б¦gg

EN
  • ²úÆ·¶¯Ì¬|б¦ggÈëÑ¡ÖйúÐÅϢͨѶÑо¿Ôº¡¶º£ÄÚÍøÂçÇå¾²ÐÅÏ¢ÓëÊÂÎñÖÎÀíÀà²úÆ·Ñо¿Óë²âÊÔ±¨¸æ£¨2021Ä꣩¡·

    Ðû²¼Ê±¼ä£º2021-04-09
    ä¯ÀÀÁ¿£º 13228

    3ÔÂ24ÈÕ£¬£¬£¬£¬£¬ £¬£¬£¬ÖйúÐÅϢͨѶÑо¿Ôº£¨ÒÔϼò³Æ¡°ÖйúÐÅͨԺ¡±£©Çå¾²Ñо¿ËùÍŽáµÚÈý·½×¨Òµ×Éѯ»ú¹¹FreeBuf£¬£¬£¬£¬£¬ £¬£¬£¬Ðû²¼ÁË¡¶º£ÄÚÍøÂçÇå¾²ÐÅÏ¢ÓëÊÂÎñÖÎÀíÀà²úÆ·Ñо¿Óë²âÊÔ±¨¸æ£¨2021Ä꣩¡·£¨ÒÔϼò³Æ¡°±¨¸æ¡±£©¡£¡£¡£¡£ ¡£

    ±¾±¨¸æÓÉÐÅͨԺÇå¾²Ëù¶Ôº£ÄÚÖ÷Á÷SIEM/SOCÀà²úÆ·¾ÙÐлù±¾Ãæ²âÊÔÆÀ¹À£¬£¬£¬£¬£¬ £¬£¬£¬²¢Êä³öÕûÌå²âÊÔ¡¢ÆÊÎöЧ¹ûÓëÕûÌ屨¸æ¡£¡£¡£¡£ ¡£±¾´Î²âÊÔÖ÷ÒªÊÇÕë¶ÔÄ¿½ñÐÐÒµÄÚÖ÷Á÷ÆóÒµµÄ²úÆ·¾ÙÐÐÊÖÒÕÄÜÁ¦²âÊÔ£¬£¬£¬£¬£¬ £¬£¬£¬²âÊÔÄÚÈݺͽǶÈÁýÕÖÖÜÈ«ÇÒÆÕ±é£¬£¬£¬£¬£¬ £¬£¬£¬²âÊÔÄÚÈݰüÀ¨²úÆ·¹¦Ð§¡¢ÐÔÄÜÒÔ¼°×ÔÉíÇå¾²²âÊÔ£¬£¬£¬£¬£¬ £¬£¬£¬ÁýÕÖÊýÊ®ÖÖÊÖÒÕÄÜÁ¦Ö¸±ê²âÊÔÏî¡£¡£¡£¡£ ¡£

    ´Ë´Î²âÊÔÀú³ÌÖУ¬£¬£¬£¬£¬ £¬£¬£¬Ð±¦ggÍøÂçÇå¾²ÍþвÓëÊÂÎñÖÎÀíÆ½Ì¨ÔÚ×ÛºÏÊÖÒÕÄÜÁ¦¡¢Çå¾²ÖÎÀíÄÜÁ¦¡¢ATT£¦CK¹¥»÷Á´ËÝÔ´ÄÜÁ¦¡¢Óû§ºÍʵÌåÐÐΪÆÊÎöÄÜÁ¦£¨UEBA£©¡¢Çå¾²ÔËÓªÓëÓ¦¼±ÏìÓ¦ÄÜÁ¦µÈ·½ÃæÌåÏÖ³ö¹ýÓ²µÄÊÖÒÕʵÁ¦¼°ÁìÏȵIJúÆ·¼Ü¹¹ÄÜÁ¦¡£¡£¡£¡£ ¡£

