{"id":37173,"date":"2019-10-31T22:16:11","date_gmt":"2019-10-31T19:16:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/7-klyuchevyh-indikatorov-riska-active-directory-na-paneli-monitoringa-varonis\/"},"modified":"2019-10-31T22:16:11","modified_gmt":"2019-10-31T19:16:11","slug":"7-klyuchevyh-indikatorov-riska-active-directory-na-paneli-monitoringa-varonis","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/7-klyuchevyh-indikatorov-riska-active-directory-na-paneli-monitoringa-varonis","title":{"rendered":"7 indikator\u00ebt kryesor\u00eb t\u00eb rrezikut Active Directory n\u00eb panelin e monitorimit Varonis","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"7
\n
\n\u00c7do gj\u00eb q\u00eb i nevojitet nj\u00eb sulmuesi \u00ebsht\u00eb koha dhe motivimi p\u00ebr t\u00eb hyr\u00eb n\u00eb rrjetin tuaj. Por detyra jon\u00eb \u00ebsht\u00eb t\u00eb mos e lejojm\u00eb at\u00eb ta b\u00ebj\u00eb k\u00ebt\u00eb ose, t\u00eb pakt\u00ebn, ta v\u00ebshtir\u00ebsojm\u00eb sa m\u00eb shum\u00eb q\u00eb t\u00eb jet\u00eb e mundur. Duhet t\u00eb fillojm\u00eb me identifikimin e pikave t\u00eb dob\u00ebta n\u00eb Active Directory (m\u00eb posht\u00eb \u2013 AD), t\u00eb cilat nj\u00eb sulmues mund t\u00eb p\u00ebrdor\u00eb p\u00ebr t\u00eb fituar akses dhe p\u00ebr t\u00eb l\u00ebvizur p\u00ebrmes rrjetit pa u v\u00ebn\u00eb re. Sot n\u00eb k\u00ebt\u00eb artikull do t\u00eb shqyrtojm\u00eb indikator\u00ebt e rrezikut q\u00eb pasqyrojn\u00eb dob\u00ebsit\u00eb ekzistuese n\u00eb kibernetik\u00ebn e organizat\u00ebs suaj, duke marr\u00eb si shembull panelin e monitorimit AD Varonis.
\n<\/a><\/noindex><\/p>\n

Sulmuesit p\u00ebrdorin konfigurime t\u00eb caktuara n\u00eb domain<\/h2>\n

\nSulmuesit p\u00ebrdorin nj\u00eb shum\u00ebllojshm\u00ebri teknikash t\u00eb nd\u00ebrlikuara dhe dob\u00ebsish p\u00ebr t\u00eb hyr\u00eb brenda rrjetit korporativ dhe p\u00ebr t\u00eb rritur privilegjet. Disa nga k\u00ebto dob\u00ebsi jan\u00eb parametra konfigurimi t\u00eb domainit q\u00eb mund t\u00eb ndryshohen leht\u00ebsisht pas identifikimit t\u00eb tyre.<\/p>\n

P\u00ebrgjigjja e panelit t\u00eb monitorimit AD do t'ju njoftoj\u00eb menj\u00ebher\u00eb n\u00ebse ju (ose administrator\u00ebt tuaj t\u00eb sistemeve) nuk e kan\u00eb ndryshuar fjal\u00ebkalimin KRBTGT n\u00eb muajin e kaluar, ose n\u00ebse ndokush \u00ebsht\u00eb autentifikuar me llogarin\u00eb e integruar t\u00eb administratorit sipas parazgjedhjes (Administrator). K\u00ebto dy llogari ofrojn\u00eb qasje t\u00eb pakufizuar n\u00eb rrjetin tuaj: sulmuesit do t\u00eb p\u00ebrpiqen t\u00eb fitojn\u00eb qasje prej tyre p\u00ebr t\u00eb kaluar pa pengesa ndarjet e privilegjeve dhe lejes s\u00eb aksesit. Si pasoj\u00eb, ata do t\u00eb ken\u00eb qasje n\u00eb \u00e7do t\u00eb dh\u00ebn\u00eb q\u00eb i intereson.<\/p>\n

