{"id":92913,"date":"2020-09-01T13:42:56","date_gmt":"2020-09-01T11:42:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/5-check-point-sandblast-agent-management-platform-logs-reports-forensics-threat-hunting"},"modified":"2020-09-01T13:42:56","modified_gmt":"2020-09-01T11:42:56","slug":"5-check-point-sandblast-agent-management-platform-logs-reports-forensics-threat-hunting","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/5-check-point-sandblast-agent-management-platform-logs-reports-forensics-threat-hunting","title":{"rendered":"5. Check Point SandBlast Agent Management Platform. Logs, Reports & Forensics. Threat Hunting","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"5.
\n
\nMir\u00eb se vini n\u00eb artikullin e pest\u00eb t\u00eb ciklit mbi zgjidhjen Check Point SandBlast Agent Management Platform. Mund t\u00eb lexoni mbi artikujt e m\u00ebparsh\u00ebm duke klikuar n\u00eb lidhjen p\u00ebrkat\u00ebse: e par\u00eb<\/a><\/noindex>, e dyta<\/a><\/noindex>, tret\u00ebn<\/a><\/noindex>, kat\u00ebrta<\/a><\/noindex>. Sot do t\u00eb shqyrtojm\u00eb mund\u00ebsit\u00eb e monitorimit n\u00eb Management Platform, konkretisht pun\u00ebn me log-et, panel\u00ebt interaktiv\u00eb (View) dhe raportet. Do t\u00eb flasim gjithashtu p\u00ebr tem\u00ebn e Threat Hunting p\u00ebr identifikimin e k\u00ebrc\u00ebnimeve aktuale dhe ngjarjeve anomale n\u00eb makin\u00ebn e p\u00ebrdoruesit.
\n<\/a><\/noindex><\/p>\n

Log-et<\/h2>\n

\nBurimi kryesor i informacionit p\u00ebr monitorimin e ngjarjeve t\u00eb siguris\u00eb \u00ebsht\u00eb seksioni Logs, i cili tregon informacion t\u00eb detajuar p\u00ebr \u00e7do incident dhe gjithashtu lejon p\u00ebrdorimin e filtrave t\u00eb p\u00ebrshtatsh\u00ebm p\u00ebr sakt\u00ebsimin e kritereve t\u00eb k\u00ebrkimit. P\u00ebr shembull, duke klikuar me t\u00eb djatht\u00ebn mbi nj\u00eb parametrin (Blade, Action, Severity, etj.) t\u00eb logut t\u00eb interesit, ky parametr mund t\u00eb filtrohet si Filter: \u00abParameter\u00bb<\/i> ose Filter Out: \u00abParameter\u00bb<\/i>. P\u00ebrve\u00e7 k\u00ebsaj, p\u00ebr parametrin Source mund t\u00eb zgjidhet opsioni IP Tools, ku mund t\u00eb ekzekutohet ping p\u00ebr k\u00ebt\u00eb adres\u00eb IP\/em\u00ebr ose t\u00eb kryhet nslookup p\u00ebr t\u00eb marr\u00eb adres\u00ebn IP t\u00eb burimit n\u00ebp\u00ebrmjet emrit.<\/p>\n

\"5.<\/a><\/noindex><\/p>\n

N\u00eb seksionin Logs, p\u00ebr filtrimin e ngjarjeve ekziston nj\u00eb n\u00ebnseksion Statistics, ku shfaqet statistika p\u00ebr t\u00eb gjitha parametrat: nj\u00eb diagram temporal me numrin e logove, si dhe p\u00ebrqindjet p\u00ebr secilin nga parametrat. Nga ky n\u00ebnseksion \u00ebsht\u00eb e leht\u00eb t\u00eb filtrohen logot pa iu drejtuar k\u00ebrkuesit dhe shkruar shprehje filtrimi \u2014 mjafton t\u00eb zgjidhni parametrat e interesit dhe lista e re e logove do t\u00eb shfaqet menj\u00ebher\u00eb.<\/p>\n

