{"id":97776,"date":"2020-10-21T20:42:28","date_gmt":"2020-10-21T18:42:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/red-teaming-kompleksnaya-imitacziya-atak-metodologiya-i-instrumenty"},"modified":"2020-10-21T20:42:28","modified_gmt":"2020-10-21T18:42:28","slug":"red-teaming-kompleksnaya-imitacziya-atak-metodologiya-i-instrumenty","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/red-teaming-kompleksnaya-imitacziya-atak-metodologiya-i-instrumenty","title":{"rendered":"Red Teaming \u2014 simulim gjith\u00ebp\u00ebrfshir\u00ebs i sulmeve. Metodologjia dhe mjetet","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Red Teaming \u2014 simulim gjith\u00ebp\u00ebrfshir\u00ebs i sulmeve. Metodologjia dhe mjetet\" src=\"\/wp-content\/uploads\/2020\/10\/9c219b917125bd86b6d9e544417c7548.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Burimi: Acunetix<\/i><\/p>\n<p>Red Teaming (sulmi i \u00abekipit t\u00eb kuq\u00bb) \u00ebsht\u00eb nj\u00eb simulim i plot\u00eb i sulmeve reale me q\u00ebllim vler\u00ebsimin e siguris\u00eb kibernetike t\u00eb sistemeve. \u00abEkipi i kuq\u00bb p\u00ebrfaq\u00ebson nj\u00eb grup <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/penetration-testing-tools\/\">testuesish t\u00eb penetrimit <\/a><\/noindex> (specialist\u00eb q\u00eb kryejn\u00eb testimin e dep\u00ebrtimit n\u00eb sistem). Ata mund t\u00eb jen\u00eb si ekspert\u00eb t\u00eb jasht\u00ebm t\u00eb angazhuar, ashtu edhe punonj\u00ebs t\u00eb organizat\u00ebs suaj, por n\u00eb t\u00eb gjitha rastet roli i tyre \u00ebsht\u00eb i nj\u00ebjt\u00eb \u2014 t\u00eb simulojn\u00eb veprimet e sulmuesve dhe t\u00eb p\u00ebrpiqen t\u00eb dep\u00ebrtojn\u00eb n\u00eb sistemin tuaj.<\/p>\n<p>Krahas \u00abekipeve t\u00eb kuqe\u00bb, n\u00eb sigurin\u00eb kibernetike ekzistojn\u00eb edhe disa t\u00eb tjera. P\u00ebr shembull, \u00abekipi blu\u00bb (Blue Team) punon s\u00eb bashku me t\u00eb kuqin, por veprimtaria e tij synon rritjen e siguris\u00eb s\u00eb infrastruktur\u00ebs s\u00eb sistemit nga brenda. \u00abEkipi vjollc\u00eb\u00bb (Purple Team) sh\u00ebrben si hallk\u00eb nd\u00ebrlidh\u00ebse, duke i ndihmuar dy ekipet e tjera n\u00eb hartimin e strategjis\u00eb s\u00eb sulmit dhe t\u00eb masave mbrojt\u00ebse. Megjithat\u00eb, Red Teaming mbetet nj\u00eb nga metodat m\u00eb pak t\u00eb kuptuara t\u00eb menaxhimit t\u00eb siguris\u00eb kibernetike dhe shum\u00eb organizata ende hezitojn\u00eb ta p\u00ebrdorin k\u00ebt\u00eb praktik\u00eb.<br \/>\nN\u00eb k\u00ebt\u00eb artikull do t\u00eb shpjegojm\u00eb n\u00eb detaje \u00e7far\u00eb fshihet pas konceptit Red Teaming dhe si zbatimi i praktikave t\u00eb simulimit t\u00eb plot\u00eb t\u00eb sulmeve reale mund t\u00eb ndihmoj\u00eb n\u00eb p\u00ebrmir\u00ebsimin e siguris\u00eb s\u00eb organizat\u00ebs suaj. Q\u00ebllimi i artikullit \u00ebsht\u00eb t\u00eb tregoj\u00eb se si kjo metod\u00eb mund t\u00eb rris\u00eb ndjesh\u00ebm sigurin\u00eb e sistemeve tuaja t\u00eb informacionit.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2> Red Teaming: p\u00ebrmbledhje<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Red Teaming \u2014 simulim gjith\u00ebp\u00ebrfshir\u00ebs i sulmeve. Metodologjia dhe mjetet\" src=\"\/wp-content\/uploads\/2020\/10\/25c2fe66a5b91050c9a6c8947d6c8340.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nEdhe pse sot \u00abekipet e kuqe\u00bb dhe \u00abekipet blu\u00bb lidhen para s\u00eb gjithash me fush\u00ebn e teknologjis\u00eb s\u00eb informacionit dhe siguris\u00eb kibernetike, k\u00ebto koncepte u krijuan fillimisht nga ushtria. N\u00eb fakt, pik\u00ebrisht n\u00eb ushtri d\u00ebgjova p\u00ebr her\u00eb t\u00eb par\u00eb p\u00ebr k\u00ebto koncepte. Puna si analist i siguris\u00eb kibernetike n\u00eb vitet 1980 ndryshonte shum\u00eb nga ajo e sotmja: qasja n\u00eb sistemet kompjuterike t\u00eb enkriptuara ishte shum\u00eb m\u00eb e kufizuar se sa \u00ebsht\u00eb tani.<\/p>\n<p>P\u00ebrndryshe, p\u00ebrvoja ime e par\u00eb me loj\u00ebrat ushtarake \u2014 modelimin, simulimin dhe organizimin e nd\u00ebrveprimit \u2014 ishte shum\u00eb e ngjashme me procesin e sot\u00ebm t\u00eb simulimit t\u00eb plot\u00eb t\u00eb sulmeve, i cili \u00ebsht\u00eb p\u00ebrhapur gjer\u00ebsisht n\u00eb fush\u00ebn e siguris\u00eb kibernetike. Ashtu si sot, r\u00ebnd\u00ebsi e madhe i kushtohej p\u00ebrdorimit t\u00eb metodave t\u00eb inxhinieris\u00eb sociale p\u00ebr t\u00eb bindur punonj\u00ebsit t\u2019i jepnin \u201carmikut\u201d qasje t\u00eb paautorizuar n\u00eb sistemet ushtarake. Prandaj, edhe pse metodat teknike t\u00eb simulimit t\u00eb sulmeve kan\u00eb avancuar ndjesh\u00ebm krahasuar me vitet \u201980, vlen t\u00eb theksohet se shum\u00eb nga mjetet baz\u00eb t\u00eb qasjes kund\u00ebrshtuese, dhe sidomos teknikat e inxhinieris\u00eb sociale, n\u00eb mas\u00eb t\u00eb madhe nuk varen nga platforma.<\/p>\n<p>Vlera kryesore e simulimit t\u00eb plot\u00eb t\u00eb sulmeve reale gjithashtu nuk ka ndryshuar q\u00eb nga vitet \u201980. Duke simuluar nj\u00eb sulm ndaj sistemeve tuaja, \u00ebsht\u00eb m\u00eb e leht\u00eb t\u00eb zbuloni dob\u00ebsit\u00eb dhe t\u00eb kuptoni se si mund t\u00eb shfryt\u00ebzohen ato. Dhe ndon\u00ebse m\u00eb par\u00eb red teaming p\u00ebrdorej kryesisht nga \u201cwhite hat\u201d hackers dhe specialist\u00eb t\u00eb siguris\u00eb kibernetike q\u00eb k\u00ebrkonin dob\u00ebsi p\u00ebrmes testimit t\u00eb penetrimit, sot kjo metod\u00eb ka gjetur nj\u00eb p\u00ebrdorim shum\u00eb m\u00eb t\u00eb gjer\u00eb si n\u00eb sigurin\u00eb kibernetike, ashtu edhe n\u00eb biznes.