Sigurisht, ju mund t\u00eb zbulojn\u00eb k\u00ebto dob\u00ebsi vet\u00eb: p\u00ebr shembull, t\u00eb vendosni nj\u00eb kujtes\u00eb n\u00eb kalendar p\u00ebr ta kontrolluar ose t\u00eb ekzekutoni nj\u00eb skript PowerShell p\u00ebr t\u00eb mbledhur k\u00ebt\u00eb informacion. <\/p>\n

Paneli i monitorimit Varonis aktualizohet automatikisht <\/strong>, p\u00ebr t\u00eb ofruar nj\u00eb shikim t\u00eb shpejt\u00eb dhe analiz\u00eb t\u00eb parametrave kryesor\u00eb q\u00eb theksojn\u00eb dob\u00ebsit\u00eb potenciale, p\u00ebr t'ju lejuar t\u00eb nd\u00ebrmerrni masa t\u00eb menj\u00ebhershme p\u00ebr zgjidhjen e tyre.<\/p>\n

3 indikator\u00eb kryesor\u00eb rreziku n\u00eb nivel domain<\/h3>\n

\nM\u00eb posht\u00eb jan\u00eb disa widget-e t\u00eb disponuesh\u00ebm n\u00eb panelin e monitorimit Varonis, p\u00ebrdorimi i t\u00eb cil\u00ebve do t\u00eb forcoj\u00eb ndjesh\u00ebm mbrojtjen e rrjetit korporativ dhe infrastruktur\u00ebs IT n\u00eb t\u00ebr\u00ebsi.<\/p>\n

1. Numri i domain-eve p\u00ebr t\u00eb cilat fjal\u00ebkalimi i llogaris\u00eb Kerberos nuk \u00ebsht\u00eb ndryshuar p\u00ebr nj\u00eb koh\u00eb t\u00eb konsiderueshme <\/strong><\/p>\n

Llogaria KRBTGT \u00ebsht\u00eb nj\u00eb llogari e ve\u00e7ant\u00eb n\u00eb AD, q\u00eb n\u00ebnshkruan t\u00eb gjitha Kerberos-tickets <\/a><\/noindex>. Sulmuesit q\u00eb kan\u00eb akses n\u00eb kontrolluesin e domainit (DC) mund ta p\u00ebrdorin k\u00ebt\u00eb llogari p\u00ebr t\u00eb krijuar Golden ticket<\/a><\/noindex>, e cila do t'u jap\u00eb atyre qasje t\u00eb pakufizuar n\u00eb pothuajse \u00e7do sistem n\u00eb rrjetin korporativ. Kemi p\u00ebrjetuar situata ku pas marrjes s\u00eb suksesshme t\u00eb Golden Ticket, nj\u00eb sulmues kishte akses n\u00eb rrjetin e organizat\u00ebs p\u00ebr dy vjet. N\u00ebse fjal\u00ebkalimi i llogaris\u00eb KRBTGT n\u00eb kompanin\u00eb tuaj nuk \u00ebsht\u00eb ndryshuar p\u00ebr 40 dit\u00ebt e fundit, widget-i do t'ju paralajm\u00ebroj\u00eb p\u00ebr k\u00ebt\u00eb. <\/p>\n

Katror\u00eb dit\u00eb jan\u00eb m\u00eb shum\u00eb se nj\u00eb periudh\u00eb e mjaftueshme p\u00ebr nj\u00eb sulmues p\u00ebr t\u00eb fituar akses n\u00eb rrjet. Megjithat\u00eb, n\u00ebse siguroheni dhe standardizoni procesin e ndryshimit t\u00eb k\u00ebtij fjal\u00ebkalimi me rregullshm\u00ebri, do ta b\u00ebni shum\u00eb m\u00eb t\u00eb v\u00ebshtir\u00eb p\u00ebr sulmuesin t\u00eb hyj\u00eb n\u00eb rrjetin korporativ. <\/p>\n

\"7
\nKujtoni se, n\u00eb p\u00ebrputhje me implementimin e protokollit Kerberos nga Microsoft, \u00ebsht\u00eb e nevojshme t\u00eb ndryshoni fjal\u00ebkalimin dy her\u00eb<\/a><\/noindex> KRBTGT.<\/p>\n

