{"id":37173,"date":"2019-10-31T22:16:11","date_gmt":"2019-10-31T19:16:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/7-klyuchevyh-indikatorov-riska-active-directory-na-paneli-monitoringa-varonis\/"},"modified":"2019-10-31T22:16:11","modified_gmt":"2019-10-31T19:16:11","slug":"7-klyuchevyh-indikatorov-riska-active-directory-na-paneli-monitoringa-varonis","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/7-klyuchevyh-indikatorov-riska-active-directory-na-paneli-monitoringa-varonis","title":{"rendered":"7 tregues t\u00eb r\u00ebnd\u00ebsishme t\u00eb rrezikut t\u00eb Active Directory n\u00eb panelin e kontrollit t\u00eb Varonis","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"7
\n
\n\u00c7do gj\u00eb q\u00eb i nevojitet nj\u00eb sulmuesi \u00ebsht\u00eb koha dhe motivimi p\u00ebr t\u00eb dep\u00ebrtuar n\u00eb rrjetin tuaj. Por detyra jon\u00eb \u00ebsht\u00eb ta pengojm\u00eb at\u00eb ose, s\u00eb paku, ta v\u00ebshtir\u00ebsojm\u00eb k\u00ebt\u00eb proces sa m\u00eb shum\u00eb q\u00eb t\u00eb jet\u00eb e mundur. Duhet t\u00eb fillojm\u00eb me identifikimin e dob\u00ebsive n\u00eb Active Directory (n\u00eb vazhdim \u2013 AD) q\u00eb sulmuesi mund t'i shfryt\u00ebzoj\u00eb p\u00ebr t\u00eb fituar qasje dhe p\u00ebr t\u00eb l\u00ebvizur n\u00eb rrjet, duke mbetur i paditur. Sot do t\u00eb shqyrtojm\u00eb indikator\u00ebt e rrezikut q\u00eb reflektojn\u00eb vulnerabilitetet n\u00eb sigurin\u00eb kibernetike t\u00eb organizat\u00ebs tuaj, duke p\u00ebrdorur panelin e monitorimit AD Varonis si shembull.
\n<\/a><\/noindex><\/p>\n

Sulmuesit p\u00ebrdorin konfigurime t\u00eb ve\u00e7anta n\u00eb domen.<\/h2>\n

\nSulmuesit p\u00ebrdorin shum\u00eb truke t\u00eb men\u00e7ura dhe vulnerabilitete p\u00ebr t\u00eb dep\u00ebrtuar n\u00eb rrjetin korporativ dhe p\u00ebr t\u00eb rritur privilegjet. Disa nga k\u00ebto vulnerabilitete jan\u00eb parametra konfigurimi t\u00eb domenit, q\u00eb mund t\u00eb ndryshohen leht\u00ebsisht pasi t\u00eb identifikohen.<\/p>\n

Paneli i monitorimit AD do t'ju njoftoj\u00eb menj\u00ebher\u00eb n\u00ebse ju (ose administrator\u00ebt tuaj t\u00eb sistemit) nuk keni ndryshuar fjal\u00ebkalimin KRBTGT n\u00eb muajin e kaluar, ose n\u00ebse dikush \u00ebsht\u00eb autentifikuar me llogarin\u00eb e administratorit t\u00eb integruar n\u00eb m\u00ebnyr\u00eb t\u00eb paracaktuar (Administrator). K\u00ebto dy llogari ofrojn\u00eb qasje t\u00eb pakufizuar n\u00eb rrjetin tuaj: sulmuesit do t\u00eb p\u00ebrpiqen t\u00eb fitojn\u00eb qasje n\u00eb to p\u00ebr t\u00eb kaluar pa pengesa \u00e7do kufizim n\u00eb privilegje dhe leje. Dhe, si rezultat, t\u00eb fitojn\u00eb qasje n\u00eb \u00e7do t\u00eb dh\u00ebn\u00eb q\u00eb i intereson.<\/p>\n

