{"id":96242,"date":"2020-10-09T19:42:33","date_gmt":"2020-10-09T17:42:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/dyra-kak-instrument-bezopasnosti-2-ili-kak-lovit-apt-na-zhivcza"},"modified":"2020-10-09T19:42:33","modified_gmt":"2020-10-09T17:42:33","slug":"dyra-kak-instrument-bezopasnosti-2-ili-kak-lovit-apt-na-zhivcza","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/dyra-kak-instrument-bezopasnosti-2-ili-kak-lovit-apt-na-zhivcza","title":{"rendered":"Augmented Reality kui turvameede \u2013 2, ehk kuidas p\u00fc\u00fcda APT-d \u00ab\u00fclekande\u00bb ajal","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>(pealkirja idee eest ait\u00e4h Sergey G. Brester) <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/users\/sebres\/\" class=\"user_link\">sebres<\/a><\/noindex>)<\/p>\n<p>Kolleegid, selle artikli eesm\u00e4rgiks on jagada kogemusi uue klassi IDS-lahenduste testimisest Deception-tehnoloogiate p\u00f5hjal, mis kestis aasta. <\/p>\n<p><img decoding=\"async\" alt=\"Augmented Reality kui turvameede \u2013 2, ehk kuidas p\u00fc\u00fcda APT-d \u00ab\u00fclekande\u00bb ajal\" src=\"\/wp-content\/uploads\/2020\/10\/f641b6735cf846d12a0081c7709662e7.png\" style=\"display:block;margin: 0 auto;\" \/><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Et s\u00e4ilitada materjali loogilist sidusust, pean vajalikuks alustada eeldustest. Nii et, probleem on j\u00e4rgmine:<\/p>\n<ol>\n<li>Sihtotstarbelised r\u00fcnnakud on k\u00f5ige ohtlikum r\u00fcnnaku liik, kuigi nende osakaal koguhulkades on v\u00e4ike. <\/li>\n<li>Puudub m\u00f5ni garantii, et t\u00f5husat perimeetri kaitsevahendit (v\u00f5i selliste vahendite kompleksi) on seni leiutatud. <\/li>\n<li>Reeglina toimuvad sihtotstarbelised r\u00fcnnakud mitmes etapis. Perimeetri \u00fcletamine on alles \u00fcks esialgsetest etappidest, mis (v\u00f5ite mind kividega loopida) ei tekita suurt kahju \u00abohvrile\u00bb, kui see ei ole DEoS (teenuse h\u00e4vitamine) r\u00fcnnaku puhul (\u0161ifreerijad jne). T\u00f5eliselt \u00abvalus\u00bb hakkab alles hiljem, kui h\u00f5ivatud varasid kasutatakse r\u00fcnnakute \u00abs\u00fcgavusele\u00bb liikudes, ja me ei pruugi sellest teadlikud olla. <\/li>\n<li>Kuna me hakkame t\u00f5eliselt kaotama, kui kurjategijad saavutavad oma sihtm\u00e4rgid (rakendusservid, andmebaasid, andmete hoidlad, hoidlad, kriitilise infrastruktuuri elemendid), on loogiline, et \u00fcheks k\u00fcberjulgeoleku teenistuse \u00fclesandeks on r\u00fcnnakute peatamine enne seda eba\u00f5nnestunud s\u00fcndmust. Kuid midagi peatada, tuleb sellest k\u00f5igepealt teada. Ja mida varem \u2013 seda parem. <\/li>\n<li>Seega on riskide t\u00f5husaks juhtimiseks (st suunatud r\u00fcnnakute kahjustuse v\u00e4hendamiseks) kriitiliselt vajalik olemasolu t\u00f6\u00f6riistade, mis tagavad minimaalset TTD (time to detect \u2013 aeg sissemurdmisest r\u00fcnnaku tuvastamiseni). S\u00f5ltuvalt t\u00f6\u00f6stusharust ja piirkonnast on see periood USA-s keskmiselt 99 p\u00e4eva, EMEA piirkonnas 106 p\u00e4eva ja APAC piirkonnas 172 p\u00e4eva (M-Trends 2017, A View From the Front Lines, Mandiant). <\/li>\n<li>Mida pakub turg?\n<ul>\n<li>\u201eKohandamis- ja katsetamiskeskkonnad\u201c. Veel \u00fcks ennetav kontroll, mis on kaugel ideaalist. On palju t\u00f5husaid meetodeid, et tuvastada ja m\u00f6\u00f6da minna kohandamis- v\u00f5i heakskiitmislahendustest. \u201eTumeda poole\u201c kutid on siin hetkel sammu ees. \n<\/li>\n<li>UEBA (k\u00e4itumisprofiilide ja k\u00f5rvalekallete tuvastamise s\u00fcsteemid) teoreetiliselt v\u00f5ivad olla v\u00e4ga efektiivsed. Kuid minu arvates j\u00e4\u00e4b see kauges tulevikku. Praktikas on see praegu v\u00e4ga kallis, ebat\u00f5hus ja vajab v\u00e4ga k\u00fcpset ja stabiilset IT ja infos\u00fcsteemide infrastruktuuri, kus juba on k\u00f5ik vajalikud t\u00f6\u00f6riistad, mis genereerivad andmeid k\u00e4itumisanal\u00fc\u00fcsiks.