, which are obsoletes but still… you’ll be able to view and understand what makes the security of windows across these versions and possibly how to take advantage of it. I would recommend also for any pentester such as red teamer, that would take advantage of it. If you add books such as Evasive malwares from NoStarchPress, and Malware Development from Packt, you’ll have a solid understanding of windows security internals and how to create various malwares for pentesting and red reaming tasks, at an high level which is not covered as this deep at school.

One of the best Ressourcen out there on that topic

This book is quite intense but delivers great insights. Unfortunately it is very powershell-heavy. I was hoping that it would explore the security internals more with c or c++ examples

I just received two books inside a box, with no plastic protecting them. Result? One of the books is damaged… Frustrating.