\"5.<\/a><\/noindex><\/p>\n

Informacioni m\u00eb i detajuar p\u00ebr \u00e7do log \u00ebsht\u00eb i disponuesh\u00ebm n\u00eb panelin e djatht\u00eb t\u00eb seksionit Logs, megjithat\u00eb hapja e logut me nj\u00eb klik t\u00eb dyfisht\u00eb \u00ebsht\u00eb m\u00eb e p\u00ebrshtatshme p\u00ebr analiz\u00ebn e p\u00ebrmbajtjes. M\u00eb posht\u00eb \u00ebsht\u00eb nj\u00eb shembull i logut (imazhi \u00ebsht\u00eb klikues), ku paraqitet informacioni i holl\u00ebsish\u00ebm p\u00ebr ndodhjen e veprimit Prevent nga blenda Threat Emulation ndaj nj\u00eb skedari t\u00eb infektuar \".docx\". Logu ka disa n\u00ebnseksione q\u00eb paraqesin detajet e ngjarjes s\u00eb siguris\u00eb: politika dhe mbrojtja e aktivizuar, detajet e forenzik\u00ebs, informacioni p\u00ebr klientin dhe trafikun. Raportet q\u00eb jan\u00eb t\u00eb disponueshme nga logu \u2014 Threat Emulation Report dhe Forensics Report, meritojn\u00eb nj\u00eb v\u00ebmendje t\u00eb ve\u00e7ant\u00eb. K\u00ebto raporte gjithashtu mund t\u00eb hapen nga klienti SandBlast Agent.<\/p>\n

\"5.<\/a><\/noindex><\/p>\n

Threat Emulation Report<\/h3>\n

\n\"5.<\/a><\/noindex><\/p>\n

Kur p\u00ebrdoret bledi Threat Emulation, pas realizimit t\u00eb emulimit n\u00eb cloud-in e Check Point, n\u00eb logun p\u00ebrkat\u00ebs shfaqet nj\u00eb lidhje p\u00ebr raportin e detajuar mbi rezultatet e emulimit \u2014 Threat Emulation Report. P\u00ebrmbajtja e k\u00ebtij raporti \u00ebsht\u00eb p\u00ebrshkruar n\u00eb m\u00ebnyr\u00eb t\u00eb detajuar n\u00eb artikullin ton\u00eb n\u00eb lidhje me analiz\u00ebn e malware-ve p\u00ebrmes forenzik\u00ebs Check Point SandBlast Network<\/a><\/noindex>. Vlen t\u00eb theksohet se ky raport \u00ebsht\u00eb interaktiv dhe lejon \"zhytje\" n\u00eb detajet e secil\u00ebs prej seksioneve. Gjithashtu, ka mund\u00ebsin\u00eb p\u00ebr t\u00eb par\u00eb regjistrimin e procesit t\u00eb emulimit n\u00eb makin\u00eb virtuale, t\u00eb shkarkoni skedarin origjinal t\u00eb malware-it ose t\u00eb merrni hash-in e tij, si dhe t\u00eb kontaktoni ekipin e p\u00ebrgjigjes ndaj incidenteve t\u00eb Check Point.<\/p>\n

\"5.<\/a><\/noindex><\/p>\n

Raporti i Forenzik\u00ebs<\/h3>\n

\nPraktikisht p\u00ebr \u00e7do ngjarje t\u00eb siguris\u00eb gjenerohet raporti Forensics Report, i cili p\u00ebrfshin informacion t\u00eb detajuar mbi skedarin e malware-it: karakteristikat e tij, veprimet, pik\u00ebn e hyrjes n\u00eb sistem dhe ndikimin n\u00eb asetet kryesore t\u00eb kompanis\u00eb. Struktura e raportit \u00ebsht\u00eb diskutuar n\u00eb detaje n\u00eb artikullin ton\u00eb n\u00eb lidhje me analiz\u00ebn e malware-ve p\u00ebrmes forenzik\u00ebs Check Point SandBlast Agent<\/a><\/noindex>. Nj\u00eb raport i till \u00ebsht\u00eb nj\u00eb burim i r\u00ebnd\u00ebsish\u00ebm informacioni gjat\u00eb hetimeve mbi ngjarjet e siguris\u00eb, dhe n\u00eb rast nevoje, mund t\u00eb d\u00ebrgoni menj\u00ebher\u00eb p\u00ebrmbajtjen e raportit n\u00eb ekipin e p\u00ebrgjigjes ndaj incidenteve t\u00eb Check Point.<\/p>\n