<\/p>\n<p>Thelb\u00ebsore p\u00ebr red teaming \u00ebsht\u00eb t\u00eb kuptohet se n\u00eb praktik\u00eb nuk mund t\u00eb krijoni nj\u00eb pasqyr\u00eb reale p\u00ebr nivelin e mbrojtjes s\u00eb sistemeve tuaja derisa ato t\u00eb vihen n\u00ebn sulm. Dhe n\u00eb vend q\u00eb t\u00eb ekspozoheni ndaj rrezikut t\u00eb nj\u00eb sulmi nga keqb\u00ebr\u00ebs t\u00eb v\u00ebrtet\u00eb, \u00ebsht\u00eb shum\u00eb m\u00eb e sigurt t\u00eb simuloni nj\u00eb sulm t\u00eb till\u00eb me ndihm\u00ebn e nj\u00eb \u201cred team\u201d.<\/p>\n<h2> Red Teaming: skenar\u00ebt e p\u00ebrdorimit<\/h2>\n<p>\nNj\u00eb m\u00ebnyr\u00eb e thjesht\u00eb p\u00ebr t\u00eb kuptuar bazat e red teaming \u00ebsht\u00eb t\u00eb shihni disa shembuj. Ja dy prej tyre:<\/p>\n<ul>\n<li><strong>Skenari 1.<\/strong> Imagjinoni q\u00eb ndaj nj\u00eb faqeje p\u00ebr sh\u00ebrbimin ndaj klientit \u00ebsht\u00eb kryer nj\u00eb pentest dhe kontrolli ka rezultuar i suksessh\u00ebm. N\u00eb pamje t\u00eb par\u00eb, kjo do t\u00eb thot\u00eb se gjith\u00e7ka \u00ebsht\u00eb n\u00eb rregull. Megjithat\u00eb, m\u00eb von\u00eb, gjat\u00eb nj\u00eb simulimi t\u00eb plot\u00eb t\u00eb sulmit, \u201cred team\u201d zbulon se, ndon\u00ebse vet\u00eb aplikacioni i sh\u00ebrbimit ndaj klientit \u00ebsht\u00eb n\u00eb rregull, funksioni i chat-it nga pal\u00eb t\u00eb treta nuk arrin t\u2019i identifikoj\u00eb sakt\u00eb personat, gj\u00eb q\u00eb b\u00ebn t\u00eb mundur mashtrimin e p\u00ebrfaq\u00ebsuesve t\u00eb sh\u00ebrbimit ndaj klientit q\u00eb t\u00eb ndryshojn\u00eb adres\u00ebn e email-it n\u00eb llogari (si rezultat, nj\u00eb person tjet\u00ebr, pra sulmuesi, mund t\u00eb fitoj\u00eb qasje).<\/li>\n<li><strong>Skenari 2. <\/strong>Si rezultat i kryerjes s\u00eb pentestit, u zbulua se t\u00eb gjitha mjetet e menaxhimit t\u00eb VPN dhe aksesit n\u00eb distanc\u00eb jan\u00eb t\u00eb mbrojtura. Megjithat\u00eb, m\u00eb pas nj\u00eb p\u00ebrfaq\u00ebsues i \u00abred team\u00bb kalon pa pengesa pran\u00eb recepsionit dhe merr laptopin e nj\u00ebrit prej punonj\u00ebsve.<\/li>\n<\/ul>\n<p>\nN\u00eb t\u00eb dyja rastet e p\u00ebrmendura m\u00eb sip\u00ebr, \u00abred team\u00bb verifikon jo vet\u00ebm besueshm\u00ebrin\u00eb e secilit sistem ve\u00e7mas, por edhe t\u00eb gjith\u00eb sistemin n\u00eb t\u00ebr\u00ebsi p\u00ebr t\u00eb identifikuar dob\u00ebsit\u00eb.<\/p>\n<h2> Kujt i nevojitet simulimi i plot\u00eb i sulmeve?<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Red Teaming \u2014 simulim gjith\u00ebp\u00ebrfshir\u00ebs i sulmeve. Metodologjia dhe mjetet\" src=\"\/wp-content\/uploads\/2020\/10\/885c58d274c4e57dd165bf47da13e410.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nShkurt, pothuajse \u00e7do kompani mund t\u00eb p\u00ebrfitoj\u00eb nga red teaming. Si\u00e7 tregohet <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/2019-data-risk-report\/\">n\u00eb raportin ton\u00eb global mbi rreziqet e t\u00eb dh\u00ebnave p\u00ebr vitin 2019.<\/a><\/noindex>, nj\u00eb num\u00ebr alarmuesh\u00ebm i madh organizatash jeton me bindjen e rreme se kan\u00eb kontroll t\u00eb plot\u00eb mbi t\u00eb dh\u00ebnat e tyre. P\u00ebr shembull, zbuluam se mesatarisht 22% e dosjeve t\u00eb kompanive jan\u00eb t\u00eb qasshme p\u00ebr \u00e7do punonj\u00ebs dhe se 87% e kompanive kan\u00eb m\u00eb shum\u00eb se 1000 skedar\u00eb konfidencial\u00eb t\u00eb vjet\u00ebruar n\u00eb sistemet e tyre.<\/p>\n<p>N\u00ebse kompania juaj nuk operon n\u00eb fush\u00ebn e teknologjis\u00eb, mund t\u00eb duket se red teaming nuk do t'ju sjell\u00eb shum\u00eb dobi. Por nuk \u00ebsht\u00eb k\u00ebshtu. Siguria kibernetike nuk ka t\u00eb b\u00ebj\u00eb vet\u00ebm me mbrojtjen e informacionit konfidencial.<\/p>\n<p>Sulmuesit p\u00ebrpiqen t\u00eb p\u00ebrvet\u00ebsojn\u00eb teknologjit\u00eb pavar\u00ebsisht sektorit ku operon kompania. P\u00ebr shembull, ata mund t\u00eb synojn\u00eb t\u00eb marrin qasje n\u00eb rrjetin tuaj p\u00ebr ta p\u00ebrdorur at\u00eb p\u00ebr t\u00eb fshehur aktivitetet e tyre gjat\u00eb komprometimit t\u00eb nj\u00eb sistemi ose rrjeti tjet\u00ebr diku tjet\u00ebr n\u00eb bot\u00eb. N\u00eb k\u00ebt\u00eb lloj sulmi, t\u00eb dh\u00ebnat tuaja nuk u duhen sulmuesve. Ata duan t\u00eb infektojn\u00eb pik\u00ebrisht kompjuter\u00ebt tuaj me malware, q\u00eb m\u00eb pas t'i p\u00ebrdorin p\u00ebr ta kthyer sistemin tuaj n\u00eb nj\u00eb rrjet botnet.<\/p>\n<p>P\u00ebr kompanit\u00eb e vogla, gjetja e burimeve p\u00ebr t\u00eb kryer red teaming mund t\u00eb jet\u00eb e v\u00ebshtir\u00eb. N\u00eb k\u00ebt\u00eb rast, ka kuptim q\u00eb ky proces t'i besohet nj\u00eb kontraktori t\u00eb jasht\u00ebm.<\/p>\n<h2> Red Teaming: rekomandime<\/h2>\n<p>\nKoha optimale p\u00ebr t\u00eb kryer red teaming dhe shpesht\u00ebsia e tij varen nga sektori ku operoni dhe nga niveli i zhvillimit t\u00eb mekanizmave tuaj t\u00eb siguris\u00eb kibernetike.<\/p>\n<p>N\u00eb ve\u00e7anti, duhet t\u00eb keni t\u00eb automatizuara veprime t\u00eb tilla si zbulimi i aseteve dhe analiza e dob\u00ebsive. Organizata juaj duhet gjithashtu t\u00eb kombinoj\u00eb teknologjit\u00eb e automatizuara me mbik\u00ebqyrjen njer\u00ebzore, duke kryer rregullisht testime t\u00eb plota t\u00eb penetrimit.<br \/>\nPasi t\u00eb keni p\u00ebrfunduar disa cikle biznesi t\u00eb testimit t\u00eb penetrimit dhe k\u00ebrkimit t\u00eb dob\u00ebsive, mund t\u00eb kaloni te simulimi i plot\u00eb i nj\u00eb sulmi real. N\u00eb k\u00ebt\u00eb faz\u00eb, Red Teaming do t'ju sjell\u00eb p\u00ebrfitime t\u00eb dukshme. Megjithat\u00eb, p\u00ebrpjekja p\u00ebr ta zbatuar at\u00eb p\u00ebrpara se t\u00eb vendosni bazat e siguris\u00eb kibernetike nuk do t\u00eb jap\u00eb rezultate dometh\u00ebn\u00ebse.<\/p>\n<p>Nj\u00eb ekip \"white hat\" ka shum\u00eb gjasa t\u00eb komprometoj\u00eb nj\u00eb sistem t\u00eb pap\u00ebrgatitur aq shpejt dhe leht\u00eb, saq\u00eb do t\u00eb merrni shum\u00eb pak informacion p\u00ebr t\u00eb nd\u00ebrmarr\u00eb hapa t\u00eb m\u00ebtejsh\u00ebm. P\u00ebr t\u00eb arritur efekt real, informacioni i marr\u00eb nga \"red team\" duhet t\u00eb krahasohet me testet e m\u00ebparshme t\u00eb penetrimit dhe vler\u00ebsimet e dob\u00ebsive.