N\u00eb vazhdim, ky widget i AD do t'ju kujtoj\u00eb kur t\u00eb vij\u00eb koha p\u00ebr t\u00eb ndryshuar p\u00ebrs\u00ebri fjal\u00ebkalimin KRBTGT p\u00ebr t\u00eb gjitha domainet n\u00eb rrjetin tuaj.<\/p>\n

2. Numri i domain-eve n\u00eb t\u00eb cilat llogaria e integruar e administratorit (Administrator) \u00ebsht\u00eb p\u00ebrdorur s\u00eb fundmi <\/strong><\/p>\n

Sipas parimi i privilegjeve minimale <\/a><\/noindex> \u2014 administrator\u00ebve t\u00eb sistemeve u jepen dy llogari: e para \u00ebsht\u00eb llogaria p\u00ebr p\u00ebrdorim t\u00eb p\u00ebrditsh\u00ebm, kurse e dyta p\u00ebr pun\u00eb administrative t\u00eb planifikuara. Kjo do t\u00eb thot\u00eb se askush nuk duhet ta p\u00ebrdor\u00eb llogarin\u00eb e administratorit sipas parazgjedhjes. <\/p>\n

Llogaria e integruar e administratorit shpesh p\u00ebrdoret p\u00ebr t\u00eb leht\u00ebsuar procesin e administrat\u00ebs s\u00eb sistemit. Kjo mund t\u00eb b\u00ebhet nj\u00eb zakon i keq, i cili do t\u00eb rezultoj\u00eb n\u00eb nj\u00eb thyerje. N\u00ebse n\u00eb organizat\u00ebn tuaj kjo ndodh, do t'ju jet\u00eb e v\u00ebshtir\u00eb t\u00eb ndryshoni p\u00ebrdorimin t\u00eb duhur t\u00eb k\u00ebsaj llogarie nga akseset potencialisht t\u00eb d\u00ebmshme.<\/p>\n

\"7
\nN\u00ebse widget-i tregon di\u00e7ka q\u00eb ndan zero, do t\u00eb thot\u00eb se dikush po punon n\u00eb m\u00ebnyr\u00eb t\u00eb pap\u00ebrshtatshme me llogarit\u00eb administrative. N\u00eb k\u00ebt\u00eb rast, duhet t\u00eb nd\u00ebrmerrni masa p\u00ebr t\u00eb korrigjuar dhe kufizuar aksesin n\u00eb llogarin\u00eb e integruar t\u00eb administratorit.
\nPasi t\u00eb keni arritur nj\u00eb vler\u00eb zero n\u00eb widget dhe administrator\u00ebt e sistemeve nuk e p\u00ebrdorin m\u00eb k\u00ebt\u00eb llogari p\u00ebr pun\u00ebn e tyre, \u00e7do ndryshim n\u00eb t\u00eb m\u00eb von\u00eb do t\u00eb tregoj\u00eb p\u00ebr nj\u00eb sulm kibernetik potencial.<\/p>\n

3. Numri i domen\u00ebve ku grupi i P\u00ebrdoruesve t\u00eb Mbrojtur (Protected Users) mungon <\/strong><\/p>\n

Versionet e vjetra t\u00eb AD mb\u00ebshtesnin nj\u00eb tip t\u00eb dob\u00ebt enkriptimi \u2014 RC4. Hackerat e kan\u00eb thyer RC4 shum\u00eb vite m\u00eb par\u00eb, dhe tani p\u00ebr nj\u00eb keqb\u00ebr\u00ebsi, thyerja e nj\u00eb llogarie q\u00eb akoma p\u00ebrdor RC4 \u00ebsht\u00eb nj\u00eb detyr\u00eb mjaft triviale. N\u00eb versionin e Active Directory, t\u00eb prezantuar n\u00eb Windows Server 2012, u krijua nj\u00eb grup i ri p\u00ebrdoruesish i quajtur Grupi i P\u00ebrdoruesve t\u00eb Mbrojtur (Protected Users). Ai ofron mjete shtes\u00eb mbrojtjeje dhe parandalon autentifikimin e p\u00ebrdoruesve q\u00eb p\u00ebrdorin enkriptimin RC4.<\/p>\n