\"5.<\/a><\/noindex><\/p>\n

SmartView<\/h2>\n

\nCheck Point SmartView \u00ebsht\u00eb nj\u00eb mjet i leht\u00eb p\u00ebr nd\u00ebrtimin dhe shikimin e tabelave dinamike (View) dhe raporteve n\u00eb formatin PDF. Nga SmartView mund t\u00eb shikoni gjithashtu regjistrat e p\u00ebrdoruesve dhe ngjarjet e auditi p\u00ebr administrator\u00ebt. N\u00eb figur\u00ebn m\u00eb posht\u00eb jan\u00eb paraqitur raportet dhe dashboardet m\u00eb t\u00eb dobishme p\u00ebr pun\u00ebn me SandBlast Agent.<\/p>\n

\"5.<\/a><\/noindex><\/p>\n

Raportet n\u00eb SmartView p\u00ebrfaq\u00ebsojn\u00eb dokumente me informacione statistike mbi ngjarjet p\u00ebr nj\u00eb periudh\u00eb t\u00eb caktuar. Mb\u00ebshtetet eksportimi i raporteve n\u00eb formatin PDF n\u00eb makin\u00ebn ku \u00ebsht\u00eb hapur SmartView, si dhe eksporti i rregullt n\u00eb PDF\/Excel n\u00eb emailin e administratorit. P\u00ebrve\u00e7 k\u00ebsaj, mb\u00ebshtetet importi\/eksporti i shablloneve t\u00eb raporteve, krijimi i raporteve t\u00eb veta dhe mund\u00ebsia p\u00ebr t\u00eb fshehur emrat e p\u00ebrdoruesve n\u00eb raporte. N\u00eb figur\u00ebn m\u00eb posht\u00eb \u00ebsht\u00eb nj\u00eb shembull i raportit t\u00eb integruar Threat Prevention.<\/p>\n

\"5.<\/a><\/noindex><\/p>\n

Dashboardet (View) n\u00eb SmartView i lejojn\u00eb administratorit t\u00eb qasje n\u00eb log-et p\u00ebr ngjarjet p\u00ebrkat\u00ebse \u2014 mjafton t\u00eb klikoni dy her\u00eb mbi objektin e p\u00ebrshtatsh\u00ebm, qoft\u00eb nj\u00eb kolon\u00eb n\u00eb grafik apo titulli i nj\u00eb skedari t\u00eb d\u00ebmsh\u00ebm. Si\u00e7 ndodh edhe me raportet, \u00ebsht\u00eb e mundur t\u00eb krijoni dashboarde t\u00eb personalizuara dhe t\u00eb fshihni t\u00eb dh\u00ebnat e p\u00ebrdoruesve. P\u00ebr dashboardet, gjithashtu mb\u00ebshtetet importimi\/exportimi i shablloneve, shkarkim i rregullt n\u00eb PDF\/Excel n\u00eb adres\u00ebn elektronike t\u00eb administratorit dhe p\u00ebrdit\u00ebsimi automatik i t\u00eb dh\u00ebnave p\u00ebr monitorimin e ngjarjeve t\u00eb siguris\u00eb n\u00eb koh\u00eb reale.<\/p>\n

