{"id":94862,"date":"2020-09-22T19:42:18","date_gmt":"2020-09-22T17:42:18","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/sysmon-teper-mozhet-zapisyvat-soderzhimoe-bufera-obmena"},"modified":"2020-09-22T19:42:18","modified_gmt":"2020-09-22T17:42:18","slug":"sysmon-teper-mozhet-zapisyvat-soderzhimoe-bufera-obmena","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/sysmon-teper-mozhet-zapisyvat-soderzhimoe-bufera-obmena","title":{"rendered":"Sysmon tagad var ierakst\u012bt starpniekabatas saturu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Par 12. versijas Sysmon izn\u0101k\u0161anu zi\u0146ots 17. septembr\u012b <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.microsoft.com\/en-us\/sysinternals\/\">Sysinternals lap\u0101<\/a><\/noindex>. Faktiski taj\u0101 pa\u0161\u0101 dien\u0101 tika izlaistas ar\u012b jaunas versijas Process Monitor un ProcDump. \u0160aj\u0101 rakst\u0101 es st\u0101st\u012b\u0161u par galveno un pretrun\u012bgo jaunumu 12. versij\u0101 \u2014 notikumu tipu ar Event ID 24, kur\u0101 tiek re\u0123istr\u0113ta darb\u012bba ar starpliktuvi.<\/p>\n<p><img decoding=\"async\" alt=\"Sysmon tagad var ierakst\u012bt starpniekabatas saturu\" src=\"\/wp-content\/uploads\/2020\/09\/3e9939a4f6bce70e6b2c3be9d72454c1.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nInform\u0101cija no \u0161\u012b notikumu tipa paver jaunas iesp\u0113jas kontroli p\u0101r aizdom\u012bgu aktivit\u0101ti (k\u0101 ar\u012b jaunus dro\u0161\u012bbas riskus). T\u0101d\u0113j\u0101di j\u016bs var\u0113siet saprast, kur\u0161, no kurienes un ko tie\u0161i m\u0113\u0123in\u0101ja nokop\u0113t. Zem\u0101k ir apraksts par da\u017eiem jaun\u0101 notikuma laukiem un p\u0101ris lietojuma gad\u012bjumi.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nJaunais notikums satur \u0161\u0101dus laukus:<\/p>\n<p><b>Image:<\/b> process, no kura dati tika ierakst\u012bti starpliktuv\u0113.<br \/>\n<b>Session:<\/b> sesija, kur\u0101 tika veikts ieraksts starpliktuv\u0113. Tas var b\u016bt system(0) <br \/>\n interakt\u012bv\u0101 vai att\u0101lin\u0101t\u0101 re\u017e\u012bm\u0101 u.tml.<br \/>\n<b>ClientInfo:<\/b> satur sesijas lietot\u0101ja v\u0101rdu, bet att\u0101lin\u0101t\u0101s sesijas gad\u012bjum\u0101 \u2014 s\u0101kotn\u0113jo hosta nosaukumu un IP adresi, ja \u0161ie dati ir pieejami.<br \/>\n<b>Hashes:<\/b> nosaka faila nosaukumu, kur\u0101 tika saglab\u0101ts nokop\u0113tais teksts (l\u012bdz\u012bgi k\u0101 notikumiem ar FileDelete tipu).<br \/>\n<b>Archived:<\/b> statuss, vai teksts no starpliktuves tika saglab\u0101ts arh\u012bva direktorij\u0101 Sysmon.<\/p>\n<p>Da\u017ei no p\u0113d\u0113jiem laukiem rada ba\u017eas. Proti, kop\u0161 11. versijas Sysmon var (atbilsto\u0161i iestat\u012bjumiem) saglab\u0101t da\u017e\u0101dus datus savai arh\u012bva direktorijai. Piem\u0113ram, Event ID 23 re\u0123istr\u0113 notikumus par failu dz\u0113\u0161anu un var tos saglab\u0101t tie\u0161i taj\u0101 pa\u0161\u0101 arh\u012bva direktorij\u0101. Failu nosaukumiem, kas rad\u012bti, str\u0101d\u0101jot ar starpliktuvi, tiek pievienots tags CLIP. \u0160ie faili satur prec\u012bzus datus, kas tika nokop\u0113ti starpliktuv\u0113.<\/p>\n<p>                        <b class=\"spoiler_title\">T\u0101 izskat\u0101s saglab\u0101t\u0101 faila<\/b><br \/>\n                        <img decoding=\"async\" alt=\"Sysmon tagad var ierakst\u012bt starpniekabatas saturu\" src=\"\/wp-content\/uploads\/2020\/09\/2a3989b724a06d19bcdb8c0d35294e71.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>\nSaglab\u0101\u0161ana fail\u0101 tiek iesl\u0113gta instal\u0101cijas laik\u0101. Var izveidot baltos sarakstus procesiem, par kuriem teksts netiks saglab\u0101ts.<\/p>\n<p>                        <b class=\"spoiler_title\">T\u0101 izskat\u0101s Sysmon instal\u0101cija ar atbilsto\u0161u arh\u012bva direktorijas iestat\u012bjumu:<\/b><br \/>\n                        <img decoding=\"async\" alt=\"Sysmon tagad var ierakst\u012bt starpniekabatas saturu\" src=\"\/wp-content\/uploads\/2020\/09\/804bc7475d92886bc7d591e4ccb20eb7.