Ky widget do t\u00eb tregoj\u00eb n\u00ebse ndonj\u00eb domen i organizat\u00ebs tuaj mungon nj\u00eb grup i till\u00eb, n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb mund ta riparoni k\u00ebt\u00eb, pra t\u00eb aktivizoni grupin e p\u00ebrdoruesve t\u00eb mbrojtur dhe ta p\u00ebrdorni at\u00eb p\u00ebr t\u00eb mbrojtur infrastruktur\u00ebn.<\/p>\n

\"7<\/p>\n

Q\u00ebllime t\u00eb lehta p\u00ebr sulmuesit<\/h2>\n

\nLlogarit\u00eb e p\u00ebrdoruesve jan\u00eb q\u00ebllimi num\u00ebr nj\u00eb p\u00ebr keqb\u00ebr\u00ebsit \u2013 nga p\u00ebrpjekjet e para t\u00eb dep\u00ebrtimit deri n\u00eb vazhdimin e rritjes s\u00eb privilegjeve dhe fshehjes s\u00eb veprimeve t\u00eb tyre. Keqb\u00ebr\u00ebsit k\u00ebrkojn\u00eb q\u00ebllime t\u00eb lehta n\u00eb rrjetin tuaj, duke p\u00ebrdorur komandat baz\u00eb PowerShell, t\u00eb cilat shpesh jan\u00eb t\u00eb v\u00ebshtira p\u00ebr t'u zbuluar. Hiqni sa m\u00eb shum\u00eb t\u00eb till\u00eb q\u00eb mundeni nga AD.<\/p>\n

Keqb\u00ebr\u00ebsit k\u00ebrkojn\u00eb p\u00ebrdorues q\u00eb kan\u00eb passwords pa dat\u00eb skadimi (ose q\u00eb nuk k\u00ebrkojn\u00eb passwords), llogari teknologjike q\u00eb jan\u00eb administratore dhe llogari q\u00eb p\u00ebrdorin enkriptimin e vjet\u00ebr RC4. <\/p>\n

Cilado nga k\u00ebto llogari \u00ebsht\u00eb ose e leht\u00eb p\u00ebr t'u aksesuar, ose zakonisht nuk \u00ebsht\u00eb n\u00ebn monitorim. Keqb\u00ebr\u00ebsit mund t\u00eb kapin k\u00ebto llogari dhe t\u00eb l\u00ebvizin lirsh\u00ebm brenda infrastruktur\u00ebs tuaj.<\/p>\n

Sapo keqb\u00ebr\u00ebsit t\u00eb dep\u00ebrtojn\u00eb p\u00ebrtej perimetrin t\u00eb siguris\u00eb, ata ndoshta do t\u00eb ken\u00eb qasje t\u00eb pakt\u00ebn nj\u00eb llogarie. A do t\u00eb jeni n\u00eb gjendje t'i ndaloni ata t\u00eb aksesojn\u00eb t\u00eb dh\u00ebnat e ndjeshme para se t\u00eb zbuloni dhe t\u00eb neutralizoni sulmin?<\/p>\n

P\u00ebrgjegj\u00ebsia e monitorimit Varonis AD do t\u00eb tregoj\u00eb p\u00ebr llogarit\u00eb e rrezikuara t\u00eb p\u00ebrdoruesve, n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb mund t\u00eb zgjidhni problemet p\u00ebrpara. Sa m\u00eb e v\u00ebshtir\u00eb t\u00eb jet\u00eb t\u00eb dep\u00ebrtoni n\u00eb rrjetin tuaj, aq m\u00eb t\u00eb m\u00ebdha jan\u00eb shanset tuaja p\u00ebr t\u00eb neutralizuar sulmuesin para se ai t\u00eb shkaktoj\u00eb d\u00ebm t\u00eb konsideruesh\u00ebm.<\/p>\n

4 tregues ky\u00e7 t\u00eb rrezikut p\u00ebr llogarit\u00eb e p\u00ebrdoruesve<\/h3>\n

