Microsoft \u015firk\u0259ti Sysmon sistem f\u0259aliyy\u0259tini izl\u0259m\u0259 xidm\u0259tini Linux platformas\u0131na portlay\u0131b. Linux \u0259m\u0259liyyat\u0131n\u0131 izl\u0259m\u0259k \u00fc\u00e7\u00fcn sistemi kernel s\u0259viyy\u0259sind\u0259 i\u015fl\u0259y\u0259n emal\u00e7\u0131lar\u0131 i\u015f\u0259 salma\u011fa imkan tan\u0131yan eBPF alt sistemind\u0259n istifad\u0259 olunur. X\u00fcsusil\u0259, sistemd\u0259 hadis\u0259l\u0259rin izl\u0259nm\u0259si \u00fc\u00e7\u00fcn BPF-emal\u00e7\u0131lar\u0131 yaratma\u011fa k\u00f6m\u0259k ed\u0259n SysinternalsEBPF kitabxanas\u0131 inki\u015faf etdirilir. Al\u0259tl\u0259rin kodu MIT lisenziyas\u0131 alt\u0131nda a\u00e7\u0131qd\u0131r, BPF proqramlar\u0131 is\u0259 GPLv2 lisenziyas\u0131 alt\u0131nda yay\u0131mlan\u0131r. packages.microsoft.com deposunda populyar Linux paylamalar\u0131 \u00fc\u00e7\u00fcn uy\u011fun RPM v\u0259 DEB paketl\u0259ri yerl\u0259\u015fdirilmi\u015fdir. <\/p>\n
Sysmon, prosesl\u0259rin yarad\u0131lmas\u0131 v\u0259 sona \u00e7atmas\u0131, \u015f\u0259b\u0259k\u0259 ba\u011flant\u0131lar\u0131 v\u0259 fayllarla manipulyasiyalar haqq\u0131nda detall\u0131 m\u0259lumatlar\u0131 saxlayan bir qeyd sistemi t\u0259min edir. Qeyd, yaln\u0131z \u00fcmumi m\u0259lumatlar\u0131 deyil, h\u0259m d\u0259 t\u0259hl\u00fck\u0259sizlikl\u0259 ba\u011fl\u0131 hadis\u0259l\u0259rin ara\u015fd\u0131r\u0131lmas\u0131 \u00fc\u00e7\u00fcn faydal\u0131 m\u0259lumatlar\u0131, m\u0259s\u0259l\u0259n, valideyn prosesinin ad\u0131, icra olunan fayllar\u0131n m\u0259zmununa aid hashlar, dinamik kitabxanalar haqq\u0131nda m\u0259lumat, fayllar\u0131n yarad\u0131lmas\u0131\/n\u00fcmayi\u015f etdirilm\u0259si\/d\u0259yi\u015fdirilm\u0259si\/sililm\u0259si zaman\u0131 m\u0259lumatlar, prosesl\u0259rin blok cihazlar\u0131na birba\u015fa giri\u015f haqq\u0131nda m\u0259lumatlar\u0131 saxlay\u0131r. Qeyd edil\u0259n m\u0259lumatlar\u0131n miqdar\u0131n\u0131 m\u0259hdudla\u015fd\u0131rmaq \u00fc\u00e7\u00fcn filtrl\u0259rin t\u0259nziml\u0259nm\u0259si imkan\u0131 var. Qeyd standart Syslog vasit\u0259sil\u0259 saxlan\u0131la bil\u0259r. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Linux \u0441\u0435\u0440\u0432\u0438\u0441 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Sysmon. \u0414\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b Linux \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0430 eBPF, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 SysinternalsEBPF, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f BPF-\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0441\u043e\u0431\u044b\u0442\u0438\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041a\u043e\u0434 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u043e\u0442\u043a\u0440\u044b\u0442 \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 MIT, \u0430 BPF-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2. \u0412 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101654","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft Sysmon-u Linux \u00fc\u00e7\u00fcn portlay\u0131b v\u0259 kodunu a\u00e7\u0131q ed\u0259r\u0259k t\u0259qdim edib | ProHoster","description":"Microsoft \u015firk\u0259ti Sysmon sistem f\u0259aliyy\u0259tini izl\u0259m\u0259 xidm\u0259tini Linux platformas\u0131na portlay\u0131b.","canonical_url":"https:\/\/prohoster.info\/az\/blog\/news\/kompaniya-microsoft-portirovala-sysmon-dlya-linux-i-otkryla-ego-kod","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"az_AZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 Sysmon \u0434\u043b\u044f Linux \u0438 \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u0435\u0433\u043e \u043a\u043e\u0434 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Linux \u0441\u0435\u0440\u0432\u0438\u0441 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Sysmon.","og:url":"https:\/\/prohoster.info\/az\/blog\/news\/kompaniya-microsoft-portirovala-sysmon-dlya-linux-i-otkryla-ego-kod","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-10-15T08:23:31+00:00","article:modified_time":"2021-10-15T08:23:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101654","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-10-15 08:28:56","updated":"2022-10-10 04:15:07","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/101654","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/comments?post=101654"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/101654\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media?parent=101654"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/categories?post=101654"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/tags?post=101654"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
M\u0259nb\u0259: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"