<\/p>\n<h2> \u00c7far\u00eb \u00ebsht\u00eb testimi i penetrimit?<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Red Teaming \u2014 simulim gjith\u00ebp\u00ebrfshir\u00ebs i sulmeve. Metodologjia dhe mjetet\" src=\"\/wp-content\/uploads\/2020\/10\/e617ef8e900aac596c76e7e66673c779.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSimulimi i plot\u00eb i nj\u00eb sulmi real (Red Teaming) shpesh ngat\u00ebrrohet me <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/varonis-six-part-guide-to-penetration-testing\/\">testimin e penetrimit (pentest)<\/a><\/noindex>, por k\u00ebto dy metoda ndryshojn\u00eb disi. M\u00eb sakt\u00eb, testimi i penetrimit \u00ebsht\u00eb vet\u00ebm nj\u00eb nga metodat e Red Teaming.<\/p>\n<p>Roli i pentester-it <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/penetration-testing-explained-part-i-risky-business\/\">\u00ebsht\u00eb i p\u00ebrcaktuar mjaft qart\u00eb<\/a><\/noindex>. Puna e pentester-\u00ebve ndahet n\u00eb kat\u00ebr faza kryesore: planifikim, zbulim informacioni, sulm dhe raportim. Si\u00e7 e shihni, pentester-\u00ebt b\u00ebjn\u00eb m\u00eb shum\u00eb sesa thjesht k\u00ebrkojn\u00eb dob\u00ebsi n\u00eb softuer. Ata p\u00ebrpiqen ta vendosin veten n\u00eb vendin e haker\u00ebve dhe, pasi arrijn\u00eb t\u00eb futen n\u00eb sistemin tuaj, pik\u00ebrisht at\u00ebher\u00eb fillon puna e tyre e v\u00ebrtet\u00eb.<\/p>\n<p>Ata zbulojn\u00eb dob\u00ebsit\u00eb dhe m\u00eb pas kryejn\u00eb sulme t\u00eb reja, duke u mb\u00ebshtetur te informacioni i marr\u00eb, nd\u00ebrsa l\u00ebvizin n\u00ebp\u00ebr hierarkin\u00eb e dosjeve. Pik\u00ebrisht kjo i dallon specialist\u00ebt q\u00eb kryejn\u00eb testim penetrimi nga ata q\u00eb pun\u00ebsohen vet\u00ebm p\u00ebr t\u00eb gjetur dob\u00ebsi me ndihm\u00ebn e softuerit p\u00ebr skanimin e porteve ose zbulimin e viruseve. Nj\u00eb pentester me p\u00ebrvoj\u00eb mund t\u00eb p\u00ebrcaktoj\u00eb:<\/p>\n<ul>\n<li>ku haker\u00ebt mund ta drejtojn\u00eb sulmin e tyre;<\/li>\n<li>m\u00ebnyr\u00ebn se si haker\u00ebt do t\u00eb sulmojn\u00eb; <\/li>\n<li>si do t\u00eb sillet mbrojtja juaj; <\/li>\n<li>shkall\u00ebn e mundshme t\u00eb shkeljes. <\/li>\n<\/ul>\n<p>\nTestimi i penetrimit \u00ebsht\u00eb i orientuar drejt identifikimit t\u00eb dob\u00ebsive n\u00eb nivelin e aplikacioneve dhe rrjeteve, si dhe mund\u00ebsive p\u00ebr t\u00eb kaluar barrierat fizike t\u00eb siguris\u00eb. Nd\u00ebrsa testimi automatik mund t\u00eb zbuloj\u00eb disa probleme t\u00eb siguris\u00eb kibernetike, testimi manual i penetrimit merr parasysh gjithashtu vulnerabilitetin e biznesit ndaj sulmeve.<\/p>\n<h2> Red Teaming vs. testimi i penetrimit<\/h2>\n<p>\nPadyshim, testi i penetrimit \u00ebsht\u00eb i r\u00ebnd\u00ebsish\u00ebm, por ai \u00ebsht\u00eb vet\u00ebm nj\u00eb pjes\u00eb e nj\u00eb s\u00ebr\u00eb aktivitetesh q\u00eb kryhen gjat\u00eb redtimingut. Aktivitetet e \"kuqe\" kan\u00eb q\u00ebllime shum\u00eb m\u00eb t\u00eb gjera se ato t\u00eb pentr tester\u00ebve, t\u00eb cil\u00ebt shpesh nuk duan m\u00eb shum\u00eb se sa t\u00eb aksesojn\u00eb rrjetin. N\u00eb redtiming shpesh p\u00ebrfshihen m\u00eb shum\u00eb njer\u00ebz, burime dhe koh\u00eb, pasi specialist\u00ebt e \"kuqe\" thellohen p\u00ebr t\u00eb kuptuar plot\u00ebsisht nivelin e v\u00ebrtet\u00eb t\u00eb rrezikut dhe dob\u00ebsive n\u00eb teknologjit\u00eb, si dhe asetet njer\u00ebzore dhe fizike t\u00eb organizat\u00ebs.<\/p>\n<p>P\u00ebrve\u00e7 k\u00ebsaj, ka dallime t\u00eb tjera. Redtiming zakonisht p\u00ebrdoret nga organizatat me masa t\u00eb zhvilluara dhe t\u00eb pjekura t\u00eb siguris\u00eb kibernetike (ndon\u00ebse, n\u00eb praktik\u00eb, kjo nuk \u00ebsht\u00eb gjithmon\u00eb e v\u00ebrtet\u00eb).<\/p>\n<p>Zakonsht k\u00ebto jan\u00eb kompani q\u00eb kan\u00eb kryer tashm\u00eb testimin e penetrimit dhe kan\u00eb korrigjuar shumic\u00ebn e dob\u00ebsive t\u00eb gjetura, dhe tani po k\u00ebrkojn\u00eb dik\u00eb q\u00eb t\u00eb provoj\u00eb s\u00ebrish t\u00eb aksesoj\u00eb informacionin e ndjesh\u00ebm ose t\u00eb thyej\u00eb mbrojtjet n\u00eb \u00e7do m\u00ebnyr\u00eb.<br \/>\nKjo \u00ebsht\u00eb arsyeja pse redtiming mb\u00ebshtetet n\u00eb nj\u00eb ekip ekspert\u00ebsh t\u00eb siguris\u00eb, t\u00eb fokusuar n\u00eb nj\u00eb q\u00ebllim t\u00eb caktuar. Ata jan\u00eb t\u00eb orientuar ndaj dob\u00ebsive t\u00eb brendshme dhe p\u00ebrdorin si metoda elektronike ashtu edhe fizike t\u00eb inxhinieris\u00eb sociale ndaj punonj\u00ebsve t\u00eb organizat\u00ebs. Ndryshe nga pentr tester\u00ebt, \"kujt\u00eb e kuq\" nuk nxitohen gjat\u00eb sulmeve t\u00eb tyre, duke dashur t\u00eb shmangin zbulimin, ashtu si\u00e7 do t\u00eb vepronte nj\u00eb kriminel kibernetik i v\u00ebrtet\u00eb.<\/p>\n<h2> Avantazhet e Red Teaming<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Red Teaming \u2014 simulim gjith\u00ebp\u00ebrfshir\u00ebs i sulmeve. Metodologjia dhe mjetet\" src=\"\/wp-content\/uploads\/2020\/10\/0c9895d155dac3fc3e996366ec96b951.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSimulimi i avancuar i sulmeve t\u00eb v\u00ebrteta ka shum\u00eb p\u00ebrpar\u00ebsi, por e r\u00ebnd\u00ebsishmja \u00ebsht\u00eb se ky qasje ofron nj\u00eb pamje t\u00eb plot\u00eb t\u00eb nivelit t\u00eb siguris\u00eb kibernetike t\u00eb organizat\u00ebs. Procesi tipik i simulimit t\u00eb sulmit do t\u00eb p\u00ebrfshij\u00eb testimin e dep\u00ebrtimit (rrjeti, aplikacioni, telefoni celular dhe pajisje t\u00eb tjera), inxhinierin\u00eb sociale (n\u00eb komunikim doke, p\u00ebrmes telefonat\u00ebve, me email ose n\u00eb mesazhe dhe biseda) dhe dep\u00ebrtimin fizik (thyerjen e bllokimeve, zbulimin e zonave t\u00eb vdekur t\u00eb kamerave t\u00eb mbik\u00ebqyrjes, kalimin e sistemeve t\u00eb alarmit). N\u00ebse ka dob\u00ebsi n\u00eb ndonj\u00eb nga k\u00ebto aspekte t\u00eb sistemit tuaj, do t\u00eb zbulohen.