\"5.<\/a><\/noindex><\/p>\n

Ndarjet shtes\u00eb t\u00eb monitorimit<\/h2>\n

\nP\u00ebrshkrimi i mjeteve t\u00eb monitorimit n\u00eb Management Platform do t\u00eb ishte i paplot\u00eb pa p\u00ebrmendur ndarjet Overview, Computer Management, Endpoint Settings dhe Push Operations. K\u00ebto ndarje jan\u00eb p\u00ebrshkruar n\u00eb detaje n\u00eb artikullin e dyt\u00eb<\/a><\/noindex>, megjithat\u00eb do t\u00eb ishte e dobishme t\u00eb shqyrtojm\u00eb mund\u00ebsit\u00eb e tyre p\u00ebr zgjidhjen e detyrave t\u00eb monitorimit. T\u00eb fillojm\u00eb me P\u00ebrmbledhjen, e cila p\u00ebrb\u00ebhet nga dy n\u00ebncategorit\u00eb \u2014 P\u00ebrmbledhja Operative dhe P\u00ebrmbledhja e Siguris\u00eb, t\u00eb cilat p\u00ebrfaq\u00ebsojn\u00eb bordet me informacion mbi gjendjen e makinave t\u00eb p\u00ebrdoruesve t\u00eb mbrojtura dhe ngjarjet e siguris\u00eb. Ashtu si me \u00e7do bord tjet\u00ebr, n\u00ebnkategorit\u00eb e P\u00ebrmbledhjes Operative dhe P\u00ebrmbledhjes s\u00eb Siguris\u00eb, duke dyfishuar mbi parametrin e interesit, mund t\u00eb qasen n\u00eb seksionin e Menaxhimit t\u00eb Kompjuter\u00ebve me filtrin e zgjedhur (p.sh., \u00abDesktop\u00bb ose \u00abStatusi i Paraporosis\u00eb: Aktiv\u00bb) ose n\u00eb seksionin e Logs p\u00ebr nj\u00eb ngjarje t\u00eb ve\u00e7ant\u00eb. N\u00ebnkategoria e P\u00ebrmbledhjes s\u00eb Siguris\u00eb p\u00ebrfaq\u00ebson nj\u00eb panel t\u00eb quajtur \u00abPamja e Sulmit Kibernetik \u2013 Pik\u00eb Fundi\u00bb, i cili mund t\u00eb konfigurohet \u00absip\u00ebr\u00bb dhe t\u00eb vendoset p\u00ebr azhurnimin automatik t\u00eb t\u00eb dh\u00ebnave.<\/p>\n

\"5.<\/a><\/noindex><\/p>\n

Nga seksioni i Menaxhimit t\u00eb Kompjuter\u00ebve, mund t\u00eb monitoroni gjendjen e agjentit n\u00eb makin\u00ebn e p\u00ebrdoruesit, statusin e azhurnimit t\u00eb baz\u00ebs s\u00eb t\u00eb dh\u00ebnave Anti-Malware, fazat e enkriptimit t\u00eb diskut dhe shum\u00eb m\u00eb tep\u00ebr. T\u00eb gjitha t\u00eb dh\u00ebnat azhurnohen automatikisht, dhe p\u00ebr secilin nga filtrat shfaqet nj\u00eb p\u00ebrqindje e makinave t\u00eb p\u00ebrdoruesve t\u00eb p\u00ebrshtatshme. Gjithashtu, mb\u00ebshtetet eksportimi i t\u00eb dh\u00ebnave mbi kompjuter\u00ebt n\u00eb formatin CSV.<\/p>\n

