It's now more important than ever for organizations to be ready to detect and respond to security events and breaches. Preventive measures alone are not enough for dealing with adversaries. A well-rounded prevention, detection, and response program is required. This book will guide you through the stages of building a red team program, including strategies and homefield advantage opportunities to boost security.The book starts by guiding you through establishing, managing, and measuring a red team program, including effective ways for sharing results and findings to raise awareness. Gradually, you'll learn about progressive operations such as cryptocurrency mining, focused privacy testing, targeting telemetry, and even blue team tooling. Later, you'll discover knowledge graphs and how to build them, then become well-versed with basic to advanced techniques related to hunting for credentials, and learn to automate Microsoft Office and browsers to your advantage. Finally, you'll get to grips with protecting assets using decoys, auditing, and alerting with examples for major operating systems.By the end of this book, you'll have learned how to build, manage, and measure a red team program effectively and be well-versed with the fundamental operational techniques required to enhance your existing skills.

SQL injection represents one of the most dangerous and well-known, yet misunderstood, security vulnerabilities on the Internet, largely because there is no central repository of information to turn to for help. This is the only book devoted exclusively to this long-established but recently growing threat. It includes all the currently known information about these attacks and s...(展开全部)

Cross Site Scripting Attacks starts by defining the terms and laying out the ground work. It assumes that the reader is familiar with basic web programming (HTML) and JavaScript. First it discusses the concepts, methodology, and technology that makes XSS a valid concern. It then moves into the various types of XSS attacks, how they are implemented, used, and abused. After XSS i...(展开全部)

"SQL Injection Attacks and Defense, First Edition": Winner of the Best Book Bejtlich Read Award. "SQL injection is probably the number one problem for any server-side application, and this book unequaled in its coverage". (Richard Bejtlich, Tao Security blog). SQL injection represents one of the most dangerous and well-known, yet misunderstood, security vulnerabilities on the I...(展开全部)

PANIC TRICKS YOU Panic is an insidious trick that makes you fear simple, everyday things: driving, shopping, socializing, traveling and more. The first attack comes out of nowhere, and then panic tricks you into responding in precisely the ways that invite the panic back, again and again. BUT IT'S JUST A TRICK The panic trick is highly effective and has drawn mi...(展开全部)

本书考察清朝入关前的步兵发展史。建州军队在萨尔浒决战前，以骑兵为主要骨干，步兵只是其辅助。萨尔浒战役之后，努尔哈赤为攻取城池，每逢战事，临时选拔锐卒充当步兵，并给配备攻坚器械等，充任全军矛头。这时的步兵尚未成为独立兵种。天命十一年（1626），明朝使用红夷大炮挫败金人，迫使皇太极改革步兵，扩大其规模，定为常制，不再是临时之兵，器械和战术与此前存在较大差异，奠定清入关后八旗步兵的基本制度。该书细致、系统地描述了清入关前步兵的相关情况。