\n<\/li>\n<li>SIEM on hea t\u00f6\u00f6riist uurimiseks, kuid midagi uut ja originaalset n\u00e4ha ja \u00f5igel ajal esitada ei suuda, kuna korrelatsioonireeglid on samad signatuurid. <\/li>\n<\/ul>\n<p>\n <\/li>\n<li>Sellise t\u00f6\u00f6riista vajadus on muutunud \u00fcha ilmselgemaks, millel on:\n<ul>\n<li>t\u00f6\u00f6tada t\u00f5husalt juba kompromiteeritud perimeetrites,\n<\/li>\n<li>tuvastada edukad r\u00fcnnakud peaaegu reaalajas, s\u00f5ltumata kasutatavatest t\u00f6\u00f6riistadest ja haavatavustest,<\/li>\n<li>mitte s\u00f5ltuda signatuuridest\/reeglitest\/skeemidest\/poliitikatest\/profiilidest ja teistest staatilistest asjadest,<\/li>\n<li>mitte vajada suuri andmemahtusid ja nende allikaid anal\u00fc\u00fcsiks,<\/li>\n<li>v\u00f5imaldaks r\u00fcnnakute m\u00e4\u00e4ratlemist mitte kui mingi riskiskoorimise tulemus \"maailma parima, patenditud ja seet\u00f5ttu suletud matemaatika\" t\u00f5ttu, mis n\u00f5uab t\u00e4iendavat uurimist, vaid praktiliselt kui binaarset s\u00fcndmust \u2013 \"Jah, meid r\u00fcnnatakse\" v\u00f5i \"Ei, k\u00f5ik on korras\".<\/li>\n<li>oli universaalne, t\u00f5husalt skaleeritav ja t\u00f5eliselt rakendatav igasugustes heterogeensetes keskkondades, s\u00f5ltumata kasutatavast f\u00fc\u00fcsilisest ja loogilisest v\u00f5rgutopoloogiast.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<p>\nSelle rollile pretendeerivad praegu nn petmislahendused. See t\u00e4hendab lahendusi, mis p\u00f5hinevad vanal heas honeypot'ide kontseptsioonil, kuid hoopis erineva taseme rakendusega. See teema on praegu kahtlemata t\u00f5usuteel.<\/p>\n<p>Tulemuste p\u00f5hjal <noindex><a rel=\"nofollow\" href=\"https:\/\/www.gartner.com\/newsroom\/id\/3744917\">Gartner Security&amp;Risk management summit 2017<\/a><\/noindex> Petmislahendused on TOP-3 strateegia ja t\u00f6\u00f6riistade seas, mida soovitatakse rakendada. <\/p>\n<p>Aruande andmete kohaselt <noindex><a rel=\"nofollow\" href=\"https:\/\/www.tag-cyber.com\/Annual\/2017\/\">TAG Kyberturvalisuse Aasta 2017<\/a><\/noindex> Petmine on \u00fcks juhtivatest suundumustest IDS (Intrusion Detection Systems) lahenduste arengus.<\/p>\n<p>Viimane sektsioon <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cisco.com\/c\/en\/us\/products\/security\/security-reports.html\">Cisco IT-turbelise olukorra raportist<\/a><\/noindex>, mis moodustatakse SCADA-lt, on aluseks \u00fche juhtiva ettev\u00f5tte, TrapX Security (Iisrael), andmetele, mille lahendused on meie testimisalas t\u00f6\u00f6tanud juba aasta. <\/p>\n<p>TrapX Deception Grid v\u00f5imaldab v\u00e4lja t\u00f6\u00f6tada ja hallata massiliselt jaotatud IDS-i keskelt, ilma litsentsikoormuse ja riistvaran\u00f5uete suurenemiseta. Tegelikult on TrapX ehituskomplekt, mis v\u00f5imaldab olemasolevate IT-infrastruktuuri elementide p\u00f5hjal luua \u00fche suure r\u00fcndeavastuss\u00fcsteemi, mis katab kogu ettev\u00f5tte, t\u00f5eliselt jaotatud v\u00f5rgu \"m\u00e4rguande\". <\/p>\n<h3>Lahenduse struktuur<\/h3>\n<p>\nMeie laboris uurime ja katsetame pidevalt erinevaid IT-ohtude kaitse uuendusi. Praegu on siin kokku umbes 50 erinevat virtuaalset serverit, sealhulgas ka TrapX Deception Grid komponente.<\/p>\n<p><img decoding=\"async\" alt=\"Augmented Reality kui turvameede \u2013 2, ehk kuidas p\u00fc\u00fcda APT-d \u00ab\u00fclekande\u00bb ajal\" src=\"\/wp-content\/uploads\/2020\/10\/9c9c21101020c1005edc938a3a7ca393.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNii et, \u00fclevalt alla:<\/p>\n<ol>\n<li>TSOC (TrapX Security Operation Console) \u2013 s\u00fcsteemi aju. See on keskne juhtimiskonsool, mille abil toimub lahenduse seadistamine, juurutamine ja kogu igap\u00e4evane t\u00f6\u00f6. Kuna see on veebi teenus, saab seda rakendada \u00fcksk\u00f5ik kus \u2013 perimeetris, pilves v\u00f5i MSSP teenusepakkuja juures. <\/li>\n<li>TrapX Appliance (TSA) \u2013 virtuaalserver, kuhu \u00fchendame trunk-porti abil need alav\u00f5rgud, mida soovime j\u00e4lgimisega katta. Siin paiknevad tegelikult ka k\u00f5ik meie v\u00f5rguandurid.