Sigurisht, ju mund t\u00eb zbuloni k\u00ebto vulnerabilitete vet\u00eb: p\u00ebr shembull, t\u00eb vendosni nj\u00eb kujtes\u00eb n\u00eb kalendar p\u00ebr t\u00eb kontrolluar apo t\u00eb nisni nj\u00eb skenar PowerShell p\u00ebr t\u00eb grumbulluar k\u00ebt\u00eb informacion. <\/p>\n

Paneli i monitorimit Varonis p\u00ebrdit\u00ebsohet automatikisht <\/strong>, p\u00ebr t\u00eb siguruar nj\u00eb shikim t\u00eb shpejt\u00eb dhe analiz\u00eb t\u00eb treguesve kryesor\u00eb q\u00eb theksojn\u00eb vulnerabilitetet potenciale, q\u00eb t\u00eb mund t\u00eb merrni masa t\u00eb menj\u00ebhershme p\u00ebr t'i eliminuar ato.<\/p>\n

3 indikator\u00eb kryesor\u00eb rreziku n\u00eb nivelin e domenit<\/h3>\n

\nM\u00eb posht\u00eb \u00ebsht\u00eb nj\u00eb s\u00ebr\u00eb widget-esh q\u00eb jan\u00eb t\u00eb disponueshme n\u00eb panelin e monitorimit Varonis, p\u00ebrdorimi i t\u00eb cilave do t\u00eb forcoj\u00eb ndjesh\u00ebm mbrojtjen e rrjetit korporativ dhe infrastruktur\u00ebs IT n\u00eb p\u00ebrgjith\u00ebsi.<\/p>\n

1. Numri i domen\u00ebve p\u00ebr t\u00eb cil\u00ebt fjal\u00ebkalimi i llogaris\u00eb Kerberos nuk \u00ebsht\u00eb ndryshuar p\u00ebr nj\u00eb koh\u00eb t\u00eb konsiderueshme <\/strong><\/p>\n

Llogaria KRBTGT \u00ebsht\u00eb nj\u00eb llogari speciale n\u00eb AD, q\u00eb n\u00ebnshkruan t\u00eb gjitha Kerberos-tiketat <\/a><\/noindex>. Haker\u00ebt q\u00eb kan\u00eb qasje n\u00eb kontrollorin e domainit (DC) mund ta p\u00ebrdorin k\u00ebt\u00eb llogari p\u00ebr t\u00eb krijuar Bilet\u00ebn e Art\u00eb<\/a><\/noindex>, e cila do t'i jap\u00eb atyre qasje t\u00eb pakufizuar n\u00eb praktikisht \u00e7do sistem n\u00eb rrjetin korporativ. Kemi hasur n\u00eb situata kur, pas marrjes me sukses t\u00eb Bilet\u00ebs s\u00eb Art\u00eb, hakeri kishte qasje n\u00eb rrjetin e organizat\u00ebs p\u00ebr dy vjet. N\u00ebse fjal\u00ebkalimi i llogaris\u00eb KRBTGT n\u00eb kompanin\u00eb tuaj nuk \u00ebsht\u00eb nd\u00ebrruar n\u00eb 40 dit\u00ebt e fundit, widgeti do t\u2019ju njoftoj\u00eb p\u00ebr k\u00ebt\u00eb. <\/p>\n

Kryesimi i 40 dit\u00ebve \u00ebsht\u00eb m\u00eb se i mjaftuesh\u00ebm p\u00ebr nj\u00eb haker q\u00eb t\u00eb fitoj\u00eb qasje n\u00eb rrjet. Megjithat\u00eb, n\u00ebse siguroheni dhe standardizoni procesin e ndryshimit t\u00eb k\u00ebtij fjal\u00ebkalimi n\u00eb baza t\u00eb rregullta, kjo do ta v\u00ebshtir\u00ebsoj\u00eb ndjesh\u00ebm p\u00ebr hakerin procesin e hyrjes n\u00eb rrjetin korporativ. <\/p>\n