    1619315334.png

    ÍøÂçÇå¾²ÍþвÓëÊÂÎñÖÎÀíÆ½Ì¨¼Ü¹¹Í¼

    ×ÛºÏÊÖÒÕÄÜÁ¦

    б¦ggÍøÂçÇå¾²ÍþвÓëÊÂÎñÖÎÀíÆ½Ì¨£¨¼ò³ÆSURF-SE£©£¬£¬£¬£¬£¬ £¬£¬£¬ÊÇÇå¾²ÐÅÏ¢ºÍÊÂÎñÖÎÀí£¨SIEM£©Àà²úÆ·µÄÉý¼¶°æ£¬£¬£¬£¬£¬ £¬£¬£¬ÃæÏò½ÌÓý¡¢ÕþÆóµ¥Î»¡¢Ò½ÁÆ¡¢½ðÈÚ¡¢ÄÜÔ´µÈÐÐÒµ£¬£¬£¬£¬£¬ £¬£¬£¬¿ÉÌṩ¼¯¼ì²â¡¢Ô¤¾¯¡¢ÏìÓ¦´¦Öóͷ£ÓÚÒ»ÌåµÄ´óÊý¾ÝÇå¾²¼à²â¡¢È«Á÷Á¿¼ì²âÆÊÎöÓëÏìÓ¦¡¢×ʲúͳ¼ÆËÝÔ´µÈÇå¾²ÔËÓª¹¦Ð§£¬£¬£¬£¬£¬ £¬£¬£¬ÊµÏÖÈ«ÍøµÄͳһÖÎÀíÓëÇå¾²ÆÊÎö¡¢×ÛºÏÇå¾²¸ÐÖª¡¢7*24СʱÇå¾²¼à²â¼°Ô¤¾¯¡£¡£¡£¡£ ¡£

    1619315388.png

    Çå¾²ÖÎÀíÄÜÁ¦

    ƽ̨½ÓÄÉ´óÊý¾ÝÇå¾²ÆÊÎöÆóÒµÄÚÍøIT×ʲúµÄÖÖÖÖÇå¾²ÐÅÏ¢ºÍÇå¾²ÊÂÎñÊý¾Ý£¬£¬£¬£¬£¬ £¬£¬£¬ÊµÏÖÖ÷±»¶¯É¨Ãèʶ±ðºÍÕ¹ÏÖ×ʲúÐÅÏ¢£¬£¬£¬£¬£¬ £¬£¬£¬µÖ´ïÄÚÍø×ʲú¿ÉÊÓ»¯¹Ü¿Ø£» £»£»£»£»£»£»¶þÊÇÆ½Ì¨¾ß±¸Êý¾ÝÖÎÀíÄÜÁ¦£¬£¬£¬£¬£¬ £¬£¬£¬»ã¾Û¶àÔ´Çå¾²ÈÕÖ¾¡¢Îó²îºÍÈõ¿ÚÁîÐÅÏ¢¡¢ÍþвÇ鱨¡¢Óû§ÐÐΪÈÕÖ¾£¬£¬£¬£¬£¬ £¬£¬£¬ÊµÏÖ×ʲúΣº¦¿ÉÊÓ»¯£» £»£»£»£»£»£»Èýƽ̨ÊDzúÆ·½ÓÄÉ´óÊý¾Ý¹ØÁªÆÊÎö¡¢Å³ÈõÐÔÆÊÎö¡¢²¡¶¾Îļþ»¹Ô­ÆÊÎö¡¢ÍþвÇ鱨ÆÊÎö¡¢AIÖÇÄÜÐÐΪÆÊÎöµÈÊÖÒÕ£¬£¬£¬£¬£¬ £¬£¬£¬·¢Ã÷ÄÚÍø×ʲúµÄʧÏÝÎÊÌ⡢ųÈõÐÔÎÊÌâÒÔ¼°Ç±ÔÚÍþв¡£¡£¡£¡£ ¡£

