Pentesting Azure Applications: The Definitive Guide to Testing and Securing Deployments

  • Title: Pentesting Azure Applications: The Definitive Guide to Testing and Securing Deployments
  • Author: Matt Burrough
  • Print Length: 218 pages
  • Page Numbers Source ISBN: 1593278632
  • Publisher: No Starch Press
  • Publication Date: July 31, 2018
  • Sold by: Penguin Random House Publisher Services
  • ASIN: B072SS34CP

A comprehensive guide to penetration testing cloud services deployed in Microsoft Azure, the popular cloud computing service provider used by numerous companies large and small.

You’ll learn how to:

  • Find security issues related to multi-factor authentication and management certificates
  • Make sense of Azure’s services by using PowerShell commands to find IP addresses, administrative users, and firewall rules
  • Discover security configuration errors that could lead to exploits against Azure storage and keys
  • Uncover weaknesses in virtual machine settings that enable you to and acquire passwords, binaries, code, and settings files
  • Penetrate networks by enumerating firewall rules
  • Investigate specialized services like Azure Key Vault and Azure Websites
  • Know when you might be caught by viewing logs and security events

Packed with real-world examples from the author’s experience as a corporate penetration tester, sample scripts from pen-tests and “Defenders Tips” that explain how companies can reduce risk, Pentesting Azure Applications provides a clear overview of how to effectively perform security tests so that you can provide the most accurate assessments possible.”

Fair Use Source: B072SS34CP

https://www.amazon.com/Pentesting-Azure-Applications-Definitive-Deployments-ebook/dp/B072SS34CP

Infrastructure as Code: Managing Servers in the Cloud

“Virtualization, cloud, containers, server automation, and software-defined networking are meant to simplify IT operations. But many organizations adopting these technologies have found that it only leads to a faster-growing sprawl of unmanageable systems. This is where infrastructure as code can help. With this practical guide, author Kief Morris of ThoughtWorks shows you how to effectively use principles, practices, and patterns pioneered through the DevOps movement to manage cloud age infrastructure.

Ideal for system administrators, infrastructure engineers, team leads, and architects, this book demonstrates various tools, techniques, and patterns you can use to implement infrastructure as code. In three parts, you’ll learn about the platforms and tooling involved in creating and configuring infrastructure elements, patterns for using these tools, and practices for making infrastructure as code work in your environment.”

  • Examine the pitfalls that organizations fall into when adopting the new generation of infrastructure technologies
  • Understand the capabilities and service models of dynamic infrastructure platforms
  • Learn about tools that provide, provision, and configure core infrastructure resources
  • Explore services and tools for managing a dynamic infrastructure
  • Learn specific patterns and practices for provisioning servers, building server templates, and updating running servers

Fair Use Source: B01GUG9ZNU

https://www.amazon.com/Infrastructure-Code-Managing-Servers-Cloud-ebook/dp/B01GUG9ZNU

See also: DevOps Topics