<\/p>\n<p>Sapo t\u00eb identifikohen dob\u00ebsit\u00eb, ato mund t\u00eb rregullohen. Nj\u00eb procedur\u00eb efektive e simulimit t\u00eb sulmit nuk mbaron pas zbulimit t\u00eb dob\u00ebsive. Pasi mang\u00ebsit\u00eb e siguris\u00eb t\u00eb jen\u00eb identifikuar qart\u00eb, d\u00ebshironi t\u00eb punoni p\u00ebr rregullimin e tyre dhe testimin e ri. N\u00eb fakt, puna e v\u00ebrtet\u00eb zakonisht fillon pas dep\u00ebrtimit t\u00eb \"skuadr\u00ebs s\u00eb kuqe\", kur ju kryeni nj\u00eb analiz\u00eb forenzike t\u00eb sulmit dhe p\u00ebrpiqeni t\u00eb reduktoni dob\u00ebsit\u00eb e gjetura.<\/p>\n<p>P\u00ebrve\u00e7 k\u00ebtyre dy p\u00ebrpar\u00ebsive kryesore, red teaming ofron gjithashtu nj\u00eb s\u00ebr\u00eb p\u00ebrfitimesh t\u00eb tjera. Pra, \"skuadra e kuqe\" mund t\u00eb:<\/p>\n<ul>\n<li>identifikoj\u00eb rreziqet dhe dob\u00ebsit\u00eb ndaj sulmeve n\u00eb asetet ky\u00e7e informacionit t\u00eb biznesit;<\/li>\n<li>modeloj\u00eb metodat, taktik\u00ebn dhe procedurat e sulmuesve t\u00eb v\u00ebrtet\u00eb n\u00eb nj\u00eb ambient me risk t\u00eb kufizuar dhe t\u00eb kontrolluar; <\/li>\n<li>vler\u00ebsoj\u00eb aft\u00ebsin\u00eb e organizat\u00ebs tuaj p\u00ebr t\u00eb zbuluar, reaguar dhe parandaluar k\u00ebrc\u00ebnime t\u00eb komplikuara t\u00eb targetuara; <\/li>\n<li>nxis\u00eb bashk\u00ebpunimin e ngusht\u00eb me departamentet e siguris\u00eb dhe \"skuadrat e blu\", p\u00ebr t\u00eb siguruar nj\u00eb zvog\u00eblim t\u00eb ndjesh\u00ebm t\u00eb pasojave dhe p\u00ebr t\u00eb zhvilluar seminare praktike t\u00eb detajizuara p\u00ebr rezultatet e dob\u00ebsive t\u00eb zbuluara. <\/li>\n<\/ul>\n<p><\/p>\n<h2> Si funksionon Red Teaming? <\/h2>\n<p>\nNj\u00eb m\u00ebnyr\u00eb e shk\u00eblqyer p\u00ebr t\u00eb kuptuar parimin e funksionimit t\u00eb red team \u00ebsht\u00eb t\u00eb shikoni se si ndodh zakonisht. Procesi tipik i simulimit t\u00eb sulmeve p\u00ebrb\u00ebhet nga disa hapa:<\/p>\n<ul>\n<li>Organizata p\u00ebrputhet me \"skuadr\u00ebn e kuqe\" (t\u00eb brendshme ose t\u00eb jashtme) p\u00ebr objektivin e sulmit t\u00eb kryer. P\u00ebr shembull, nj\u00eb objektiv i till\u00eb mund t\u00eb jet\u00eb nxjerrja e informacionit t\u00eb besuesh\u00ebm nga nj\u00eb server i caktuar.<\/li>\n<li>M\u00eb pas, \u00abred team\u00bb kryen zbulimin e objektivit. Si rezultat, hartohet nj\u00eb skem\u00eb e sistemeve t\u00eb synuara, duke p\u00ebrfshir\u00eb sh\u00ebrbimet e rrjetit, aplikacionet web dhe portalet e brendshme p\u00ebr punonj\u00ebsit. .<\/li>\n<li>Pas k\u00ebsaj, n\u00eb sistemin e synuar k\u00ebrkohen dob\u00ebsi, t\u00eb cilat zakonisht shfryt\u00ebzohen p\u00ebrmes phishing ose sulmeve XSS. .<\/li>\n<li>Sapo t\u00eb merren token\u00ebt e aksesit, \u00abred team\u00bb i p\u00ebrdor ato p\u00ebr t\u00eb hulumtuar dob\u00ebsi t\u00eb m\u00ebtejshme. .<\/li>\n<li>N\u00ebse zbulohen dob\u00ebsi t\u00eb tjera, \u00abred team\u00bb do t\u00eb p\u00ebrpiqet t\u00eb rris\u00eb nivelin e vet t\u00eb aksesit deri n\u00eb shkall\u00ebn e nevojshme p\u00ebr arritjen e objektivit. .<\/li>\n<li>Kur arrihet aksesi te t\u00eb dh\u00ebnat ose asetet e synuara, detyra e sulmit konsiderohet e p\u00ebrmbushur.<\/li>\n<\/ul>\n<p>\nN\u00eb fakt, nj\u00eb specialist me p\u00ebrvoj\u00eb i \u00abred team\u00bb do t\u00eb p\u00ebrdor\u00eb nj\u00eb num\u00ebr t\u00eb madh metodash t\u00eb ndryshme p\u00ebr t\u00eb kaluar secilin nga hapat e p\u00ebrmendur m\u00eb sip\u00ebr. Megjithat\u00eb, p\u00ebrfundimi kryesor nga shembulli i m\u00ebsip\u00ebrm \u00ebsht\u00eb se dob\u00ebsit\u00eb e vogla n\u00eb sisteme t\u00eb ve\u00e7anta mund t\u00eb kthehen n\u00eb d\u00ebshtime katastrofike n\u00ebse lidhen n\u00eb nj\u00eb zinxhir.<\/p>\n<h2> \u00c7far\u00eb duhet t\u00eb keni parasysh kur i drejtoheni nj\u00eb \u00abred team\u00bb? <\/h2>\n<p>\n<img decoding=\"async\" alt=\"Red Teaming \u2014 simulim gjith\u00ebp\u00ebrfshir\u00ebs i sulmeve. Metodologjia dhe mjetet\" src=\"\/wp-content\/uploads\/2020\/10\/70892885775ca71b132d6a3b4321923a.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nP\u00ebr t\u00eb p\u00ebrfituar sa m\u00eb shum\u00eb nga red teaming, duhet t\u00eb p\u00ebrgatiteni me kujdes. Sistemet dhe proceset q\u00eb p\u00ebrdor \u00e7do organizat\u00eb jan\u00eb t\u00eb ndryshme, dhe niveli i lart\u00eb i red teaming arrihet kur ai synon t\u00eb gjej\u00eb dob\u00ebsi pik\u00ebrisht n\u00eb sistemet tuaja. P\u00ebr k\u00ebt\u00eb arsye, \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb merren parasysh nj\u00eb s\u00ebr\u00eb faktor\u00ebsh:<\/p>\n<h3>Dijeni \u00e7far\u00eb k\u00ebrkoni<\/h3>\n<p>\nPara s\u00eb gjithash, \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb kuptoni se cilat sisteme dhe procese d\u00ebshironi t\u00eb testoni. Ndoshta e dini se doni t\u00eb testoni nj\u00eb aplikacion web, por nuk e kuptoni shum\u00eb mir\u00eb se \u00e7far\u00eb do t\u00eb thot\u00eb kjo n\u00eb praktik\u00eb dhe cilat sisteme t\u00eb tjera jan\u00eb t\u00eb integruara me aplikacionet tuaja web. Prandaj, \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u2019i njihni mir\u00eb sistemet tuaja dhe t\u00eb korrigjoni t\u00eb gjitha dob\u00ebsit\u00eb e dukshme p\u00ebrpara se t\u00eb filloni nj\u00eb simulim t\u00eb plot\u00eb t\u00eb nj\u00eb sulmi real.<\/p>\n<h3>Dijeni rrjetin tuaj<\/h3>\n<p>\nKjo lidhet me rekomandimin e m\u00ebparsh\u00ebm, por ka t\u00eb b\u00ebj\u00eb m\u00eb shum\u00eb me karakteristikat teknike t\u00eb rrjetit tuaj. Sa m\u00eb mir\u00eb ta vler\u00ebsoni n\u00eb m\u00ebnyr\u00eb t\u00eb matshme mjedisin e testimit, aq m\u00eb sakt\u00eb dhe m\u00eb konkretisht do t\u00eb veproj\u00eb \u00abred team\u00bb juaj.