\"7
\nMos harroni se, sipas implementimit t\u00eb protokollit Kerberos nga Microsoft, ju nevojitet t\u00eb ndryshoni fjal\u00ebkalimin dy her\u00eb<\/a><\/noindex> KRBTGT.<\/p>\n

M\u00eb tej, ky widget AD do t'ju kujtoj\u00eb kur \u00ebsht\u00eb koha p\u00ebr t\u00eb ndryshuar p\u00ebrs\u00ebri fjal\u00ebkalimin KRBTGT p\u00ebr t\u00eb gjitha domaining n\u00eb rrjetin tuaj.<\/p>\n

2. Numri i domain-eve ku \u00ebsht\u00eb p\u00ebrdorur s\u00eb fundmi llogaria e integruar e administratorit (Administrator) <\/strong><\/p>\n

Sipas principi i privilegjeve t\u00eb kufizuara <\/a><\/noindex> \u2014 administratoret e sistemit disponojn\u00eb dy llogari: e para \u00ebsht\u00eb llogaria p\u00ebr p\u00ebrdorim t\u00eb p\u00ebrditsh\u00ebm, nd\u00ebrsa e dyta \u00ebsht\u00eb p\u00ebr pun\u00eb administrative t\u00eb planifikuara. Kjo do t\u00eb thot\u00eb se askush nuk duhet t\u00eb p\u00ebrdor\u00eb llogarin\u00eb e administratorit si parazgjedhje. <\/p>\n

Llogaria e integruar e administratorit shpesh p\u00ebrdoret p\u00ebr t\u00eb thjeshtuar procesin e administrat\u00ebs s\u00eb sistemit. Kjo mund t\u00eb b\u00ebhet nj\u00eb zakon i keq, rezultat i t\u00eb cilit do t\u00eb jet\u00eb thyerja e siguris\u00eb. N\u00ebse n\u00eb organizat\u00ebn tuaj kjo ndodh, do t'ju jet\u00eb e v\u00ebshtir\u00eb t\u00eb dalloni p\u00ebrdorimin e sakt\u00eb t\u00eb k\u00ebsaj llogarie nga qasja potencialisht keqdash\u00ebse.<\/p>\n

\"7
\nN\u00ebse widgeti tregon ndonj\u00eb gj\u00eb q\u00eb \u00ebsht\u00eb ndryshe nga zero, kjo do t\u00eb thot\u00eb se dikush po punon n\u00eb m\u00ebnyr\u00eb t\u00eb pasakt\u00eb me llogarit\u00eb administrative. N\u00eb k\u00ebt\u00eb rast, duhet t\u00eb merren masa p\u00ebr t\u00eb korrigjuar dhe kufizuar qasjen n\u00eb llogarin\u00eb e integruar t\u00eb administratorit.
\nPasi keni arritur vler\u00ebn zero t\u00eb widget-it dhe administrator\u00ebt e sistemit nuk e p\u00ebrdorin m\u00eb k\u00ebt\u00eb llogari p\u00ebr pun\u00ebn e tyre, \u00e7do ndryshim i m\u00ebvonsh\u00ebm do t\u00eb tregoj\u00eb p\u00ebr nj\u00eb sulm t\u00eb mundsh\u00ebm kibernetik.<\/p>\n

