Skip to content
Security Notebooks

Windows Internals

Foundations

Chapters
7
Reading time
15.5 h
Level
Beginner → Intermediate
7 chapters
Start reading →
  1. Windows Architecture, Processes, Threads & the RegistryBeginner · 120 min
  2. Windows File System, Permissions, ACLs & Security DescriptorsBeginner · 120 min
  3. Windows Authentication: SAM, LSASS, NTLM & Kerberos ExplainedBeginner · 140 min
  4. PowerShell Fundamentals & the Object PipelineBeginner · 140 min
  5. PowerShell Remoting, WMI/CIM & Living-off-the-Land (LOLBAS)Intermediate · 130 min
  6. SMB, RPC, Named Pipes & Windows Networking ServicesIntermediate · 130 min
  7. Windows Event Logs, Sysmon & TelemetryIntermediate · 150 min