<\/p>\n<h3>Dijeni buxhetin tuaj<\/h3>\n<p>\nRed Teaming mund t\u00eb realizohet n\u00eb nivele t\u00eb ndryshme, por imitim i spektreve t\u00eb plota t\u00eb sulmeve ndaj rrjetit tuaj, duke p\u00ebrfshir\u00eb inxhinierin\u00eb sociale dhe nd\u00ebrhyrjet fizike, mund t\u00eb jet\u00eb nj\u00eb nism\u00eb e shtrenjt\u00eb. P\u00ebr k\u00ebt\u00eb arsye, \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb kuptoni se sa mund t\u00eb shpenzoni p\u00ebr nj\u00eb verifikim t\u00eb till\u00eb dhe, p\u00ebrkat\u00ebsisht, t\u00eb p\u00ebrcaktoni p\u00ebrmasat e saj.<\/p>\n<h3>Dini nivelin tuaj t\u00eb rrezikut<\/h3>\n<p>\nDisa organizata mund t\u00eb tolerojn\u00eb nj\u00eb nivel t\u00eb lart\u00eb rreziku si pjes\u00eb e procedurave t\u00eb tyre t\u00eb zakonshme t\u00eb biznesit. T\u00eb tjer\u00ebve do t'u duhet t\u00eb kufizojn\u00eb nivelin e rrezikut n\u00eb nj\u00eb mas\u00eb shum\u00eb m\u00eb t\u00eb madhe, ve\u00e7an\u00ebrisht n\u00ebse kompania operon n\u00eb nj\u00eb industri me rregullore t\u00eb larta. Prandaj, kur kryhet red teaming, \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb p\u00ebrqendroheni n\u00eb rreziqet q\u00eb me t\u00eb v\u00ebrtet\u00eb p\u00ebrb\u00ebjn\u00eb k\u00ebrc\u00ebnim p\u00ebr biznesin tuaj.<\/p>\n<h2> Red Teaming: mjetet dhe taktikat<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Red Teaming \u2014 simulim gjith\u00ebp\u00ebrfshir\u00ebs i sulmeve. Metodologjia dhe mjetet\" src=\"\/wp-content\/uploads\/2020\/10\/a3d807258e5254ebdd025e76076f7915.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nMe realizimin e duhur, \"ekipi i kuq\" do t\u00eb kryej\u00eb nj\u00eb sulm t\u00eb plot\u00eb ndaj rrjeteve tuaja duke p\u00ebrdorur t\u00eb gjitha mjetet dhe metodat q\u00eb p\u00ebrdorin hakerat. Kjo p\u00ebrfshin, nd\u00ebr t\u00eb tjera:<\/p>\n<ul>\n<li><strong>Testimi i aplikacioneve p\u00ebr dep\u00ebrtim <\/strong>\u2014 fokusohet n\u00eb identifikimin e dob\u00ebsive n\u00eb nivel t\u00eb aplikacioneve, si\u00e7 jan\u00eb mashtrimet e k\u00ebrkesave nd\u00ebrfaq\u00ebsore, dob\u00ebsit\u00eb e hyrjeve, menaxhimi i dob\u00ebt i seancave dhe shum\u00eb t\u00eb tjera.<\/li>\n<li><strong>Testimi i rrjetit p\u00ebr dep\u00ebrtim <\/strong>\u2014 fokusohet n\u00eb identifikimin e dob\u00ebsive n\u00eb nivel t\u00eb rrjetit dhe sistemit, duke p\u00ebrfshir\u00eb konfigurimet e gabuara, dob\u00ebsit\u00eb e rrjetit pa kabllo, sh\u00ebrbimet e paautorizuara dhe shum\u00eb t\u00eb tjera. <\/li>\n<li><strong>Testimi fizik p\u00ebr dep\u00ebrtim<\/strong> \u2014 kontrollimi i efikasitetit, si dhe i pikave t\u00eb forta dhe t\u00eb dob\u00ebta t\u00eb mjeteve fizike t\u00eb kontrollit t\u00eb siguris\u00eb n\u00eb jet\u00ebn reale. <\/li>\n<li><strong>Inxhinieria sociale <\/strong>\u2014 synon t\u00eb p\u00ebrdor\u00eb dob\u00ebsit\u00eb e njer\u00ebzve dhe natyr\u00ebs njer\u00ebzore, t\u00eb testoj\u00eb prirshm\u00ebrin\u00eb e njer\u00ebzve ndaj mashtimit, bindjes dhe manipulimeve p\u00ebrmes phishing-ut n\u00eb email, telefonat dhe mesazhet tekstuale, si dhe n\u00eb kontaktin fizik n\u00eb vend. <\/li>\n<\/ul>\n<p>\nT\u00eb gjitha k\u00ebto elemente jan\u00eb komponente t\u00eb red teaming. Kjo \u00ebsht\u00eb nj\u00eb modelim i plot\u00eb n\u00eb shum\u00eb nivele t\u00eb sulmeve, menduar p\u00ebr t\u00eb p\u00ebrcaktuar se sa mir\u00eb njer\u00ebzit tuaj, rrjetet, aplikacionet dhe mjetet fizike t\u00eb kontrollit t\u00eb siguris\u00eb mund t\u00eb rezistojn\u00eb ndaj nj\u00eb sulmi nga nj\u00eb keqb\u00ebr\u00ebs real. <\/p>\n<h2>Zhvillimi i vazhduesh\u00ebm i metodave t\u00eb Red Teaming<\/h2>\n<p>\nNatyra e simulimeve komplekse t\u00eb sulmeve reale, ku \u201cred teams\u201d p\u00ebrpiqen t\u00eb gjejn\u00eb dob\u00ebsi t\u00eb reja n\u00eb sistemin e siguris\u00eb, nd\u00ebrsa \u201cblue teams\u201d p\u00ebrpiqen t\u2019i korrigjojn\u00eb ato, sjell zhvillim t\u00eb vazhduesh\u00ebm t\u00eb metodave t\u00eb tilla t\u00eb testimit. P\u00ebr k\u00ebt\u00eb arsye, \u00ebsht\u00eb e v\u00ebshtir\u00eb t\u00eb p\u00ebrpilohet nj\u00eb list\u00eb aktuale e teknikave moderne t\u00eb red teaming, pasi ato vjetrohen shum\u00eb shpejt.<\/p>\n<p>Prandaj, shumica e specialist\u00ebve q\u00eb merren me red teaming do t\u00eb kalojn\u00eb t\u00eb pakt\u00ebn nj\u00eb pjes\u00eb t\u00eb koh\u00ebs s\u00eb tyre duke studiuar dob\u00ebsi t\u00eb reja dhe metodat e shfryt\u00ebzimit t\u00eb tyre, duke p\u00ebrdorur shum\u00eb nga burimet q\u00eb ofron komuniteti i \u201cred teams\u201d. Ja disa nga komunitetet m\u00eb t\u00eb njohura t\u00eb k\u00ebtij lloji:<\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.pentesteracademy.com\/\">Pentester Academy <\/a><\/noindex>\u2014 \u00ebsht\u00eb nj\u00eb sh\u00ebrbim me abonim q\u00eb ofron videokurse online t\u00eb fokusuara kryesisht n\u00eb testimin e penetrimit, si edhe kurse p\u00ebr forenzik\u00ebn e sistemeve operative, detyra t\u00eb inxhinieris\u00eb sociale dhe gjuh\u00ebn assembler p\u00ebr sigurin\u00eb e informacionit.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.linkedin.com\/in\/vincent-yiu\/\">Vincent Yiu <\/a><\/noindex>\u2014 \u00ebsht\u00eb nj\u00eb \u201coperator i siguris\u00eb kibernetike ofensive\u201d q\u00eb mban rregullisht nj\u00eb blog mbi metodat e simulimit kompleks t\u00eb sulmeve reale dhe \u00ebsht\u00eb nj\u00eb burim i mir\u00eb p\u00ebr qasje t\u00eb reja.<\/li>\n<li>Twitter \u00ebsht\u00eb gjithashtu nj\u00eb burim i mir\u00eb n\u00ebse k\u00ebrkoni informacion aktual p\u00ebr red teaming. Mund ta gjeni sipas hashtag-eve <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/hashtag\/redteam\">#redteam<\/a><\/noindex> dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/hashtag\/redteaming\">#redteaming<\/a><\/noindex>.