3. Numri i domain-eve ku grupi i P\u00ebrdoruesve t\u00eb Mbrojtur (Protected Users) mungon <\/strong><\/p>\n

Versionet e vjetra t\u00eb AD mb\u00ebshtesnin nj\u00eb tip t\u00eb dob\u00ebt t\u00eb enkriptimit \u2014 RC4. Haker\u00ebt e kan\u00eb thyer RC4 shum\u00eb vite m\u00eb par\u00eb dhe tani p\u00ebr nj\u00eb sulmues, t\u00eb thyej\u00eb nj\u00eb llogari q\u00eb ende p\u00ebrdor RC4, \u00ebsht\u00eb nj\u00eb detyr\u00eb mjaft e thjesht\u00eb. N\u00eb versionin e Active Directory q\u00eb u prezantua n\u00eb Windows Server 2012, u krijua nj\u00eb grup i ri p\u00ebrdoruesish t\u00eb quajtur Grupi i P\u00ebrdoruesve t\u00eb Mbrojtur (Protected Users). Ky grup ofron mjete shtes\u00eb mbrojtjeje dhe parandalon autentikimin e p\u00ebrdoruesve q\u00eb p\u00ebrdorin enkriptimin RC4.<\/p>\n

Ky widget do t\u00eb demonstroj\u00eb n\u00ebse n\u00eb ndonj\u00eb domain t\u00eb organizat\u00ebs mungon nj\u00eb grup i till\u00eb, n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb mund ta rregulloni k\u00ebt\u00eb, dmth. t\u00eb aktivizoni grupin e p\u00ebrdoruesve t\u00eb mbrojtur dhe ta p\u00ebrdorni at\u00eb p\u00ebr t\u00eb mbrojtur infrastruktur\u00ebn.<\/p>\n

\"7<\/p>\n

Q\u00ebllime t\u00eb lehta p\u00ebr sulmuesit<\/h2>\n

\nLlogarit\u00eb e p\u00ebrdoruesve jan\u00eb q\u00ebllimi num\u00ebr nj\u00eb p\u00ebr sulmuesit \u2013 nga p\u00ebrpjekjet e para p\u00ebr t\u00eb dep\u00ebrtuar deri te eskalimi i vazhduesh\u00ebm t\u00eb privilegjeve dhe fshehja e aktiviteteve t\u00eb tyre. Sulmuesit k\u00ebrkojn\u00eb q\u00ebllime t\u00eb lehta n\u00eb rrjetin tuaj, duke p\u00ebrdorur komanda bazike PowerShell, t\u00eb cilat shpesh jan\u00eb t\u00eb v\u00ebshtira p\u00ebr t'u zbuluar. Hiqni nga AD sa m\u00eb shum\u00eb nga k\u00ebto q\u00ebllime t\u00eb lehta.<\/p>\n

Sulmuesit k\u00ebrkojn\u00eb p\u00ebrdorues q\u00eb kan\u00eb paswords pa afat (ose q\u00eb nuk k\u00ebrkojn\u00eb passwords), llogari teknologjike q\u00eb jan\u00eb administrator\u00eb, dhe llogari q\u00eb p\u00ebrdorin enkriptim t\u00eb vjet\u00ebr RC4. <\/p>\n

Cila nga k\u00ebto llogari \u00ebsht\u00eb e leht\u00eb p\u00ebr t'u aksesuar ose, si rregull, nuk \u00ebsht\u00eb n\u00ebn mbik\u00ebqyrje. Sulmuesit mund t\u00eb kapin k\u00ebto llogari dhe t\u00eb l\u00ebvizin pa pengesa brenda infrastruktur\u00ebs tuaj.<\/p>\n

Sa her\u00eb q\u00eb sulmuesit dep\u00ebrtojn\u00eb p\u00ebrmes perimetrin t\u00eb siguris\u00eb, ata ndoshta do t\u00eb fitojn\u00eb qasje t\u00eb pakt\u00ebn n\u00eb nj\u00eb llogari. A do t\u00eb jeni n\u00eb gjendje t'i pengoni ata q\u00eb t\u00eb ken\u00eb akses n\u00eb t\u00eb dh\u00ebna t\u00eb ndjeshme, p\u00ebrpara se t\u00eb zbuloni dhe eliminoj\u00eb sulmin?<\/p>\n