    1619315410.png

    ATT&CK¹¥»÷Á´ËÝÔ´ÄÜÁ¦

    ƽ̨½ÓÄÉ ATT&CK ¿ò¼ÜÍê³ÉÕû¸öÇå¾²ÖÎÀíÆ½Ì¨Íþв³¡¾°¼ì²â£¬£¬£¬£¬£¬ £¬£¬£¬¶Ô³£¼ûµÄ APT ºÚ¿Í×éÖ¯¡¢Õ½ÂÔ¼°Õ½ÊõÊÖ·¨£¬£¬£¬£¬£¬ £¬£¬£¬Æ¾Ö¤¹¥»÷Á´ 12²½·¨¶Ô¹¥»÷ÐÐΪºÍÊÂÎñ¾ÙÐÐÐÎò£¬£¬£¬£¬£¬ £¬£¬£¬ÊµÏÖ´óÊý¾ÝÇå¾²ÆÊÎö¡¢¹ØÁªÆÊÎö¹æÔò¡¢Çå¾²ÒýÇæ¼ì²âÄÚÈÝÓ¦ÓÃÓÚ ATT&CK µÄÕ½ÊõºÍÊÖÒÕ¾ØÕ󣬣¬£¬£¬£¬ £¬£¬£¬¶ÔÇå¾²ÊÂÎñ¾ÙÐпÉÊÓ»¯·ºÆð£¬£¬£¬£¬£¬ £¬£¬£¬µÖ´ï¶Ô¿¹¸ß¼¶Íþв¹¥»÷ÄÜÁ¦µÄÖ¸±ê£¬£¬£¬£¬£¬ £¬£¬£¬ÎªÖƶ©ÓÐÕë¶ÔÐÔµÄÓ¦¼±ÏìÓ¦Õ½ÂÔ£¬£¬£¬£¬£¬ £¬£¬£¬Ìṩֱ¹ÛµÄ¾öÒéÒÀ¾Ý¡£¡£¡£¡£ ¡£

    1619315432.png

    Óû§ºÍʵÌåÐÐΪÆÊÎöÄÜÁ¦

    ƽ̨ÄÚÖûùÓÚ AI ÖÇÄÜÆÊÎöµÄ UEBA ÒýÇæÆÊÎöÄ£¿£¿£¿£¿£¿£¿£¿£¿é£¨Óû§ºÍʵÌåÐÐΪÆÊÎö£©£¬£¬£¬£¬£¬ £¬£¬£¬¿Éͨ¹ý´Óº£Á¿ÈÕÖ¾Êý¾ÝÔ´ÖлùÓÚÔ¤ÏÈÉèÖúõĻúеѧϰģ×ÓʵʱÆÊÎöÓû§ºÍ×ʲúµÄΣº¦ÐÐΪ²¢½«Î£º¦±êÇ©»¯£¬£¬£¬£¬£¬ £¬£¬£¬Í¨¹ý¿ÉÊÓ»¯·½·¨·ºÆðÕË»§Î£º¦ÐÐΪµÄÉîÌõÀí»­Ïñ£¬£¬£¬£¬£¬ £¬£¬£¬ÌáÐÑÇå¾²ÔËάÕßʵʱ¹Ø×¢ºÍ´¦Öóͷ£¡£¡£¡£¡£ ¡£

    1619315507.png

    Çå¾²ÔËÓªÓëÓ¦¼±ÏìÓ¦ÄÜÁ¦

    ƽ̨½«¸÷×ÔΪÕóµÄÇå¾²¼ì²â×°±¸ºÍ´¦Öóͷ£ÏìÓ¦ÄÜÁ¦ÎÞ·ìÏνӣ¬£¬£¬£¬£¬ £¬£¬£¬ÊµÏÖ¼ì²â¡¢Ô¤¾¯¡¢ÏìÓ¦´¦Öóͷ£ÓÚÒ»Ì壻 £»£»£»£»£»£»¶þÊÇÆ½Ì¨½«Ë鯬»¯µÄ·ÀÓùϵͳͨ¹ýÁª¶¯´¦Öóͷ£ÊÖÒÕÊÖ¶ÎͳһÕûºÏ£¬£¬£¬£¬£¬ £¬£¬£¬ÐγÉϵͳÐÔ¡¢ÖÜÈ«»¯µÄÇå¾²Íþв¼ì²â¡¢×è¶ÏºÍËÝÔ´µÄһվʽЧÀÍ£» £»£»£»£»£»£»ÈýÊÇÍŽáÖÕ¶ËEDRºÍÏÂÒ»´ú·À»ðǽ£¬£¬£¬£¬£¬ £¬£¬£¬¹¹½¨ÍøÂçÇå¾²·À»¤ÏìӦϵͳ£¬£¬£¬£¬£¬ £¬£¬£¬ÌáÉýÕûÌåÁª¶¯ÏìÓ¦ÄÜÁ¦ºÍÇå¾²ÊÂÎñ´¦Öóͷ£Ð§ÂÊ¡£¡£¡£¡£ ¡£