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/DanielMiessler\">Daniel Miessler<\/a><\/noindex> \u2014 \u00ebsht\u00eb nj\u00eb tjet\u00ebr specialist me p\u00ebrvoj\u00eb n\u00eb red teaming, i cili publikon nj\u00eb newsletter dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/overcast.fm\/+GrY_qF4ss\">podkast<\/a><\/noindex>, mban<noindex><a rel=\"nofollow\" href=\"https:\/\/danielmiessler.com\/\"> faqe interneti<\/a><\/noindex> dhe shkruan shum\u00eb p\u00ebr tendencat moderne t\u00eb \u201cred teams\u201d. Nd\u00ebr artikujt e tij m\u00eb t\u00eb fundit jan\u00eb: <noindex><a rel=\"nofollow\" href=\"https:\/\/danielmiessler.com\/blog\/purple-team-pentests-mean-youre-failing-at-red-and-blue\/\">\u201cPentest-i i purple team do t\u00eb thot\u00eb se red team dhe blue team juaj kan\u00eb d\u00ebshtuar\u201d<\/a><\/noindex> dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/danielmiessler.com\/blog\/when-vulnerability-assessments-pentesting-red-team-bug-bounties\/\">\u201cShp\u00ebrblimet p\u00ebr dob\u00ebsit\u00eb e zbuluara dhe kur duhet t\u00eb p\u00ebrdorni vler\u00ebsimin e dob\u00ebsive, testimin e penetrimit dhe simulimin kompleks t\u00eb sulmit\u201d<\/a><\/noindex>.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/portswigger.net\/daily-swig\">Daily Swig<\/a><\/noindex> \u2014 \u00ebsht\u00eb nj\u00eb newsletter p\u00ebr sigurin\u00eb n\u00eb ueb, i sponsorizuar nga PortSwigger Web Security. \u00cbsht\u00eb nj\u00eb burim i mir\u00eb p\u00ebr t\u00eb m\u00ebsuar rreth zhvillimeve dhe lajmeve n\u00eb fush\u00ebn e red teaming \u2014 hakerime, rrjedhje t\u00eb t\u00eb dh\u00ebnave, exploite, dob\u00ebsi t\u00eb aplikacioneve n\u00eb ueb dhe teknologji t\u00eb reja sigurie.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/HanseSecure\">Florian Hansemann <\/a><\/noindex>\u2014 \u00ebsht\u00eb nj\u00eb \u201cwhite hat hacker\u201d dhe specialist i testimit t\u00eb penetrimit; ai trajton rregullisht taktika t\u00eb reja t\u00eb \u201cred team\u201d n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/hansesecure.de\/blog\/\">blog<\/a><\/noindex>.<\/li>\n<li>MWR labs \u00ebsht\u00eb nj\u00eb burim i mir\u00eb, megjith\u00ebse jasht\u00ebzakonisht teknik, p\u00ebr lajmet mbi red teaming. Ata publikojn\u00eb materiale t\u00eb dobishme p\u00ebr red teams <noindex><a rel=\"nofollow\" href=\"https:\/\/labs.mwrinfosecurity.com\/tools\/\">mjete<\/a><\/noindex>, nd\u00ebrsa e tyre <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/mwrlabs\">burimi n\u00eb Twitter <\/a><\/noindex>p\u00ebrmban k\u00ebshilla p\u00ebr zgjidhjen e problemeve me t\u00eb cilat p\u00ebrballen specialist\u00ebt e testimit t\u00eb siguris\u00eb.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/Alra3ees\">Emad Shanab<\/a><\/noindex> \u2014 \u00ebsht\u00eb jurist dhe \u00abwhite hat hacker\u00bb. N\u00eb burimin e tij n\u00eb Twitter ka metoda t\u00eb dobishme p\u00ebr \u00abred team\u00bb, si shkrimi i SQL injection dhe falsifikimi i OAuth tokens.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/attack.mitre.org\/wiki\/Main_Page\">Njohurit\u00eb, Teknikat dhe Taktik\u00ebt e Mitre p\u00ebr Sfidat Adversariale<\/a><\/noindex> (ATT &amp; CK) \u00ebsht\u00eb nj\u00eb baz\u00eb njohurish e kuruar me kujdes mbi sjelljen e sulmuesve. Ajo ndjek fazat e ciklit jet\u00ebsor t\u00eb sulmuesve dhe platformat q\u00eb ata synojn\u00eb.<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.amazon.com\/Hacker-Playbook-Practical-Penetration-Testing-ebook\/dp\/B07CSPFYZ2\">The Hacker Playbook<\/a><\/noindex> \u2014 \u00ebsht\u00eb nj\u00eb udh\u00ebzues p\u00ebr haker\u00eb q\u00eb, megjith\u00ebse mjaft i vjet\u00ebr, mbulon shum\u00eb metoda themelore q\u00eb ende q\u00ebndrojn\u00eb n\u00eb baz\u00eb t\u00eb simulimit t\u00eb avancuar t\u00eb sulmeve reale. Autori, Peter Kim, ka gjithashtu <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/hackerplaybook?lang=en\">burimi n\u00eb Twitter<\/a><\/noindex>, ku ai ndan k\u00ebshilla p\u00ebr hakerim dhe informacione t\u00eb tjera.<\/li>\n<li>SANS Institute \u00ebsht\u00eb nj\u00eb tjet\u00ebr ofrues i madh i materialeve trajnuese p\u00ebr kibernsiguri. I tyre <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/sansforensics\">kanali n\u00eb Twitter<\/a><\/noindex>, i dedikuar forenzik\u00ebs digjitale dhe reagimit ndaj incidenteve, p\u00ebrmban lajmet m\u00eb t\u00eb fundit rreth kurseve t\u00eb SANS dhe k\u00ebshilla nga ekspert\u00eb praktikues.<\/li>\n<li>Disa nga risit\u00eb m\u00eb interesante p\u00ebr Red Teaming publikohen n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/redteamjournal.com\/\">Red Team Journal<\/a><\/noindex>. Aty do t\u00eb gjeni artikuj t\u00eb orientuar nga teknologjia, si krahasimi i Red Teaming me testimin e penetrimit, si edhe analiza t\u00eb tilla si \u00abManifesti i specialistit t\u00eb red team\u00bb.<\/li>\n<li>S\u00eb fundi, Awesome Red Teaming \u00ebsht\u00eb nj\u00eb komunitet n\u00eb GitHub q\u00eb ofron <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/yeyintminthuhtut\/Awesome-Red-Teaming\">nj\u00eb list\u00eb shum\u00eb t\u00eb detajuar <\/a><\/noindex>burimesh kushtuar Red Teaming. Ajo mbulon pothuajse t\u00eb gjitha aspektet teknike t\u00eb pun\u00ebs s\u00eb \u00abred team\u00bb, nga sigurimi i aksesit fillestar dhe ekzekutimi i veprimeve keqdash\u00ebse deri te mbledhja dhe nxjerrja e t\u00eb dh\u00ebnave.<\/li>\n<\/ul>\n<p><\/p>\n<h2> \u00c7far\u00eb \u00ebsht\u00eb \u00abblue team\u00bb?