Panes\u00eb e monitorimit Varonis AD do t\u00eb tregoj\u00eb llogarit\u00eb e p\u00ebrdoruesve t\u00eb cenueshme, n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb mund t\u00eb adresoni problemet p\u00ebrpara se ato t\u00eb ndodhin. Sa m\u00eb e v\u00ebshtir\u00eb t\u00eb jet\u00eb q\u00eb t\u00eb dep\u00ebrtohet brenda rrjetit tuaj, aq m\u00eb shum\u00eb jan\u00eb mund\u00ebsit\u00eb tuaja p\u00ebr t\u00eb neutralizuar sulmuesin p\u00ebrpara se ai t\u00eb shkaktoj\u00eb d\u00ebme serioze.<\/p>\n

4 tregues ky\u00e7 t\u00eb rrezikut p\u00ebr llogarit\u00eb e p\u00ebrdoruesve<\/h3>\n

\nM\u00eb posht\u00eb jan\u00eb disa shembuj t\u00eb widget-eve n\u00eb panelin e monitorimit Varonis AD q\u00eb tregojn\u00eb llogarit\u00eb m\u00eb t\u00eb cenueshme t\u00eb p\u00ebrdoruesve.<\/p>\n

1. Numri i p\u00ebrdoruesve aktiv\u00eb me fjal\u00ebkalime t\u00eb cilat nuk skadojn\u00eb kurr\u00eb <\/strong><\/p>\n

P\u00ebr \u00e7do sulmues, t\u00eb sigurohet aksesi n\u00eb nj\u00eb llogari t\u00eb till\u00eb \u00ebsht\u00eb gjithmon\u00eb nj\u00eb fitore e madhe. Duke qen\u00eb se fjal\u00ebkalimi nuk skadon kurr\u00eb, sulmuesi ka nj\u00eb pik\u00eb mb\u00ebshtetjeje permanente brenda rrjetit q\u00eb m\u00eb pas mund t\u00eb p\u00ebrdoret p\u00ebr rritjen e privilegjeve <\/a><\/noindex>apo l\u00ebvizjen brenda infrastruktur\u00ebs.
\nSulmuesit kan\u00eb lista me miliona kombinime \"p\u00ebrdorues-fjal\u00ebkalim\" q\u00eb p\u00ebrdorin n\u00eb sulmet e futjes s\u00eb t\u00eb dh\u00ebnave, dhe probabiliteti q\u00eb
\nkombinimi p\u00ebr nj\u00eb p\u00ebrdorues me \"fjal\u00ebkalim t\u00eb p\u00ebrjetsh\u00ebm\" t\u00eb jet\u00eb n\u00eb nj\u00ebr\u00ebn nga k\u00ebto lista \u00ebsht\u00eb shum\u00eb m\u00eb tep\u00ebr se zero.<\/p>\n

Llogarit\u00eb me fjal\u00ebkalime t\u00eb p\u00ebrjetshme jan\u00eb t\u00eb lehta p\u00ebr t'u menaxhuar, por ato nuk jan\u00eb t\u00eb sigurta. P\u00ebrdorni k\u00ebt\u00eb widget p\u00ebr t\u00eb gjetur t\u00eb gjitha llogarit\u00eb q\u00eb kan\u00eb k\u00ebto fjal\u00ebkalime. Ndryshoni k\u00ebt\u00eb paramet\u00ebr dhe p\u00ebrdit\u00ebsoni fjal\u00ebkalimin.<\/p>\n

\"7
\nSa m\u00eb shpejt q\u00eb vlera e k\u00ebtij widget-i t\u00eb arrij\u00eb zero, \u00e7do llogari e re e krijuar me nj\u00eb fjal\u00ebkalim t\u00eb till\u00eb do t\u00eb shfaqet n\u00eb panelin e monitorimit.<\/p>\n