\n<p>Meie laboris on k\u00e4ivitatud \u00fcks TSA (mwsapp1), kuid tegelikult v\u00f5ib neid olla palju. See v\u00f5ib osutuda vajalikuks suurtes v\u00f5rkudes, kus segmentide vahel puudub L2-\u00fchendus (klassikaline n\u00e4ide \u2013 'Kontsern ja t\u00fctarettev\u00f5tted' v\u00f5i 'Panga peakorter ja filiaalid') v\u00f5i kui v\u00f5rgus on isoleeritud segmente, n\u00e4iteks automaatika- ja juhtimisseadmed. Igasse sellesse filiaali\/segmendi saab paigaldada oma TSA ja \u00fchendada selle \u00fchtsesse TSOC-isse, kus kogu teave t\u00f6\u00f6deldakse tsentraliseeritult. Selline arhitektuur v\u00f5imaldab luua jaotatud j\u00e4lgimiss\u00fcsteeme ilma v\u00f5rgu kardinaalse \u00fcmberehitamise v\u00f5i olemasoleva segmentatsiooni rikkumiseta.<\/p>\n<p>Samuti saame TSA-s edastada v\u00e4ljuva liikluse koopia l\u00e4bi TAP\/SPAN. Kui tuvastame \u00fchendusi tuntud botnetide, juhtserverite v\u00f5i TOR-seanssidega, saame ka tulemuse konsoolis. Selle eest vastutab Network Intelligence Sensor (NIS). Meie keskkonnas on see funktsioon rakendatud tulem\u00fc\u00fcris, seega ei ole me seda siin kasutanud. <\/li>\n<li>Application Traps (Full OS) \u2013 traditsioonilised Windows-serverite p\u00f5hised honeypotid. Neid ei ole vaja palju, kuna nende peamine \u00fclesanne on pakkuda IT-teenuseid j\u00e4rgmisele sensorite tasemele v\u00f5i tuvastada r\u00fcnnakuid \u00e4rirakendustele, mis v\u00f5ivad olla rakendatud Windows-keskkonnas. Meie laboris on paigaldatud \u00fcks selline server (FOS01).\n<p><img decoding=\"async\" alt=\"Augmented Reality kui turvameede \u2013 2, ehk kuidas p\u00fc\u00fcda APT-d \u00ab\u00fclekande\u00bb ajal\" src=\"\/wp-content\/uploads\/2020\/10\/8de44215efff4a49f3b773da10185a73.png\" style=\"display:block;margin: 0 auto;\" \/>\n<\/li>\n<li>Emuleeritud l\u00f5ksud \u2013 p\u00f5hikomponent lahendusest, mis v\u00f5imaldab meil \u00fcheainsa virtuaalmasinaga luua tiheda \u00abminav\u00e4lja\u00bb r\u00fcndajate jaoks ja t\u00e4ita ettev\u00f5tte v\u00f5rku, k\u00f5iki selle vlan-e, meie sensoritega. R\u00fcndaja n\u00e4eb sellist sensorit v\u00f5i fantaasiahosti nagu tegelikku Windowsi PC-d v\u00f5i serverit, Linuxi serverit v\u00f5i muud seadet, mida me otsustame talle n\u00e4idata.\n<p><img decoding=\"async\" alt=\"Augmented Reality kui turvameede \u2013 2, ehk kuidas p\u00fc\u00fcda APT-d \u00ab\u00fclekande\u00bb ajal\" src=\"\/wp-content\/uploads\/2020\/10\/306c21046c5baadd591b66cdfe153ec2.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKasutusmugavuse ja uudishimu huvides oleme seadnud v\u00e4lja \u201eiga\u00fchele oma kaaslase\u201d \u2014 Windowsi PC-d ja erinevate versioonide serverid, Linux-serverid, Windows Embeddediga pangandusautomaat, SWIFT Web Access, v\u00f5rguprinter, Cisco l\u00fcliti, Axis IP-kaamera, MacBook, PLC-seade ja isegi nutiampull. Kokku on meil 13 hosti. Tegelikult soovitab tootja selliseid sensoreid rakendada v\u00e4hemalt 10% tegelikest hostidest. \u00dclemine piir on saadaval olev aadressiruum. <\/p>\n<p>V\u00e4ga oluline punkt on see, et iga selline host ei ole t\u00e4isv\u00e4\u00e4rtuslik virtuaalmasin, mis vajab ressursse ja litsentse. See on \u201epetmine\u201d, emulatsioon, \u00fcks protsess TSA-l, millel on oma parameetrite kogum ja IP-aadress. Seet\u00f5ttu suudame isegi \u00fche TSA abil v\u00f5rgustada sadu selliseid fantoomhoste, mis t\u00f6\u00f6tavad nagu andurid signalisatsioonis\u00fcsteemis. Just see tehnoloogia v\u00f5imaldab majanduslikult efektiivselt skaleerida \u201ehoneypoti\u201d kontseptsiooni igas suuruses suures jaotatud ettev\u00f5ttes. <\/p>\n<p>Need to ensure that these hosts are secure, as they contain vulnerabilities and are seen as relatively easy targets by attackers. The attacker can identify services on these hosts and interact with them, using standard tools and protocols (smb\/wmi\/ssh\/telnet\/web\/dnp\/bonjour\/Modbus, etc.). However, utilizing these hosts to develop an attack or run their code is not possible.