\nM\u00eb posht\u00eb jan\u00eb disa shembuj t\u00eb widget-eve n\u00eb panelin e monitorimit Varonis AD q\u00eb tregojn\u00eb llogarit\u00eb m\u00eb t\u00eb rrezikuara t\u00eb p\u00ebrdoruesve.<\/p>\n

1. Numri i p\u00ebrdoruesve aktiv\u00eb me passwords q\u00eb kurr\u00eb nuk skadojn\u00eb <\/strong><\/p>\n

P\u00ebr \u00e7do keqb\u00ebr\u00ebs, t\u00eb aksesosh nj\u00eb llogari t\u00eb till\u00eb \u00ebsht\u00eb gjithmon\u00eb nj\u00eb fitore e madhe. Pasi periudha e skadimit t\u00eb passwordit kurr\u00eb nuk skadon, keqb\u00ebr\u00ebsi ka nj\u00eb pik\u00eb mb\u00ebshtetjeje t\u00eb p\u00ebrhershme brenda rrjetit, e cila mund t\u00eb p\u00ebrdoret p\u00ebr nivele m\u00eb t\u00eb larta privilegji <\/a><\/noindex>ose l\u00ebvizje brenda infrastruktur\u00ebs.
\nKeqb\u00ebr\u00ebsit kan\u00eb lista me miliona kombinimesh \"p\u00ebrdorues-password\" q\u00eb i p\u00ebrdorin n\u00eb sulmet p\u00ebr t\u00eb z\u00ebvend\u00ebsuar llogarit\u00eb, dhe probabiliteti q\u00eb
\nkombinimi p\u00ebr nj\u00eb p\u00ebrdorues me password \"t\u00eb p\u00ebrjetsh\u00ebm\" t\u00eb jet\u00eb n\u00eb nj\u00ebr\u00ebn nga k\u00ebto lista \u00ebsht\u00eb shum\u00eb m\u00eb i madh se zero.<\/p>\n

Llogarit\u00eb me passwords pa skadim jan\u00eb leht\u00ebsisht t\u00eb menaxhueshme, por ato nuk jan\u00eb t\u00eb sigurta. P\u00ebrdorni k\u00ebt\u00eb widget p\u00ebr t\u00eb gjetur t\u00eb gjitha llogarit\u00eb me k\u00ebto passwords. Ndryshoni k\u00ebt\u00eb parametrin dhe rifreskoni fjal\u00ebkalimin.<\/p>\n

\"7
\nSapo vlera e k\u00ebtij widgeti t\u00eb b\u00ebhet zero, \u00e7do llogari e re e krijuar me nj\u00eb password t\u00eb till\u00eb do t\u00eb shfaqet n\u00eb panelin e monitorimit.<\/p>\n

2. Numri i llogarive administrative me SPN <\/strong><\/p>\n

SPN (Emri i Princit t\u00eb Sh\u00ebrbimit) \u00ebsht\u00eb nj\u00eb identifikues unik p\u00ebr nj\u00eb instanc\u00eb sh\u00ebrbimi (sh\u00ebrbimi). Ky widget tregon se sa llogari sh\u00ebrbimi kan\u00eb t\u00eb drejta t\u00eb plota administrative. Vlera n\u00eb widget duhet t\u00eb jet\u00eb zero. SPN me t\u00eb drejta administrative ndodh, pasi ofrimi i k\u00ebtyre t\u00eb drejtave \u00ebsht\u00eb i p\u00ebrshtatsh\u00ebm p\u00ebr ofruesit e softuerit dhe administrator\u00ebt e aplikacioneve, por kjo paraqet nj\u00eb k\u00ebrc\u00ebnim p\u00ebr sigurin\u00eb.<\/p>\n

Ofrimi i nj\u00eb llogarie sh\u00ebrbimi me t\u00eb drejta administrative lejon keqb\u00ebr\u00ebsin t\u00eb ket\u00eb akses t\u00eb plot\u00eb n\u00eb nj\u00eb llogari q\u00eb nuk p\u00ebrdoret. Kjo do t\u00eb thot\u00eb se keqb\u00ebr\u00ebsit me akses n\u00eb llogarit\u00eb SPN mund t\u00eb veprojn\u00eb lirsh\u00ebm brenda infrastruktur\u00ebs duke shmangur mbik\u00ebqyrjen e veprimeve t\u00eb tyre. <\/p>\n