2. Numri i llogarive administrative me SPN <\/strong><\/p>\n

SPN (Emri i Parincialit t\u00eb Sh\u00ebrbimit) \u00ebsht\u00eb nj\u00eb identifikues unik p\u00ebr nj\u00eb instanc\u00eb sh\u00ebrbimi. Ky widget tregon se sa llogari sh\u00ebrbimi kan\u00eb t\u00eb drejta t\u00eb plota administrative. Vlera n\u00eb widget duhet t\u00eb jet\u00eb zero. SPN-t\u00eb me t\u00eb drejta administrative ndodhin, pasi dh\u00ebnia e k\u00ebtyre t\u00eb drejtave i leht\u00ebson ofruesit e softuerit dhe administrator\u00ebt e aplikacioneve, por kjo paraqet nj\u00eb k\u00ebrc\u00ebnim p\u00ebr sigurin\u00eb.<\/p>\n

Oferimi i nj\u00eb llogarie sh\u00ebrbimi me t\u00eb drejta administratori lejon nj\u00eb sulmues t\u00eb marr\u00eb qasje t\u00eb plot\u00eb n\u00eb nj\u00eb llogari q\u00eb nuk \u00ebsht\u00eb e p\u00ebrdorur. Kjo do t\u00eb thot\u00eb se sulmuesit me qasje n\u00eb llogarit\u00eb SPN mund t\u00eb veprojn\u00eb lirsh\u00ebm brenda infrastruktur\u00ebs nd\u00ebrsa evitojn\u00eb monitorimin e veprimeve t\u00eb tyre. <\/p>\n

P\u00ebr t\u00eb zgjidhur k\u00ebt\u00eb problem, duhet t\u00eb ndryshoni lejet p\u00ebr llogarit\u00eb sh\u00ebrbimi. K\u00ebto llogari duhet t\u00eb respektojn\u00eb parimin e privilegjeve minimale dhe t\u00eb ken\u00eb vet\u00ebm at\u00eb qasje q\u00eb \u00ebsht\u00eb e nevojshme p\u00ebr funksionimin e tyre.<\/p>\n

\"7
\nMe k\u00ebt\u00eb widget do t\u00eb jeni n\u00eb gjendje t\u00eb zbuloni t\u00eb gjitha SPN-t\u00eb q\u00eb kan\u00eb t\u00eb drejta administrator, t\u00eb hiqni k\u00ebto privilegje dhe m\u00eb pas t\u00eb monitoroni SPN-t\u00eb n\u00eb p\u00ebrputhje me t\u00eb nj\u00ebjtin princip t\u00eb qasjes me privilegje minimale.<\/p>\n

SPN-t\u00eb e reja do t\u00eb shfaqen n\u00eb panelin e monitorimit dhe do t\u00eb jeni n\u00eb gjendje ta kontrolloni k\u00ebt\u00eb proces.<\/p>\n

3. Numri i p\u00ebrdoruesve q\u00eb nuk k\u00ebrkojn\u00eb verifikim paraprak t\u00eb Kerberosit <\/strong><\/p>\n

Idealisht, Kerberos kodon ticket-un e verifikimit me metode t\u00eb kodimit AES-256, e cila mbetet e pacenuar deri tani.<\/p>\n

Megjithat\u00eb, versionet m\u00eb t\u00eb vjetra t\u00eb Kerberos p\u00ebrdor\u00ebn kodimin RC4, i cili tani mund t\u00eb thyehet brenda disa minutash. Ky widget tregon cilat llogari p\u00ebrdoruesish ende p\u00ebrdorin RC4. Microsoft vazhdon t\u00eb mb\u00ebshtes\u00eb RC4 p\u00ebr kompatibilitet prapa, por kjo nuk do t\u00eb thot\u00eb se duhet ta p\u00ebrdorni at\u00eb n\u00eb AD-n\u00eb tuaj.<\/p>\n