<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Red Teaming \u2014 simulim gjith\u00ebp\u00ebrfshir\u00ebs i sulmeve. Metodologjia dhe mjetet\" src=\"\/wp-content\/uploads\/2020\/10\/9400932d18d0368c694e85087d026a16.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nMe kaq shum\u00eb ekipe \u00abme ngjyra\u00bb, mund t\u00eb jet\u00eb e v\u00ebshtir\u00eb t\u00eb p\u00ebrcaktoni se cili lloj i nevojitet organizat\u00ebs suaj.<\/p>\n<p>Nj\u00eb nga alternativat e \"ekipit t\u00eb kuq\", madje nj\u00eb lloj tjet\u00ebr ekipit q\u00eb mund t\u00eb p\u00ebrdoret s\u00eb bashku me \"ekipin e kuq\", \u00ebsht\u00eb \"ekipi blu\". \"Ekipi blu\" gjithashtu vler\u00ebson sigurin\u00eb e rrjetit dhe identifikon \u00e7do dob\u00ebsi t\u00eb mundshme t\u00eb infrastruktur\u00ebs. Megjithat\u00eb, ai ka nj\u00eb q\u00ebllim tjet\u00ebr. Ekipet e k\u00ebtij lloji jan\u00eb t\u00eb nevojshme p\u00ebr t\u00eb gjetur m\u00ebnyra p\u00ebr t\u00eb mbrojtur, ndryshuar dhe riorganizuar mekanizmat mbrojt\u00ebs, n\u00eb m\u00ebnyr\u00eb q\u00eb p\u00ebrgjigja ndaj incidenteve t\u00eb jet\u00eb shum\u00eb m\u00eb efektive.<\/p>\n<p>Si \"ekipi i kuq\", ashtu edhe ekipi blu duhet t\u00eb ket\u00eb t\u00eb nj\u00ebjtin njohuri mbi taktikat e kriminel\u00ebve, teknikat dhe procedurat n\u00eb baz\u00eb t\u00eb t\u00eb cilave t\u00eb krijoj\u00eb strategji p\u00ebrgjigjeje. Megjithat\u00eb, detyrat e \"ekipit blu\" nuk kufizohen vet\u00ebm n\u00eb mbrojtjen nga sulmet. Ai merr pjes\u00eb gjithashtu n\u00eb forcimin e t\u00ebr\u00eb infrastruktur\u00ebs s\u00eb siguris\u00eb, duke p\u00ebrdorur, p\u00ebr shembull, nj\u00eb sistem t\u00eb zbulimit t\u00eb nd\u00ebrhyrjeve (IDS) q\u00eb ofron nj\u00eb analiz\u00eb t\u00eb vazhdueshme t\u00eb veprimtaris\u00eb s\u00eb zakonshme dhe t\u00eb dyshimt\u00eb.<\/p>\n<p>Ja disa nga hapat q\u00eb p\u00ebrfundon \"ekipi blu\":<\/p>\n<ul>\n<li>auditimi i siguris\u00eb, ve\u00e7an\u00ebrisht auditimi i DNS;<\/li>\n<li>analiza e regjistrave dhe kujtes\u00ebs; <\/li>\n<li>analiza epaketave t\u00eb t\u00eb dh\u00ebnave rrjet\u00eb; <\/li>\n<li>analiza e t\u00eb dh\u00ebnave mbi rreziqet; <\/li>\n<li>analiza e gjurm\u00ebve dixhitale; <\/li>\n<li>rikthimi i zhvillimit; <\/li>\n<li>testimi DDoS; <\/li>\n<li>zhvillimi i skenar\u00ebve t\u00eb realizimit t\u00eb rreziqeve. <\/li>\n<\/ul>\n<p><\/p>\n<h3>Dallimet midis ekipit t\u00eb kuq dhe ekipit blu<\/h3>\n<p>\nNj\u00eb pyetje e zakonshme p\u00ebr shum\u00eb organizata: cilin ekip \u00ebsht\u00eb m\u00eb mir\u00eb ta p\u00ebrdorin - ekipin e kuq apo at\u00eb blu. Kjo pyetje gjithashtu shoq\u00ebrohet shpesh me nj\u00eb mospranim miq\u00ebsor nd\u00ebrmjet njer\u00ebzve q\u00eb punojn\u00eb \"nga an\u00ebt e ndryshme t\u00eb barrikad\u00ebs\". N\u00eb t\u00eb v\u00ebrtet\u00eb, asnj\u00eb ekip nuk ka kuptim pa tjetrin. Prandaj, p\u00ebrgjigja e sakt\u00eb p\u00ebr k\u00ebt\u00eb pyetje \u00ebsht\u00eb se t\u00eb dy ekipet jan\u00eb t\u00eb r\u00ebnd\u00ebsishme.<\/p>\n<p>\"Ekipi i kuq\" sulmon dhe p\u00ebrdoret p\u00ebr t\u00eb testuar gatishm\u00ebrin\u00eb e \"ekipit blu\" p\u00ebr mbrojtje. Ndonj\u00ebher\u00eb, \"ekipi i kuq\" mund t\u00eb zbuloj\u00eb dob\u00ebsi q\u00eb \"ekipi blu\" plot\u00ebsisht i ka humbur nga syt\u00eb dhe n\u00eb k\u00ebt\u00eb rast, \"ekipi i kuq\" duhet t\u00eb tregoj\u00eb se si k\u00ebto dob\u00ebsi mund t\u00eb rregullohen.<\/p>\n<p>P\u00ebr t\u00eb dy ekipet, \u00ebsht\u00eb jetike t\u00eb punojn\u00eb s\u00eb bashku kund\u00ebr kriminel\u00ebve kibernetik\u00eb p\u00ebr forcimin e siguris\u00eb informacionit.<\/p>\n<p>P\u00ebr k\u00ebt\u00eb arsye, nuk ka kuptim t\u00eb zgjidhni vet\u00ebm nj\u00eb an\u00eb ose t\u00eb investoni vet\u00ebm n\u00eb nj\u00eb tip skuadre. \u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb mbani mend se q\u00ebllimi i t\u00eb dyja an\u00ebve \u00ebsht\u00eb parandalimi i krimeve kompjuterike.<br \/>\nMe fjal\u00eb t\u00eb tjera, kompanit\u00eb duhet t\u00eb krijojn\u00eb nj\u00eb bashk\u00ebpunim t\u00eb nd\u00ebrsjell\u00eb midis t\u00eb dyja grupeve, p\u00ebr t\u00eb siguruar nj\u00eb auditim t\u00eb plot\u00eb - me regjistrat e t\u00eb gjitha sulmeve dhe kontrolleve t\u00eb kryera, si dhe sh\u00ebnimet e karakteristikave t\u00eb zbuluara.<\/p>\n<p>\u00abSkuadra e Kuqe\u00bb siguron informacion mbi operacionet q\u00eb kan\u00eb kryer gjat\u00eb simulimit t\u00eb sulmit, nd\u00ebrsa skuadra e kalt\u00ebr ofron detaje mbi veprimet q\u00eb kan\u00eb nd\u00ebrmarr\u00eb p\u00ebr t\u00eb mbushur boshll\u00ebqet dhe p\u00ebr t\u00eb eliminuar dob\u00ebsit\u00eb e gjetura.<\/p>\n<p>Nuk duhet n\u00ebnvler\u00ebsuar r\u00ebnd\u00ebsia e t\u00eb dyja grupeve. Pa auditimin e tyre t\u00eb vazhduesh\u00ebm t\u00eb siguris\u00eb, testimin e dep\u00ebrtimit dhe p\u00ebrmir\u00ebsimin e infrastruktur\u00ebs, kompanit\u00eb nuk do t\u00eb dinin p\u00ebr gjendjen e siguris\u00eb s\u00eb tyre. T\u00eb pakt\u00ebn derisa t\u00eb ndodhte nj\u00eb rrjedhje t\u00eb dh\u00ebnash, dhe do t\u00eb b\u00ebhej shum\u00eb e qart\u00eb se masat e siguris\u00eb ishin t\u00eb pamjaftueshme.<\/p>\n<h3>\u00c7far\u00eb \u00ebsht\u00eb \u00abSkuadra e P\u00ebrgjithshme\u00bb?<\/h3>\n<p>\n\u00abSkuadra e P\u00ebrgjithshme\u00bb ka dal\u00eb nga p\u00ebrpjekjet p\u00ebr t\u00eb bashkuar skuadrat e kuqe dhe blu. \u00abSkuadra e P\u00ebrgjithshme\u00bb \u00ebsht\u00eb m\u00eb shum\u00eb nj\u00eb koncept sesa nj\u00eb tip i ve\u00e7ant\u00eb skuadre. Ajo duhen par\u00eb si nj\u00eb kombinim i skuadrave t\u00eb kuqe dhe blu. Ajo angazhon t\u00eb dyja skuadrat, duke i ndihmuar ata t\u00eb punojn\u00eb s\u00eb bashku.<\/p>\n<p>\u00abSkuadra e P\u00ebrgjithshme\u00bb mund t\u00eb ndihmoj\u00eb sh\u00ebrbimet e siguris\u00eb t\u00eb rrisin efikasitetin e zb\u00ebrthimit t\u00eb dob\u00ebsive, identifikimit t\u00eb k\u00ebrc\u00ebnimeve dhe monitorimit t\u00eb rrjetit p\u00ebrmes modelimit t\u00eb sakt\u00eb t\u00eb skenar\u00ebve t\u00eb zakonsh\u00ebm t\u00eb k\u00ebrc\u00ebnimeve dhe ndihm\u00ebs n\u00eb krijimin e metodave t\u00eb reja t\u00eb zb\u00ebrthimit dhe parandalimit t\u00eb k\u00ebrc\u00ebnimeve.