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>\n\u0160eit, es dom\u0101ju, ir v\u0113rts atcer\u0113ties par parole p\u0101rvaldniekiem, kuri ar\u012b izmanto starpliktuvi. Sysmon kl\u0101tb\u016btne sist\u0113m\u0101 ar paroles p\u0101rvaldnieku \u013caus jums (vai uzbruc\u0113jam) uztvert \u0161\u012bs paroles. Ja pie\u0146emt, ka j\u016bs zin\u0101t, kur\u0161 tie\u0161i process aloc\u0113 nokop\u0113to tekstu (bet tas ne vienm\u0113r ir paroles p\u0101rvaldnieka process, tas var b\u016bt k\u0101ds svchost), \u0161o iz\u0146\u0113mumu var pievienot baltajam sarakstam un nesaglab\u0101t.<\/p>\n<p>Varb\u016bt j\u016bs nezin\u0101j\u0101t, bet teksta saturs no starpliktuves tiek ierakst\u012bts att\u0101lin\u0101taj\u0101 server\u012b, kad j\u016bs p\u0101rsl\u0113dzaties uz to RDP sesijas re\u017e\u012bm\u0101. Ja jums ir kaut kas starpliktuv\u0113 un j\u016bs p\u0101rsl\u0113dzaties starp RDP sesij\u0101m, \u0161\u012b inform\u0101cija ce\u013cos kop\u0101 ar jums.<\/p>\n<p>Kopsavilkums par Sysmon iesp\u0113j\u0101m darb\u0101 ar starpliktuvi.<\/p>\n<p>Fiks\u0113jams:<\/p>\n<ul>\n<li>Teksta kopija ievietot\u0101 teksta caur RDP un lok\u0101li;<\/li>\n<li>Datu ieg\u016b\u0161ana no starpliktuves ar da\u017e\u0101diem r\u012bkiem\/procesiem;<\/li>\n<li>Teksta kop\u0113\u0161ana\/iel\u012bm\u0113\u0161ana no\/viet\u0113jai virtu\u0101lajai ma\u0161\u012bnai, pat ja \u0161is teksts v\u0113l nav ievietots.<\/li>\n<\/ul>\n<p>\nNefiks\u0113jams:<\/p>\n<ul>\n<li>Fails kop\u0113\u0161ana\/iel\u012bm\u0113\u0161ana no\/viet\u0113jai virtu\u0101lajai ma\u0161\u012bnai;<\/li>\n<li>Fails kop\u0113\u0161ana\/iel\u012bm\u0113\u0161ana caur RDP<\/li>\n<li>V\u0113l \u013caunprogrammat\u016bra, kas ieraksta j\u016bsu starpliktuvi, raksta tikai pa\u0161\u0101 starpliktuv\u0113.<\/li>\n<\/ul>\n<p>\nNeskatoties uz visu t\u0101s neskaidr\u012bbu, \u0161is notikumu veids \u013caus atjaunot uzbruc\u0113ja r\u012bc\u012bbas sec\u012bbu un pal\u012bdz\u0113s noteikt iepriek\u0161 nepieejamos datus postmortem izveidei p\u0113c uzbrukumiem. Ja starpliktuves satura ierakst\u012b\u0161ana tom\u0113r ir iesl\u0113gta, ir svar\u012bgi fiks\u0113t katru faktu piek\u013cuvei arh\u012bva direktorijai un identific\u0113t potenci\u0101li b\u012bstamas (nevis sysmon.exe inici\u0113tas).<\/p>\n<p>Ierakst\u012b\u0161anai, anal\u012bzei un reakcijai uz iepriek\u0161 min\u0113tajiem notikumiem var izmantot r\u012bku <noindex><a rel=\"nofollow\" href=\"https:\/\/gals.software\/vendors\/quest\/intrust\">InTrust<\/a><\/noindex>, kas apvieno visus tr\u012bs pieejas un, pie tam, ir efekt\u012bvs centraliz\u0113ts visus sav\u0101ktos neapstr\u0101d\u0101tos datus. M\u0113s varam iestat\u012bt t\u0101 integr\u0101ciju ar popul\u0101r\u0101m SIEM sist\u0113m\u0101m, lai samazin\u0101tu izmaksas par to licenc\u0113\u0161anu, p\u0101rvietojot neapstr\u0101d\u0101to datu apstr\u0101di un uzglab\u0101\u0161anu uz InTrust.<\/p>\n<p>Lai uzzin\u0101tu vair\u0101k par InTrust, izlasiet m\u016bsu iepriek\u0161\u0113j\u0101s rakstus vai <noindex><a rel=\"nofollow\" href=\"https:\/\/gals.software\/vendors\/quest\/intrust#feedback\">atst\u0101jiet pieteikumu atgriezenisk\u0101s saites veid\u0101<\/a><\/noindex>.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/galssoftware\/blog\/512908\/\">K\u0101 samazin\u0101t SIEM sist\u0113mu \u012bpa\u0161umties\u012bbu izmaksas un k\u0101p\u0113c nepiecie\u0161ams Central Log Management (CLM)<\/a><\/noindex> <\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/galssoftware\/blog\/513714\/\">Iesl\u0113dzam notikumu v\u0101k\u0161anu par aizdom\u012bgu procesu palai\u0161anu Windows un identific\u0113jam draudus ar Quest InTrust.<\/a><\/noindex><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/galssoftware\/blog\/513208\/\">K\u0101 InTrust var pal\u012bdz\u0113t samazin\u0101t neizdo\u0161an\u0101s autoriz\u0101cijas m\u0113\u0123in\u0101jumus, izmantojot RDP<\/a><\/noindex><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/galssoftware\/blog\/474574\/\">Identific\u0113jot \u0161ifr\u0113jo\u0161\u0101 v\u012brusa uzbrukumu, ieg\u016bstam piek\u013cuvi dom\u0113na kontrolierim un m\u0113\u0123in\u0101m pretoties \u0161iem uzbrukumiem<\/a><\/noindex><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/galssoftware\/blog\/447522\/\">Ko noder\u012bgu var ieg\u016bt no Windows darba stacijas \u017eurn\u0101liem<\/a><\/noindex> (popul\u0101rs raksts)<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/galssoftware\/blog\/447512\/\">Un kur\u0161 to izdar\u012bja? Automatiz\u0113jam inform\u0101cijas dro\u0161\u012bbas auditu<\/a><\/noindex><br \/>\n<br \/>Avots: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/galssoftware\/blog\/520042\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e \u0440\u0435\u043b\u0438\u0437\u0435 12 \u0432\u0435\u0440\u0441\u0438\u0438 Sysmon \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 17 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 Sysinternals. \u041d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0432 \u044d\u0442\u043e\u0442 \u0434\u0435\u043d\u044c \u0432\u044b\u0448\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u043d\u043e\u0432\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Process Monitor \u0438 ProcDump. \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u044f \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u043e \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u043c \u0438 \u043d\u0435\u043e\u0434\u043d\u043e\u0437\u043d\u0430\u0447\u043d\u043e\u043c \u043d\u043e\u0432\u043e\u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0438 12 \u0432\u0435\u0440\u0441\u0438\u0438 Sysmon \u2014 \u0442\u0438\u043f\u0435 \u0441\u043e\u0431\u044b\u0442\u0438\u0439 \u0441 Event ID 24, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043b\u043e\u0433\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0440\u0430\u0431\u043e\u0442\u0430 \u0441 \u0431\u0443\u0444\u0435\u0440\u043e\u043c \u043e\u0431\u043c\u0435\u043d\u0430. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0438\u0437 \u044d\u0442\u043e\u0433\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94863,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94862","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e \u0440\u0435\u043b\u0438\u0437\u0435 12 \u0432\u0435\u0440\u0441\u0438\u0438 Sysmon \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 17 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 Sysinternals.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/sysmon-teper-mozhet-zapisyvat-soderzhimoe-bufera-obmena\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"lv_LV\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Sysmon \u0442\u0435\u043f\u0435\u0440\u044c \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043e\u0431\u043c\u0435\u043d\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e \u0440\u0435\u043b\u0438\u0437\u0435 12 \u0432\u0435\u0440\u0441\u0438\u0438 Sysmon \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 17 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 Sysinternals.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/sysmon-teper-mozhet-zapisyvat-soderzhimoe-bufera-obmena\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-22T17:42:18+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-22T17:42:18+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sysmon tagad var ierakst\u012bt starpliktuves saturu | ProHoster","description":"Par versijas 12 izn\u0101k\u0161anu Sysmon tika pazi\u0146ots 17. septembr\u012b Sysinternals lap\u0101.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/sysmon-teper-mozhet-zapisyvat-soderzhimoe-bufera-obmena","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Sysmon \u0442\u0435\u043f\u0435\u0440\u044c \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043e\u0431\u043c\u0435\u043d\u0430 | ProHoster","og:description":"\u041e \u0440\u0435\u043b\u0438\u0437\u0435 12 \u0432\u0435\u0440\u0441\u0438\u0438 Sysmon \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 17 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 Sysinternals.","og:url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/sysmon-teper-mozhet-zapisyvat-soderzhimoe-bufera-obmena","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-22T17:42:18+00:00","article:modified_time":"2020-09-22T17:42:18+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94862","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:16:37","updated":"2022-10-03 07:40:02","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/94862","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=94862"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/94862\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media\/94863"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=94862"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=94862"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=94862"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}