    1619315559.png


    б¦ggÍøÂçÇå¾²ÍþвÓëÊÂÎñÖÎÀíÆ½Ì¨ÆÕ±éÁýÕÖ½ÌÓý¡¢ÕþÆóµ¥Î»¡¢Ò½ÁÆ¡¢½ðÈÚ¡¢ÄÜÔ´µÈÐÐÒµ£¬£¬£¬£¬£¬ £¬£¬£¬²¢ÔÚ¹ú¼Ò¼¶¡¢Ê¡¼¶µÈÖØ´ó°²±£» £»£»£»£»£»£Ô˶¯ÒÔ¼°ÖØ´óÐÐÒµÔ˶¯ÖÐÌṩǿÓÐÁ¦µÄÇå¾²·À»¤Ö§³Ö¡£¡£¡£¡£ ¡£

    δÀ´£¬£¬£¬£¬£¬ £¬£¬£¬Ð±¦gg½«¼ÌÐøÌáÉý×ÔÉí²úÆ·ÄÜÁ¦£¬£¬£¬£¬£¬ £¬£¬£¬ÖÂÁ¦ÓÚΪÓû§Ìṩ±ê×¼»¯¡¢¹æ·¶»¯µÄ½â¾ö¼Æ»®£¬£¬£¬£¬£¬ £¬£¬£¬×ÊÖú¸÷Ðи÷ÒµÆÀ¹ÀÆäÇå¾²Ì¬ÊÆ¡¢Öع¹ÍøÂçÓëÇå¾²Ó¦Ó㬣¬£¬£¬£¬ £¬£¬£¬½¨ÉèÕæÕýÓÐÓõÄÍøÂçÇå¾²¼Ü¹¹£¬£¬£¬£¬£¬ £¬£¬£¬×îÖÕÌáÉýÐÐÒµµÄÕûÌåÇ徲ˮƽÓëÆóÒµ¾ºÕùÁ¦£¬£¬£¬£¬£¬ £¬£¬£¬ÕæÕýÔö½øÈ«ÐÐÒµÍøÂçÇå¾²ÊÖÒÕˢС£¡£¡£¡£ ¡£


    ÈÈÃÅÄÚÈÝ

    ×îÏÈÊÔÓÃб¦gg²úÆ·
    ÉêÇëÊÔÓÃ

    20Ä깫°²Ð§ÀÍÂÄÀú

    7*24СʱӦ¼±ÏìÓ¦ÖÐÐÄ

    ×ÔÖ÷֪ʶ²úȨµÄ²úÆ·×°±¸

    ר¼Ò¼¶Ç徲ЧÀÍÍŶÓ

    ÍøÂç¿Õ¼äÊý¾ÝÖÎÀíר¼Ò

    ÈÙ»ñ¹ú¼Ò¿ÆÑ§ÊÖÒÕ¶þµÈ½±

    Öö¥
    µç»°

    400-700-1218

    ¹Ù·½ÈÈÏߵ绰

    ×Éѯ
    ÁôÑÔ
    ¶þάÂë
    ΢ÐŹ«ÖÚºÅ
    ¹«Ë¾Î¢²©
    ¡¾ÍøÕ¾µØÍ¼¡¿¡¾sitemap¡¿