<\/p>\n<p>Disa organizata angazhojn\u00eb \u00abskuadr\u00ebn e p\u00ebrgjithshme\u00bb p\u00ebr ngjarje t\u00eb ve\u00e7anta me q\u00ebllim, ku objektivat e siguris\u00eb, afatet dhe rezultatet ky\u00e7e jan\u00eb t\u00eb p\u00ebrcaktuara qart\u00eb. Kjo p\u00ebrfshin pranimin e dob\u00ebsive n\u00eb sulm dhe mbrojtje, si dhe p\u00ebrcaktimin e k\u00ebrkesave t\u00eb ardhshme p\u00ebr trajnim dhe teknologji.<\/p>\n<p>Nj\u00eb qasje alternative, q\u00eb po merr popullaritet, \u00ebsht\u00eb t\u00eb shihet \u00abskuadra e p\u00ebrgjithshme\u00bb si nj\u00eb model konceptual q\u00eb funksionon n\u00eb t\u00eb gjith\u00eb organizat\u00ebn, duke kontribuar n\u00eb krijimin e nj\u00eb kulture t\u00eb siguris\u00eb kibernetike dhe p\u00ebrmir\u00ebsimit t\u00eb saj t\u00eb vazhduesh\u00ebm.<\/p>\n<h2> P\u00ebrfundim<\/h2>\n<p>\nRed Teaming, ose imitim i plot\u00eb i sulmeve \u2013 \u00ebsht\u00eb nj\u00eb metod\u00eb e fuqishme p\u00ebr testimin e dob\u00ebsive n\u00eb sistemin e siguris\u00eb t\u00eb nj\u00eb organizate, por duhet t\u00eb aplikohet me kujdes. N\u00eb ve\u00e7anti, p\u00ebr ta aplikuar at\u00eb ju nevojitet nj\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/cybersecurity-tips\/\">ndihm\u00eb e zhvilluar p\u00ebr mbrojtjen e siguris\u00eb informatike<\/a><\/noindex>, p\u00ebrndryshe mund t\u00eb mos justifikoj\u00eb pritshm\u00ebrit\u00eb e vendosura mbi t\u00eb.<br \/>\nRed Teaming mund t\u00eb zbuloj\u00eb dob\u00ebsi n\u00eb sistemin tuaj p\u00ebr t\u00eb cilat nuk keni pasur as iden\u00eb, dhe t\u00eb ndihmoj\u00eb n\u00eb eliminimin e tyre. Duke aplikuar nj\u00eb qasje konkurruese mes ekipeve blu dhe t\u00eb kuqe, mund t\u00eb modeloni veprimet e nj\u00eb hakeri t\u00eb v\u00ebrtet\u00eb, sikur ai t\u00eb d\u00ebshiron t\u00eb vjedh\u00eb t\u00eb dh\u00ebnat tuaja ose t\u00eb d\u00ebmtoj\u00eb asetet tuaja.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/varonis\/blog\/524308\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: Acunetix Red Teaming (\u0430\u0442\u0430\u043a\u0430 \u00ab\u043a\u0440\u0430\u0441\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b\u00bb) \u2013 \u044d\u0442\u043e \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u0430\u044f \u0438\u043c\u0438\u0442\u0430\u0446\u0438\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0441 \u0446\u0435\u043b\u044c\u044e \u043e\u0446\u0435\u043d\u043a\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c. \u00ab\u041a\u0440\u0430\u0441\u043d\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u00bb \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0443 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u043e\u0432 (\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0438\u0445 \u0442\u0435\u0441\u0442 \u043d\u0430 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443). \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043a\u0430\u043a \u043d\u0430\u043d\u044f\u0442\u044b\u043c\u0438 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b, \u0442\u0430\u043a \u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\u043c\u0438 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u043d\u043e \u0432\u043e \u0432\u0441\u0435\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0445 \u0440\u043e\u043b\u044c \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u0430 \u2014 \u0438\u043c\u0438\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97777,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97776","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/red-teaming-kompleksnaya-imitacziya-atak-metodologiya-i-instrumenty\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Red Teaming \u2014 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u0430\u044f \u0438\u043c\u0438\u0442\u0430\u0446\u0438\u044f \u0430\u0442\u0430\u043a. \u041c\u0435\u0442\u043e\u0434\u043e\u043b\u043e\u0433\u0438\u044f \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/red-teaming-kompleksnaya-imitacziya-atak-metodologiya-i-instrumenty\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-21T18:42:28+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-21T18:42:28+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Red Teaming \u2013 imitim i plot\u00eb i sulmeve. Metodologjia dhe mjetet | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/red-teaming-kompleksnaya-imitacziya-atak-metodologiya-i-instrumenty","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Red Teaming \u2014 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u0430\u044f \u0438\u043c\u0438\u0442\u0430\u0446\u0438\u044f \u0430\u0442\u0430\u043a. \u041c\u0435\u0442\u043e\u0434\u043e\u043b\u043e\u0433\u0438\u044f \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/red-teaming-kompleksnaya-imitacziya-atak-metodologiya-i-instrumenty","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-21T18:42:28+00:00","article:modified_time":"2020-10-21T18:42:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97776","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:13:06","updated":"2022-09-27 23:41:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/97776","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=97776"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/97776\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/97777"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=97776"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=97776"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=97776"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}