\n<\/li>\n<li>The combination of these two technologies (FullOS and emulated traps) allows for a high statistical probability that the attacker will eventually encounter some element of our signaling network. But how can we ensure that this probability approaches 100%?\n<p>Tulevad m\u00e4ngu nii kutsutud tokenid (Deception tokenid). Nende abil saame integreerida meie hajutatud IDS-i k\u00f5ik olemasolevad arvutid ja serverid ettev\u00f5ttes. Tokenid paigutatakse kasutajate tegelikele arvutitele. Oluline on m\u00f5ista, et tokenid ei ole agent, mis tarbib ressursse ja v\u00f5ib p\u00f5hjustada konflikte. Tokenid on passiivsed teabeelemendid, omamoodi \u201eleivak\u00fcpsised\u201d r\u00fcndava poole jaoks, mis suunavad neid l\u00f5ksu. N\u00e4iteks \u00fchendatud v\u00f5rgu kettad, j\u00e4rjehoidjad vale veebihalduritele brauseris ja nende salvestatud paroolid, salvestatud ssh\/rdp\/winscp seansid, meie l\u00f5ksud kommentaaridega hosts failides, m\u00e4lus salvestatud paroolid, mitteeksisteerivate kasutajate mandaadid, kontorifailid, mille avamine k\u00e4ivitab s\u00fcsteemi, ja palju muud. Nii asetame r\u00fcndaja moonutatud keskkonda, mis on k\u00fcllastunud nende r\u00fcnnakusuundadega, mis meie jaoks tegelikult ei kujuta ohtu, vaid pigem vastupidi. Ja tal ei ole v\u00f5imalust kindlaks teha, kus on t\u00f5ene informatsioon ja kus vale. Nii tagame mitte ainult kiire r\u00fcnnaku tuvastamise, vaid ka aeglustame oluliselt selle kulgu. <\/li>\n<\/ol>\n<p>\n<img decoding=\"async\" alt=\"Augmented Reality kui turvameede \u2013 2, ehk kuidas p\u00fc\u00fcda APT-d \u00ab\u00fclekande\u00bb ajal\" src=\"\/wp-content\/uploads\/2020\/10\/812409dca0c8bc991c7e9812f16d77cf.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>N\u00e4idete loomine ja tokenite seadistamine. Kasutajas\u00f5bralik liides, pole vajalik k\u00e4sitsi konfiguratsioonide, skriptide jne muuta.<\/i><\/p>\n<p>Meie keskkonnas oleme konfigureerinud ja paigaldanud mitu sellist tokenit FOS01 serveris, mis t\u00f6\u00f6tab Windows Server 2012R2, ja testarvutis, mis t\u00f6\u00f6tab Windows 7-l. Nendel masinatel on k\u00e4imas RDP ja me perioodiliselt 'v\u00e4ljastame' neid DMZ-sse, kuhu on toodud ka mitmeid meie sensoreid (emuleeritud l\u00f5ksud). Nii saame pideva voolu s\u00fcndmustest, \u00fctleme nii. <\/p>\n<p>Niisiis, aasta kokkuv\u00f5tte statistika:<\/p>\n<p>56 208 \u2013 s\u00fcndmust on registreeritud,<br \/>\n2 912 \u2013 r\u00fcndehostide allikaid on tuvastatud. <\/p>\n<p><img decoding=\"async\" alt=\"Augmented Reality kui turvameede \u2013 2, ehk kuidas p\u00fc\u00fcda APT-d \u00ab\u00fclekande\u00bb ajal\" src=\"\/wp-content\/uploads\/2020\/10\/0b2404084a997ba5fe4ad33303501612.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Interaktiivne, klikitav r\u00fcnde kaart<\/i><\/p>\n<p>Sellega samas lahendus ei genereeri mingit megap\u00e4evikut v\u00f5i s\u00fcndmusvoogu, milles tuleb pikka aega orienteeruda. Selle asemel klassifitseerib lahendus s\u00fcndmused ise nende liikide j\u00e4rgi ja v\u00f5imaldab k\u00fcberjulgeoleku meeskonnal keskenduda eelk\u00f5ige k\u00f5ige ohtlikumatele \u2013 kui r\u00fcndaja \u00fcritab avada juhtimis sessioone (interaktsioon) v\u00f5i kui meie liikluses ilmuvad binaarsed koormused (nakkus). <\/p>\n<p><img decoding=\"async\" alt=\"Augmented Reality kui turvameede \u2013 2, ehk kuidas p\u00fc\u00fcda APT-d \u00ab\u00fclekande\u00bb ajal\" src=\"\/wp-content\/uploads\/2020\/10\/d0ad109bae7dc0fb80182d43be713d4e.