\"7
\nPasi t\u00eb keni zbuluar k\u00ebto llogari, duhet t\u00eb hiqni shenj\u00ebn \"nuk k\u00ebrkohet autorizimi paraprak i Kerberosit\" n\u00eb AD, n\u00eb m\u00ebnyr\u00eb q\u00eb llogarit\u00eb t\u00eb p\u00ebrdorin nj\u00eb kodim m\u00eb t\u00eb avancuar.<\/p>\n

Zbulimi i k\u00ebtyre llogarive vet\u00eb, pa panelin e monitorimit Varonis AD, merr shum\u00eb koh\u00eb. N\u00eb realitet, t\u00eb jesh n\u00eb dijeni n\u00eb koh\u00eb p\u00ebr t\u00eb gjitha llogarit\u00eb q\u00eb jan\u00eb redaktuar p\u00ebr t\u00eb p\u00ebrdorur kodimin RC4 \u00ebsht\u00eb nj\u00eb detyr\u00eb edhe m\u00eb e v\u00ebshtir\u00eb.<\/p>\n

N\u00ebse vlera n\u00eb widget ndryshon, kjo mund t\u00eb d\u00ebshmoj\u00eb p\u00ebr veprime t\u00eb paligjshme.<\/p>\n

4. Numri i p\u00ebrdoruesve pa fjal\u00ebkalim <\/strong><\/p>\n

Sulmuesit p\u00ebrdorin komandat baze t\u00eb PowerShell p\u00ebr t\u00eb lexuar nga AD flamurin \u00abPASSWD_NOTREQD\u00bb, n\u00eb pronat e llogaris\u00eb. P\u00ebrdorimi i k\u00ebtij flamuros do t\u00eb thot\u00eb se nuk ka k\u00ebrkesa p\u00ebr pranin\u00eb ose kompleksitetin e fjal\u00ebkalimit.
\nSa e leht\u00eb \u00ebsht\u00eb t\u00eb vjedh\u00ebsh nj\u00eb llogari me nj\u00eb fjal\u00ebkalim t\u00eb thjesht\u00eb apo bosh? Tani imagjinoni se nj\u00eb nga k\u00ebto llogari \u00ebsht\u00eb administrator.<\/p>\n

\"7
\n\u00c7far\u00eb ndodh n\u00ebse nj\u00eb nga mij\u00ebra skedar\u00ebve t\u00eb ndjesh\u00ebm, t\u00eb hapur p\u00ebr t\u00eb gjith\u00eb, \u00ebsht\u00eb nj\u00eb raport financiar i ardhsh\u00ebm? <\/p>\n

Injorimi i k\u00ebrkes\u00ebs obligative p\u00ebr futjen e fjal\u00ebkalimit \u00ebsht\u00eb nj\u00eb tjet\u00ebr skurtore p\u00ebr administrimin e sistemeve, e cila shpesh \u00ebsht\u00eb p\u00ebrdorur n\u00eb t\u00eb kaluar\u00ebn, por sot \u00ebsht\u00eb e papranueshme dhe e pasigurt.<\/p>\n

Zgjidhni k\u00ebt\u00eb problem duke p\u00ebrdit\u00ebsuar fjal\u00ebkalimet p\u00ebr llogarit\u00eb e tilla.<\/p>\n

Monitorimi i k\u00ebtij widget-i n\u00eb t\u00eb ardhmen do t'ju ndihmoj\u00eb t\u00eb evitoni krijimin e llogarive pa fjal\u00ebkalim.<\/p>\n

Varonis e barazon shansin<\/h2>\n

\nN\u00eb t\u00eb kaluar\u00ebn, puna p\u00ebr mbledhjen dhe analizimin e metrikeve t\u00eb p\u00ebrmendura n\u00eb artikull merrte shum\u00eb or\u00eb dhe k\u00ebrkonte njohuri t\u00eb thella t\u00eb PowerShell: specialist\u00ebt e siguris\u00eb duheshin t\u00eb ndaj\u00eb burime p\u00ebr k\u00ebto detyra \u00e7do jav\u00eb ose muaj. Por mbledhja dhe p\u00ebrpunimi manual i k\u00ebsaj informacioni, jep sulmuesve nj\u00eb mund\u00ebsi p\u00ebr t\u00eb dep\u00ebrtuar dhe vjedhur t\u00eb dh\u00ebna.<\/p>\n