\"5.<\/a><\/noindex><\/p>\n

Nj\u00eb aspekt i r\u00ebnd\u00ebsish\u00ebm i monitorimit t\u00eb siguris\u00eb s\u00eb stacioneve t\u00eb pun\u00ebs \u00ebsht\u00eb konfigurimi i njoftimeve p\u00ebr ngjarjet kritike (Alerts) dhe eksportimi i log\u00ebve (Export Events) p\u00ebr ruajtje n\u00eb serverin e log\u00ebve t\u00eb kompanis\u00eb. T\u00eb dyja konfigurimet kryhen n\u00eb seksionin Endpoint Settings, dhe p\u00ebr Alerts<\/i> ka mund\u00ebsin\u00eb t\u00eb lidhni nj\u00eb server t\u00eb post\u00ebs p\u00ebr d\u00ebrgimin e njoftimeve p\u00ebr ngjarjet administratorit dhe t\u00eb konfiguroni vlerat prag p\u00ebr aktivizimin\/fshirjen e njoftimeve n\u00eb var\u00ebsi t\u00eb p\u00ebrqindjes\/shum\u00ebs s\u00eb pajisjeve q\u00eb i p\u00ebrshtaten kritereve t\u00eb ngjarjes. Ngjarjet e Eksportit<\/i> lejon konfigurimin e d\u00ebrgimit t\u00eb log\u00ebve nga Management Platform n\u00eb serverin e log\u00ebve t\u00eb kompanis\u00eb p\u00ebr p\u00ebrpunim t\u00eb m\u00ebtejsh\u00ebm. Mb\u00ebshteten formatet SYSLOG, CEF, LEEF, SPLUNK, protokollet TCP\/UDP, \u00e7do sistem SIEM me agjentin e pun\u00ebs syslog t\u00eb funksionuar, p\u00ebrdorimi i enkriptimit TLS\/SSL dhe autentifikimi i klientit syslog.<\/p>\n

\"5.<\/a><\/noindex><\/p>\n

P\u00ebr nj\u00eb analiz\u00eb t\u00eb thell\u00eb t\u00eb ngjarjeve n\u00eb agent ose n\u00eb rastin e kontaktit me mb\u00ebshtetje teknike, mund t\u00eb mblidhni shpejt log-et nga klienti SandBlast Agent p\u00ebrmes nj\u00eb operacioni t\u00eb detyruar n\u00eb seksionin Push Operations. \u00cbsht\u00eb e mundur t\u00eb konfiguroni d\u00ebrgimin e arkivave t\u00eb formuar me log-e n\u00eb serverat Check Point ose n\u00eb serverat e korporat\u00ebs, gjithashtu arkivi me log-et ruhet n\u00eb makin\u00ebn e p\u00ebrdoruesit n\u00eb direktoriumin C:UsersusernameCPInfo. Mb\u00ebshtetet nisja e procesit t\u00eb mbledhjes s\u00eb log-eve n\u00eb nj\u00eb koh\u00eb t\u00eb caktuar dhe mund\u00ebsia p\u00ebr t\u00eb shtyr\u00eb operacionin nga p\u00ebrdoruesi.<\/p>\n

\"5.<\/a><\/noindex><\/p>\n

K\u00ebrkimi i K\u00ebrc\u00ebnimeve<\/h2>\n

\nMetoda e K\u00ebrkimit t\u00eb K\u00ebrc\u00ebnimeve p\u00ebrdoret p\u00ebr t\u00eb k\u00ebrkuar proaktivisht veprime t\u00eb d\u00ebmshme dhe sjellje anormale n\u00eb sistem p\u00ebr t\u00eb k\u00ebrkuar m\u00eb tej ndodhi t\u00eb mundshme t\u00eb siguris\u00eb. Seksioni K\u00ebrkimi i K\u00ebrc\u00ebnimeve n\u00eb Platform\u00ebn e Menaxhimit lejon t\u00eb k\u00ebrkoni ngjarjet me parameter\u00ebt e caktuar n\u00eb t\u00eb dh\u00ebnat e makin\u00ebs s\u00eb p\u00ebrdoruesit.<\/p>\n