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKogu teave s\u00fcndmustest on loetav ja esitatud, minu arvates, arusaadaval viisil isegi kasutajale, kellel on vaid p\u00f5hilised teadmised k\u00fcberturvalisusest. <\/p>\n<p>Enamik fikseeritud intsidente on meie serverite skannimise katsed v\u00f5i \u00fcksik\u00fchendused. <\/p>\n<p><img decoding=\"async\" alt=\"Augmented Reality kui turvameede \u2013 2, ehk kuidas p\u00fc\u00fcda APT-d \u00ab\u00fclekande\u00bb ajal\" src=\"\/wp-content\/uploads\/2020\/10\/ea87b3592b2d3727815050b9fd1f708e.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nV\u00f5i katsed RDP paroolide proovimiseks.<\/p>\n<p><img decoding=\"async\" alt=\"Augmented Reality kui turvameede \u2013 2, ehk kuidas p\u00fc\u00fcda APT-d \u00ab\u00fclekande\u00bb ajal\" src=\"\/wp-content\/uploads\/2020\/10\/645b5984d1ffaf31758fb23e9a23c9eb.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAga oli ka huvitavamaid juhtumeid, eriti kui r\u00fcndajad \u201e\u00f5nnestusid\u201c RDP parooli leidmisel ja p\u00e4\u00e4sesid kohalikku v\u00f5rgus\u00fcsteemi. <\/p>\n<p><img decoding=\"async\" alt=\"Augmented Reality kui turvameede \u2013 2, ehk kuidas p\u00fc\u00fcda APT-d \u00ab\u00fclekande\u00bb ajal\" src=\"\/wp-content\/uploads\/2020\/10\/3cde5beadaa306d32c382f66bd67ec33.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nR\u00fcndaja \u00fcritab koodi k\u00e4ivitada psexeci abil.<\/p>\n<p><img decoding=\"async\" alt=\"Augmented Reality kui turvameede \u2013 2, ehk kuidas p\u00fc\u00fcda APT-d \u00ab\u00fclekande\u00bb ajal\" src=\"\/wp-content\/uploads\/2020\/10\/1356ef44f3581b37c3163ce454fecf14.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nR\u00fcndaja leidis salvestatud sessiooni, mis t\u00f5i ta l\u00f5ksu, mis oli kujundatud Linuxi serveriks. \u00c4kitselt p\u00e4rast sisselogimist \u00fches eelt\u00f6\u00f6deldud k\u00e4sihulgast \u00fcritas ta h\u00e4vitada k\u00f5ik logifailid ja vastavad s\u00fcsteemi muutujad.<\/p>\n<p><img decoding=\"async\" alt=\"Augmented Reality kui turvameede \u2013 2, ehk kuidas p\u00fc\u00fcda APT-d \u00ab\u00fclekande\u00bb ajal\" src=\"\/wp-content\/uploads\/2020\/10\/6d8994cd3bb2268e45540e5bbcdc74a4.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nR\u00fcndaja p\u00fc\u00fcab teostada SQL-injekteeringut l\u00f5ksus, mis imiteerib SWIFT veebip\u00e4\u00e4su.<\/p>\n<p>Lisaks sellistele \"loomulikest\" r\u00fcnnakutest oleme l\u00e4bi viinud ka mitmeid omi teste. \u00dcks k\u00f5ige silmapaistvamaid on v\u00f5rgu ussi avastamise aja testimine. Selleks kasutasime GuardiCore'i t\u00f6\u00f6riista, mis kannab nime <noindex><a rel=\"nofollow\" href=\"http:\/\/www.guardicore.com\/infectionmonkey\/\">Infection Monkey<\/a><\/noindex>. See on v\u00f5rguuss, mis suudab haarata Windowsi ja Linuxi, kuid ilma mingi \u201ekasuliku\u201c koormata. <br \/>\nMeie kohalikud juhtimiskeskused k\u00e4ivitasid \u00fche masina peal esimest kopeerimist ning saime esimesed teavitused TrapX konsoolis v\u00e4hem kui poolteise minuti jooksul. TTD 90 sekundit v\u00f5rreldes 106 p\u00e4eva keskmisega\u2026 <\/p>\n<p>T\u00e4nu v\u00f5imalusele integreerida teiste lahenduste klassidega saame liikuda kiirelt ohtude tuvastamisest nende automaatse reageerimiseni. <\/p>\n<p>N\u00e4iteks NAC (Network Access Control) s\u00fcsteemide integreerimine v\u00f5i CarbonBlack v\u00f5imaldab automaatselt v\u00e4lja l\u00fclitada kompromiteeritud arvuteid v\u00f5rgust. <\/p>\n<p><img decoding=\"async\" alt=\"Augmented Reality kui turvameede \u2013 2, ehk kuidas p\u00fc\u00fcda APT-d \u00ab\u00fclekande\u00bb ajal\" src=\"\/wp-content\/uploads\/2020\/10\/4364d6374b57e5741e33f8981b4cb0ad.