D Varonis <\/a><\/noindex>do t\u00eb kaloni nj\u00eb dit\u00eb p\u00ebr t\u00eb instaluar panelin e monitorimit AD dhe komponent\u00ebt shtes\u00eb, p\u00ebr t\u00eb mbledhur t\u00eb gjitha dob\u00ebsit\u00eb e shqyrtuara dhe shum\u00eb t\u00eb tjera. N\u00eb t\u00eb ardhmen, gjat\u00eb p\u00ebrdorimit, paneli i monitorimit do t\u00eb p\u00ebrdit\u00ebsohet automatikisht, p\u00ebr sa koh\u00eb q\u00eb gjendja e infrastruktur\u00ebs ndryshon.<\/p>\n

Kryerja e sulmeve kibernetike \u00ebsht\u00eb gjithmon\u00eb nj\u00eb gar\u00eb midis sulmuesve dhe mbrojt\u00ebsve, nj\u00eb p\u00ebrpjekje e sulmuesit p\u00ebr t\u00eb vjedhur t\u00eb dh\u00ebna p\u00ebrpara se specialist\u00ebt e siguris\u00eb t\u00eb mund t\u00eb mbyllin qasjen n\u00eb to. Zbulimi i hersh\u00ebm i sulmuesve dhe veprimeve t\u00eb tyre t\u00eb paligjshme, s\u00eb bashku me mbrojtjen e fort\u00eb kibernetike, \u00ebsht\u00eb \u00e7el\u00ebsi p\u00ebr t\u00eb siguruar t\u00eb dh\u00ebnat tuaja.
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u0441\u0435, \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u2013 \u044d\u0442\u043e \u0432\u0440\u0435\u043c\u044f \u0438 \u043c\u043e\u0442\u0438\u0432\u0430\u0446\u0438\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0432\u0430\u0448\u0443 \u0441\u0435\u0442\u044c. \u041d\u043e \u043d\u0430\u0448\u0430 \u0441 \u0432\u0430\u043c\u0438 \u0440\u0430\u0431\u043e\u0442\u0430 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0434\u0430\u0442\u044c \u0435\u043c\u0443 \u044d\u0442\u043e\u0433\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0438\u043b\u0438, \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435, \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u0438\u0442\u044c \u044d\u0442\u0443 \u0437\u0430\u0434\u0430\u0447\u0443. \u041d\u0443\u0436\u043d\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0441\u043b\u0430\u0431\u044b\u0445 \u043c\u0435\u0441\u0442 \u0432 Active Directory (\u0434\u0430\u043b\u0435\u0435 \u2013 AD), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27872,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-37173","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd477 tregues ky\u00e7 t\u00eb rrezikut t\u00eb Active Directory n\u00eb panelin e monitorimit Varonis | ProHoster","description":"E gjith\u00eb ajo q\u00eb ju nevojitet.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/7-klyuchevyh-indikatorov-riska-active-directory-na-paneli-monitoringa-varonis","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd477 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u0440\u0438\u0441\u043a\u0430 Active Directory \u043d\u0430 \u043f\u0430\u043d\u0435\u043b\u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 Varonis | ProHoster","og:description":"\u0412\u0441\u0435, \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/7-klyuchevyh-indikatorov-riska-active-directory-na-paneli-monitoringa-varonis","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:16:11+00:00","article:modified_time":"2019-10-31T19:16:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37173","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 06:24:26","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:46:18","updated":"2026-01-22 06:24:26","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37173","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=37173"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37173\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/27872"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=37173"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=37173"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=37173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}