Kjo \u00e7\u00ebshtje mund t\u00eb zgjidhet duke ndryshuar lejet p\u00ebr llogarit\u00eb sh\u00ebrbimi. K\u00ebto llogari duhet t\u00eb p\u00ebrmbushin parimin e privilegjeve minimale dhe t\u00eb ken\u00eb vet\u00ebm aksesin e nevojsh\u00ebm p\u00ebr funksionimin e tyre.<\/p>\n

\"7
\nMe k\u00ebt\u00eb widget, do t\u00eb keni mund\u00ebsi t\u00eb identifikoni t\u00eb gjitha SPN-t\u00eb me privilegje administratori, t\u00eb hiqni k\u00ebto privilegje dhe m\u00eb pas t\u00eb kontrolloni SPN-t\u00eb, duke u mb\u00ebshtetur n\u00eb t\u00eb nj\u00ebjtin princip t\u00eb qasjes me privilegje minimale.<\/p>\n

SPN-t\u00eb e reja do t\u00eb shfaqen n\u00eb panelin e monitorimit dhe ju do t\u00eb mund t\u00eb kontrolloni k\u00ebt\u00eb proces.<\/p>\n

3. Numri i p\u00ebrdoruesve q\u00eb nuk k\u00ebrkojn\u00eb verifikim paraprak t\u00eb Kerberos <\/strong><\/p>\n

Idealisht, Kerberos kodon bilet\u00ebn e p\u00ebrfundimit me enkriptim AES-256, i cili deri tani nuk \u00ebsht\u00eb thyer.<\/p>\n

Megjithat\u00eb, versionet m\u00eb t\u00eb vjetra t\u00eb Kerberos p\u00ebrdorin enkriptim RC4, i cili tani mund t\u00eb thyehet p\u00ebr pak minuta. Ky widget tregon se cilat llogari p\u00ebrdoruesish ende p\u00ebrdorin RC4. Microsoft vazhdon ta mb\u00ebshtes\u00eb RC4 p\u00ebr p\u00ebrputhshm\u00ebri p\u00ebr t\u00eb kaluar, por kjo nuk do t\u00eb thot\u00eb q\u00eb duhet ta p\u00ebrdorni k\u00ebt\u00eb n\u00eb AD tuaj.<\/p>\n

\"7
\nPasi t\u00eb keni identifikuar k\u00ebto llogari, duhet t\u00eb hiqni shenj\u00ebn e \"nuk k\u00ebrkohet autorizim paraprak t\u00eb Kerberos\" n\u00eb AD, n\u00eb m\u00ebnyr\u00eb q\u00eb llogarit\u00eb t\u00eb p\u00ebrdorin enkriptim m\u00eb t\u00eb avancuar.<\/p>\n

Identifikimi i k\u00ebtyre llogarive vet\u00eb, pa panelin e monitorimit Varonis AD, merr shum\u00eb koh\u00eb. N\u00eb t\u00eb v\u00ebrtet\u00eb, t\u00eb jesh n\u00eb dijeni t\u00eb t\u00eb gjitha llogarive q\u00eb jan\u00eb redaktuar p\u00ebr t\u00eb p\u00ebrdorur enkriptim RC4, \u00ebsht\u00eb nj\u00eb detyr\u00eb edhe m\u00eb e v\u00ebshtir\u00eb.<\/p>\n

N\u00ebse vlera n\u00eb widget ndryshon, kjo mund t\u00eb tregoj\u00eb p\u00ebr aktivitete t\u00eb paligjshme.<\/p>\n