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKasutaja t\u00f5kestamine automatiseerimiseks on v\u00f5imalik koost\u00f6\u00f6s liivakastidega r\u00fcnnakutes osalenud failide edastamiseks anal\u00fc\u00fcsimiseks. <\/p>\n<p><img decoding=\"async\" alt=\"Augmented Reality kui turvameede \u2013 2, ehk kuidas p\u00fc\u00fcda APT-d \u00ab\u00fclekande\u00bb ajal\" src=\"\/wp-content\/uploads\/2020\/10\/c66b8051d0dbd31c1215329d1b55930b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Integreerimine McAfeega<\/h3>\n<p>\nLahenduses on ka oma sisseehitatud s\u00fcndmuste korrelatsiooni s\u00fcsteem.<\/p>\n<p><img decoding=\"async\" alt=\"Augmented Reality kui turvameede \u2013 2, ehk kuidas p\u00fc\u00fcda APT-d \u00ab\u00fclekande\u00bb ajal\" src=\"\/wp-content\/uploads\/2020\/10\/d4030212690f3ee1f1a641c49bc90960.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKuid selle v\u00f5imalused ei olnud meile piisavad, seet\u00f5ttu integreerisime selle HP ArcSightiga.<\/p>\n<p><img decoding=\"async\" alt=\"Augmented Reality kui turvameede \u2013 2, ehk kuidas p\u00fc\u00fcda APT-d \u00ab\u00fclekande\u00bb ajal\" src=\"\/wp-content\/uploads\/2020\/10\/f08d607c5b4abf8dc354f65ed2591ebc.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAvastatud ohtudega \u201ekoos maailmaga\u201c toimetulekut aitab sisseehitatud piletite s\u00fcsteem.<\/p>\n<p><img decoding=\"async\" alt=\"Augmented Reality kui turvameede \u2013 2, ehk kuidas p\u00fc\u00fcda APT-d \u00ab\u00fclekande\u00bb ajal\" src=\"\/wp-content\/uploads\/2020\/10\/0e78fa59b2f2b114fa9bdf572f37ea96.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKuna lahendus \"kohe alustamiseks\" on v\u00e4lja t\u00f6\u00f6tatud riigiasutuste ja suurte ettev\u00f5tete vajadustele, on seal loomulikult rakendatud rollip\u00f5hist ligip\u00e4\u00e4sude mudelit, integreerimist AD-ga, arenenud aruandluse ja s\u00fcndmuste teavitamise s\u00fcsteemi ning orkestreerimist suurte kontsernide v\u00f5i MSSP pakkujate jaoks. <\/p>\n<h3>Kokkuv\u00f5tte asemel<\/h3>\n<p>\nKui selline j\u00e4lgimiss\u00fcsteem on olemas, mis, kujundlikult \u00f6eldes, katab meie selja, siis perimeetri kompromiteerimine on vaid algus. K\u00f5ige t\u00e4htsam on, et tekib reaalne v\u00f5imalus v\u00f5idelda IKT-intsidentidega, mitte tegeleda nende tagaj\u00e4rgede k\u00f5rvaldamisega.<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/softline\/blog\/413893\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>(\u0437\u0430 \u0438\u0434\u0435\u044e \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 \u0441\u043f\u0430\u0441\u0438\u0431\u043e Sergey G. Brester sebres) \u041a\u043e\u043b\u043b\u0435\u0433\u0438, \u0446\u0435\u043b\u044c\u044e \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0436\u0435\u043b\u0430\u043d\u0438\u0435 \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u043e\u043f\u044b\u0442\u043e\u043c \u0433\u043e\u0434\u0438\u0447\u043d\u043e\u0439 \u0442\u0435\u0441\u0442\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043b\u0430\u0441\u0441\u0430 IDS-\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Deception-\u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439. \u0427\u0442\u043e\u0431\u044b \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0432\u044f\u0437\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430, \u0441\u0447\u0438\u0442\u0430\u044e \u043d\u0443\u0436\u043d\u044b\u043c \u043d\u0430\u0447\u0430\u0442\u044c \u0441 \u043f\u0440\u0435\u0434\u043f\u043e\u0441\u044b\u043b\u043e\u043a. \u0418\u0442\u0430\u043a, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0442\u0438\u043a\u0430: \u041d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u2013 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0432\u0438\u0434 \u0430\u0442\u0430\u043a, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432 \u043e\u0431\u0449\u0435\u043c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u0443\u0433\u0440\u043e\u0437 \u0438\u0445 \u0443\u0434\u0435\u043b\u044c\u043d\u044b\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":96243,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-96242","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"(\u0437\u0430 \u0438\u0434\u0435\u044e \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 \u0441\u043f\u0430\u0441\u0438\u0431\u043e Sergey G. Brester sebres) \u041a\u043e\u043b\u043b\u0435\u0433\u0438, \u0446\u0435\u043b\u044c\u044e \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0436\u0435\u043b\u0430\u043d\u0438\u0435 \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u043e\u043f\u044b\u0442\u043e\u043c \u0433\u043e\u0434\u0438\u0447\u043d\u043e\u0439 \u0442\u0435\u0441\u0442\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043b\u0430\u0441\u0441\u0430 IDS-\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Deception-\u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439. \u0427\u0442\u043e\u0431\u044b \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0432\u044f\u0437\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430, \u0441\u0447\u0438\u0442\u0430\u044e \u043d\u0443\u0436\u043d\u044b\u043c \u043d\u0430\u0447\u0430\u0442\u044c \u0441 \u043f\u0440\u0435\u0434\u043f\u043e\u0441\u044b\u043b\u043e\u043a. \u0418\u0442\u0430\u043a, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0442\u0438\u043a\u0430: \u041d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u2013 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0432\u0438\u0434 \u0430\u0442\u0430\u043a, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432 \u043e\u0431\u0449\u0435\u043c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u0443\u0433\u0440\u043e\u0437 \u0438\u0445 \u0443\u0434\u0435\u043b\u044c\u043d\u044b\u0439\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/dyra-kak-instrument-bezopasnosti-2-ili-kak-lovit-apt-na-zhivcza\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0414\u044b\u0440\u0430 \u043a\u0430\u043a \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2013 2, \u0438\u043b\u0438 \u043a\u0430\u043a \u043b\u043e\u0432\u0438\u0442\u044c APT \u00ab\u043d\u0430 \u0436\u0438\u0432\u0446\u0430\u00bb | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"(\u0437\u0430 \u0438\u0434\u0435\u044e \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 \u0441\u043f\u0430\u0441\u0438\u0431\u043e Sergey G. Brester sebres) \u041a\u043e\u043b\u043b\u0435\u0433\u0438, \u0446\u0435\u043b\u044c\u044e \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0436\u0435\u043b\u0430\u043d\u0438\u0435 \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u043e\u043f\u044b\u0442\u043e\u043c \u0433\u043e\u0434\u0438\u0447\u043d\u043e\u0439 \u0442\u0435\u0441\u0442\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043b\u0430\u0441\u0441\u0430 IDS-\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Deception-\u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439. \u0427\u0442\u043e\u0431\u044b \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0432\u044f\u0437\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430, \u0441\u0447\u0438\u0442\u0430\u044e \u043d\u0443\u0436\u043d\u044b\u043c \u043d\u0430\u0447\u0430\u0442\u044c \u0441 \u043f\u0440\u0435\u0434\u043f\u043e\u0441\u044b\u043b\u043e\u043a. \u0418\u0442\u0430\u043a, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0442\u0438\u043a\u0430: \u041d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u2013 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0432\u0438\u0434 \u0430\u0442\u0430\u043a, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432 \u043e\u0431\u0449\u0435\u043c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u0443\u0433\u0440\u043e\u0437 \u0438\u0445 \u0443\u0434\u0435\u043b\u044c\u043d\u044b\u0439\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/dyra-kak-instrument-bezopasnosti-2-ili-kak-lovit-apt-na-zhivcza\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-09T17:42:33+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-09T17:42:33+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Auk kui turvalisuse t\u00f6\u00f6riist \u2013 2, v\u00f5i kuidas p\u00fc\u00fcda APT-d \"elava saagiga\" | ProHoster","description":"(pealkirja idee eest t\u00e4nud Sergey G. Brester sibres) Kolleege, selle artikli eesm\u00e4rk on jagada kogemusi uue klassi IDS-lahenduste testimise aastast, mis p\u00f5hineb Deception-tehnoloogiatel. Materjali loogilise seotuse s\u00e4ilitamiseks pean vajalikuks alustada eeldustest. Nii et probleemistik: Sihtitud r\u00fcnnakud \u2013 k\u00f5ige ohtlikum r\u00fcnnaku liik, vaatamata sellele, et nende osakaal \u00fcldises ohut\u00fc\u00fcpide arvus on v\u00e4iksem.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/dyra-kak-instrument-bezopasnosti-2-ili-kak-lovit-apt-na-zhivcza","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u044b\u0440\u0430 \u043a\u0430\u043a \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2013 2, \u0438\u043b\u0438 \u043a\u0430\u043a \u043b\u043e\u0432\u0438\u0442\u044c APT \u00ab\u043d\u0430 \u0436\u0438\u0432\u0446\u0430\u00bb | ProHoster","og:description":"(\u0437\u0430 \u0438\u0434\u0435\u044e \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 \u0441\u043f\u0430\u0441\u0438\u0431\u043e Sergey G. Brester sebres) \u041a\u043e\u043b\u043b\u0435\u0433\u0438, \u0446\u0435\u043b\u044c\u044e \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0436\u0435\u043b\u0430\u043d\u0438\u0435 \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u043e\u043f\u044b\u0442\u043e\u043c \u0433\u043e\u0434\u0438\u0447\u043d\u043e\u0439 \u0442\u0435\u0441\u0442\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u043a\u043b\u0430\u0441\u0441\u0430 IDS-\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Deception-\u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439. \u0427\u0442\u043e\u0431\u044b \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0432\u044f\u0437\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430, \u0441\u0447\u0438\u0442\u0430\u044e \u043d\u0443\u0436\u043d\u044b\u043c \u043d\u0430\u0447\u0430\u0442\u044c \u0441 \u043f\u0440\u0435\u0434\u043f\u043e\u0441\u044b\u043b\u043e\u043a. \u0418\u0442\u0430\u043a, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0442\u0438\u043a\u0430: \u041d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u2013 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0432\u0438\u0434 \u0430\u0442\u0430\u043a, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432 \u043e\u0431\u0449\u0435\u043c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u0443\u0433\u0440\u043e\u0437 \u0438\u0445 \u0443\u0434\u0435\u043b\u044c\u043d\u044b\u0439","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/dyra-kak-instrument-bezopasnosti-2-ili-kak-lovit-apt-na-zhivcza","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-09T17:42:33+00:00","article:modified_time":"2020-10-09T17:42:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"96242","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:47:24","updated":"2022-10-03 07:10:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/96242","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=96242"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/96242\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/96243"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=96242"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=96242"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=96242"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}