\"5.<\/a><\/noindex><\/p>\n

Instrumenti i K\u00ebrkimit t\u00eb K\u00ebrc\u00ebnimeve ka disa k\u00ebrkesa t\u00eb paracaktuara, p\u00ebr shembull: p\u00ebr klasifikimin e domain-eve ose skedar\u00ebve t\u00eb d\u00ebmsh\u00ebm, ndjekjen e qasjeve t\u00eb rralla n\u00eb disa IP-adresa (n\u00eb krahasim me statistikat e p\u00ebrgjithshme). Struktura e k\u00ebrkes\u00ebs p\u00ebrb\u00ebhet nga tre parametra: tregues<\/i> (protokolli rrjetor, identifikuesi i procesit, lloji i skedarit etj.), operatori<\/i> (\"\u00ebsht\u00eb\", \"nuk \u00ebsht\u00eb\", \"p\u00ebrfshin\", \"nj\u00eb nga\" etj.) dhe trupi i k\u00ebrkes\u00ebs<\/i>. N\u00eb trupin e k\u00ebrkes\u00ebs mund t\u00eb p\u00ebrdoren shprehje t\u00eb rregullta, mb\u00ebshtetet p\u00ebrdorimi i disa filtrave nj\u00ebkoh\u00ebsisht n\u00eb rreshtin e k\u00ebrkimit.<\/p>\n

\"5.<\/a><\/noindex><\/p>\n

Pas zgjedhjes s\u00eb filtrit dhe p\u00ebrfundimit t\u00eb p\u00ebrpunimit t\u00eb k\u00ebrkes\u00ebs, b\u00ebhet e mundur t\u00eb aksesohen t\u00eb gjitha ngjarjet e p\u00ebrshtatshme, me mund\u00ebsin\u00eb p\u00ebr t\u00eb par\u00eb informacion t\u00eb detajuar rreth ngjarjes, t\u00eb vendosni objektin e k\u00ebrkes\u00ebs n\u00eb karantin\u00eb ose t\u00eb gjeneroni nj\u00eb raport t\u00eb detajuar Forensics Report me p\u00ebrshkrimin e ngjarjes. Aktualisht, ky veg\u00ebl \u00ebsht\u00eb n\u00eb faz\u00ebn beta dhe m\u00eb von\u00eb planifikohet zgjerimi i grumbullimit t\u00eb mund\u00ebsive, p\u00ebr shembull, shtimi i informacionit p\u00ebr ngjarjen n\u00eb form\u00ebn e matric\u00ebs Mitre Att&ck.<\/p>\n

\"5.<\/a><\/noindex><\/p>\n

P\u00ebrfundimi<\/h3>\n

\nP\u00ebrmbledhim: n\u00eb k\u00ebt\u00eb artikull shqyrtuam mund\u00ebsit\u00eb e monitorimit t\u00eb ngjarjeve t\u00eb siguris\u00eb n\u00eb SandBlast Agent Management Platform, studiuam nj\u00eb mjet t\u00eb ri p\u00ebr k\u00ebrkimin proaktiv t\u00eb veprimeve t\u00eb d\u00ebmshme dhe anomali n\u00eb makinat e p\u00ebrdoruesve \u2014 Threat Hunting. Artikulli i ardhsh\u00ebm do t\u00eb jet\u00eb p\u00ebrfundimtar n\u00eb k\u00ebt\u00eb cik\u00ebl dhe ne do t\u00eb shqyrtojm\u00eb pyetjet m\u00eb t\u00eb shpeshta n\u00eb lidhje me zgjidhjen Management Platform dhe do t\u00eb flasim p\u00ebr mund\u00ebsit\u00eb e testimit t\u00eb k\u00ebtij produkti.<\/p>\n