4. Numri i p\u00ebrdoruesve pa fjal\u00ebkalim <\/strong><\/p>\n

Sulmuesit p\u00ebrdorin komandat bazike t\u00eb PowerShell p\u00ebr t\u00eb lexuar nga AD flag-un \"PASSWD_NOTREQD\", n\u00eb pronat e llogaris\u00eb. P\u00ebrdorimi i k\u00ebtij flag-u do t\u00eb thot\u00eb se nuk ka k\u00ebrkesa p\u00ebr nj\u00eb fjal\u00ebkalim ose mund\u00ebsi fjal\u00ebkalimi.
\nSa e leht\u00eb \u00ebsht\u00eb t\u00eb vjedh\u00ebsh nj\u00eb llogari me nj\u00eb fjal\u00ebkalim t\u00eb thjesht\u00eb ose bosh? Dhe tani imagjinoni q\u00eb nj\u00eb nga k\u00ebto llogari \u00ebsht\u00eb nj\u00eb administrator.<\/p>\n

\"7
\n\u00c7far\u00eb n\u00ebse nj\u00eb nga mij\u00ebra skedar\u00ebve konfidencial\u00eb t\u00eb hapur p\u00ebr gjithk\u00ebnd \u00ebsht\u00eb nj\u00eb raport financiar i ardhsh\u00ebm? <\/p>\n

Injorimi i k\u00ebrkes\u00ebs p\u00ebr hyrje t\u00eb detyrueshme t\u00eb fjal\u00ebkalimit \u00ebsht\u00eb nj\u00eb tjet\u00ebr shkurtim p\u00ebr administrimin e sistemeve q\u00eb shpesh \u00ebsht\u00eb p\u00ebrdorur n\u00eb t\u00eb kaluar\u00ebn, por sot \u00ebsht\u00eb e papranueshme dhe e pasigurta.<\/p>\n

Zgjidhni k\u00ebt\u00eb problem duke p\u00ebrdit\u00ebsuar fjal\u00ebkalimet p\u00ebr k\u00ebto llogari.<\/p>\n

Kontrolli i k\u00ebtij widget n\u00eb t\u00eb ardhmen do t'ju ndihmoj\u00eb t\u00eb evitoni shfaqjen e llogarive pa fjal\u00ebkalim.<\/p>\n

Varonis i barazon shanset<\/h2>\n

\nN\u00eb t\u00eb kaluar\u00ebn, puna p\u00ebr mbledhjen dhe analizimin e metrikave t\u00eb p\u00ebrmendura n\u00eb artikull kishte nevoj\u00eb p\u00ebr shum\u00eb or\u00eb dhe k\u00ebrkonte njohuri t\u00eb thelluara mbi PowerShell: specialist\u00ebt e siguris\u00eb kishin nevoj\u00eb t\u00eb dedikonin burime p\u00ebr k\u00ebto detyra \u00e7do jav\u00eb ose muaj. Por mbledhja dhe p\u00ebrpunimi manual i k\u00ebsaj informacioni i ofron sulmuesve nj\u00ebAvantazh p\u00ebr dep\u00ebrtim dhe vjedhje t\u00eb t\u00eb dh\u00ebnave.<\/p>\n

S sigurin\u00eb e t\u00eb dh\u00ebnave: <\/a><\/noindex>do t\u00eb shpenzoni nj\u00eb dit\u00eb p\u00ebr t\u00eb implementuar panelin e monitorimit AD dhe komponent\u00ebt e tjer\u00eb, p\u00ebr t\u00eb mbledhur t\u00eb gjith\u00eb vulnerabilitetet e shqyrtuara dhe shum\u00eb t\u00eb tjera. M\u00eb pas, gjat\u00eb p\u00ebrdorimit, paneli i monitorimit do t\u00eb azhurnohet automatikisht, nd\u00ebrsa gjendja e infrastruktur\u00ebs ndryshon.<\/p>\n