Nj\u00eb p\u00ebrzgjedhje e gjer\u00eb materialesh rreth Check Point nga TS Solution<\/a><\/noindex>. P\u00ebr t\u00eb mos humbur publikimet e ardhshme mbi tem\u00ebn e Platform\u00ebs s\u00eb Menaxhimit t\u00eb SandBlast Agent \u2014 ndiqni azhurnimet n\u00eb rrjetet tona sociale (Telegram<\/a><\/noindex>, Facebook<\/a><\/noindex>, VK<\/a><\/noindex>, Blogu i Zgjidhjeve TS<\/a><\/noindex>, Yandex.Zen<\/a><\/noindex>).
\n
Burimi: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u043f\u044f\u0442\u0443\u044e \u0441\u0442\u0430\u0442\u044c\u044e \u0446\u0438\u043a\u043b\u0430 \u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Check Point SandBlast Agent Management Platform. \u0421 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u043c\u0438 \u0441\u0442\u0430\u0442\u044c\u044f\u043c\u0438 \u043c\u043e\u0436\u043d\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f, \u043f\u0435\u0440\u0435\u0439\u0434\u044f \u043f\u043e \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0441\u0441\u044b\u043b\u043a\u0435: \u043f\u0435\u0440\u0432\u0430\u044f, \u0432\u0442\u043e\u0440\u0430\u044f, \u0442\u0440\u0435\u0442\u044c\u044f, \u0447\u0435\u0442\u0432\u0451\u0440\u0442\u0430\u044f. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0432 Management Platform, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u043b\u043e\u0433\u0430\u043c\u0438, \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u0434\u0430\u0448\u0431\u043e\u0440\u0434\u0430\u043c\u0438 (View) \u0438 \u043e\u0442\u0447\u0451\u0442\u0430\u043c\u0438. \u0422\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0435\u043c \u0442\u0435\u043c\u0443 Threat Hunting \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92914,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-92913","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd475. Check Point SandBlast Agent Management Platform. Log, Raporte & Forenzika. Threat Hunting | ProHoster","description":"Mir\u00ebsevini n\u00eb artikullin e pest\u00eb t\u00eb ciklit mbi zgjidhjen Check Point SandBlast Agent Management Platform. Mund t\u00eb njiheni me artikujt e m\u00ebparsh\u00ebm duke klikuar n\u00eb lidhjen p\u00ebrkat\u00ebse: e para, e dyta, e treta, e kat\u00ebrta. Sot do t\u00eb shqyrtojm\u00eb mund\u00ebsit\u00eb e monitorimit n\u00eb Management Platform, ve\u00e7an\u00ebrisht pun\u00ebn me log-et, dashboard interaktive (View) dhe raportet. Ne gjithashtu do t\u00eb trajtojm\u00eb tem\u00ebn e Threat Hunting p\u00ebr identifikimin e k\u00ebrc\u00ebnimeve aktuale dhe","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/5-check-point-sandblast-agent-management-platform-logs-reports-forensics-threat-hunting","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd475. Check Point SandBlast Agent Management Platform. Logs, Reports & Forensics. Threat Hunting | ProHoster","og:description":"\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u043f\u044f\u0442\u0443\u044e \u0441\u0442\u0430\u0442\u044c\u044e \u0446\u0438\u043a\u043b\u0430 \u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Check Point SandBlast Agent Management Platform. \u0421 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u043c\u0438 \u0441\u0442\u0430\u0442\u044c\u044f\u043c\u0438 \u043c\u043e\u0436\u043d\u043e \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f, \u043f\u0435\u0440\u0435\u0439\u0434\u044f \u043f\u043e \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0441\u0441\u044b\u043b\u043a\u0435: \u043f\u0435\u0440\u0432\u0430\u044f, \u0432\u0442\u043e\u0440\u0430\u044f, \u0442\u0440\u0435\u0442\u044c\u044f, \u0447\u0435\u0442\u0432\u0451\u0440\u0442\u0430\u044f. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0432 Management Platform, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u043b\u043e\u0433\u0430\u043c\u0438, \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u0434\u0430\u0448\u0431\u043e\u0440\u0434\u0430\u043c\u0438 (View) \u0438 \u043e\u0442\u0447\u0451\u0442\u0430\u043c\u0438. \u0422\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0435\u043c \u0442\u0435\u043c\u0443 Threat Hunting \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437 \u0438","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/5-check-point-sandblast-agent-management-platform-logs-reports-forensics-threat-hunting","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-01T11:42:56+00:00","article:modified_time":"2020-09-01T11:42:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92913","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:58:25","updated":"2022-09-30 07:34:54"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/92913","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=92913"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/92913\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/92914"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=92913"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=92913"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=92913"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}