Kryerja e sulmeve kibernetike \u00ebsht\u00eb gjithmon\u00eb nj\u00eb gar\u00eb midis sulmuesve dhe mbrojt\u00ebsve, nj\u00eb p\u00ebrpjekje p\u00ebr t\u00eb vjedhur t\u00eb dh\u00ebnat para se specialist\u00ebt e siguris\u00eb t\u00eb mund t\u00eb mbyllin qasjen n\u00eb to. Identifikimi i hersh\u00ebm i sulmuesve dhe aktiviteteve t\u00eb tyre t\u00eb paligjshme, s\u00eb bashku me nj\u00eb mbrojtje t\u00eb fort\u00eb kibernetike, \u00ebsht\u00eb \u00e7el\u00ebsi p\u00ebr t\u00eb siguruar t\u00eb dh\u00ebnat tuaja.
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u0441\u0435, \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u2013 \u044d\u0442\u043e \u0432\u0440\u0435\u043c\u044f \u0438 \u043c\u043e\u0442\u0438\u0432\u0430\u0446\u0438\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0432\u0430\u0448\u0443 \u0441\u0435\u0442\u044c. \u041d\u043e \u043d\u0430\u0448\u0430 \u0441 \u0432\u0430\u043c\u0438 \u0440\u0430\u0431\u043e\u0442\u0430 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0434\u0430\u0442\u044c \u0435\u043c\u0443 \u044d\u0442\u043e\u0433\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0438\u043b\u0438, \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435, \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u0438\u0442\u044c \u044d\u0442\u0443 \u0437\u0430\u0434\u0430\u0447\u0443. \u041d\u0443\u0436\u043d\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0441\u043b\u0430\u0431\u044b\u0445 \u043c\u0435\u0441\u0442 \u0432 Active Directory (\u0434\u0430\u043b\u0435\u0435 \u2013 AD), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27872,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-37173","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd477 tregues ky\u00e7e t\u00eb rrezikut n\u00eb Active Directory n\u00eb panelin e monitorimit Varonis | ProHoster","description":"Gjith\u00e7ka q\u00eb i nevojitet nj\u00eb sulmuesi \u00ebsht\u00eb koha dhe motivimi p\u00ebr t\u00eb dep\u00ebrtuar n\u00eb rrjetin tuaj. Por puna jon\u00eb \u00ebsht\u00eb ta pengojm\u00eb at\u00eb ose, t\u00eb pakt\u00ebn, ta b\u00ebjm\u00eb k\u00ebt\u00eb sa m\u00eb t\u00eb v\u00ebshtir\u00eb t\u00eb jet\u00eb e mundur. Duhet t\u00eb fillojm\u00eb me p\u00ebrcaktimin e pikave t\u00eb dob\u00ebta n\u00eb Active Directory (AD), t\u00eb cilat sulmuesi mund t'i p\u00ebrdor\u00eb p\u00ebr t\u00eb fituar akses.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/7-klyuchevyh-indikatorov-riska-active-directory-na-paneli-monitoringa-varonis","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd477 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u0440\u0438\u0441\u043a\u0430 Active Directory \u043d\u0430 \u043f\u0430\u043d\u0435\u043b\u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 Varonis | ProHoster","og:description":"\u0412\u0441\u0435, \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u2013 \u044d\u0442\u043e \u0432\u0440\u0435\u043c\u044f \u0438 \u043c\u043e\u0442\u0438\u0432\u0430\u0446\u0438\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0432\u0430\u0448\u0443 \u0441\u0435\u0442\u044c. \u041d\u043e \u043d\u0430\u0448\u0430 \u0441 \u0432\u0430\u043c\u0438 \u0440\u0430\u0431\u043e\u0442\u0430 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0434\u0430\u0442\u044c \u0435\u043c\u0443 \u044d\u0442\u043e\u0433\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0438\u043b\u0438, \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435, \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u0438\u0442\u044c \u044d\u0442\u0443 \u0437\u0430\u0434\u0430\u0447\u0443. \u041d\u0443\u0436\u043d\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0441\u043b\u0430\u0431\u044b\u0445 \u043c\u0435\u0441\u0442 \u0432 Active Directory (\u0434\u0430\u043b\u0435\u0435 \u2013 AD), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/7-klyuchevyh-indikatorov-riska-active-directory-na-paneli-monitoringa-varonis","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:16:11+00:00","article:modified_time":"2019-10-31T19:16:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37173","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 06:24:26","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:46:18","updated":"2026-01-22 06:24:26","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37173","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=37173"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37173\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/27872"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=37173"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=37173"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=37173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}