Mohlomong ua tseba hore na OSINT ke eng 'me u sebelisitse enjine ea ho batla ea Shodan, kapa u se u ntse u sebelisa Threat Intelligence Platform ho beha li-IOC pele ho tsoa ho liphepelo tse fapaneng. Empa ka linako tse ling hoa hlokahala hore u lule u sheba k'hamphani ea hau ho tsoa ka ntle 'me u fumane thuso ho felisa liketsahalo tse khethiloeng. e o lumella ho latela thepa ea digital khamphani le bahlahlobisisi ba eona ba sisinya liketso tse itseng.
Ha e le hantle, Digital Shadows e tlatsana hantle le SOC e teng kapa e akaretsa ts'ebetso ka botlalo. ho latedisa pherimitha ka ntle. Tikoloho e se e hahiloe ho tloha 2011 mme lintho tse ngata tse khahlisang li kentsoe ts'ebetsong tlasa hood. DS_ e beha leihlo Marang-rang, mecha ea litaba ea sechaba. marang-rang le darknet le ho khetholla feela tsa bohlokoa ho tsoa ho phallo eohle ea tlhahisoleseding.
Koranteng ea hau ea beke le beke khampani e fana ka pontšo eo u ka e sebelisang bophelong ba hao ba letsatsi le letsatsi ho litlhahlobo tsa mohloli le tlhahisoleseding e amohetsweng. U ka boela ua bona letšoao qetellong ea sehlooho.
Digital Shadows e khona ho bona le ho hatella libaka tsa phishing, li-account tsa fake ho marang-rang a sechaba; fumana lintlha tsa mohiruoa tse senyehileng le lintlha tse lutsitsoeng, tseba tlhahisoleseling mabapi le litlhaselo tsa cyber tse tlang ho khamphani, ho beha leihlo sebaka sa sechaba sa mokhatlo kamehla, esita le ho sekaseka lits'ebetso tsa mehala khafetsa ka lebokoseng la lehlabathe.
Ho khetholla likotsi tsa digital
Khamphani e 'ngoe le e' ngoe, nakong ea mesebetsi ea eona, e fumana liketane tsa likhokahano le bareki le balekane, 'me data eo e batlang ho e sireletsa e ntse e hlaseleha habonolo,' me bongata ba eona bo ntse bo eketseha.
Ho qala ho laola likotsi tsena, k'hamphani e tlameha ho qala ho sheba ka nqane ho sebaka sa eona, ho e laola, le ho fumana leseli hanghang mabapi le liphetoho.
Tlhahlobo ea tahlehelo ea data (litokomane tse hlokolosi, basebetsi ba fihlellehang, tlhahisoleseding ea tekheniki, thepa ea mahlale).
Ak'u nahane hore thepa ea hau ea bohlale e senotsoe Marang-rang kapa hore khoutu ea lekunutu e kene ka phoso sebakeng sa polokelo ea GitHub. Bahlaseli ba ka sebelisa lintlha tsena ho qala litlhaselo tsa marang-rang tse shebiloeng haholoanyane.
Online Brand Security (li-phishing domains le profiles ho marang-rang a sechaba, software ea mohala e etsisang k'hamphani).
Kaha joale ho thata ho fumana k'hamphani e se nang marang-rang ea sechaba kapa sethala se ts'oanang ho sebelisana le bareki bao e ka bang bareki, bahlaseli ba leka ho etsisa lebitso la k'hamphani. Linokoane tsa marang-rang li etsa sena ka ho ngolisa libaka tse seng tsa nnete, liakhaonto tsa litaba tsa sechaba le lits'ebetso tsa mehala. Haeba phishing/scam e atlehile, e ka ama lekeno, bots'epehi ba bareki le ts'epo.
Tlhaselo Surface Phokotso (litšebeletso tse tlokotsing sebakeng sa Marang-rang, likoung tse bulehileng, litifikeiti tse nang le mathata).
Ha lisebelisoa tsa IT li ntse li hōla, sebaka sa tlhaselo le palo ea lintho tsa boitsebiso li tsoela pele ho hōla. Ha nako e ntse e ea, litsamaiso tsa ka hare li ka 'na tsa phatlalatsoa ka phoso lefatšeng la ka ntle, joalo ka polokelo ea boitsebiso.
DS_ e tla u tsebisa ka mathata pele mohlaseli a ka nka monyetla ka ona, a totobatsa tse tlang pele ka ho fetesisa, bahlahlobisisi ba tla khothaletsa liketso tse ling, 'me u ka theola hang hang.
Sebopeho DS_
U ka sebelisa sebopeho sa webo sa tharollo ka kotloloho kapa ua sebelisa API.
Joalokaha u ka bona, kakaretso ea tlhahlobo e hlahisoa ka mokhoa oa funnel, ho qala ka palo ea ho buuoa le ho qetella ka liketsahalo tsa sebele tse fumanoang mehloling e fapaneng.
Batho ba bangata ba sebelisa tharollo e le Wikipedia e nang le tlhahisoleseding e mabapi le bahlaseli ba mafolofolo, matšolo a bona le liketsahalo tšimong ea ts'ireletso ea tlhahisoleseding.
Digital Shadows e bonolo ho e kenyelletsa tsamaisong efe kapa efe ea kantle. Ka bobeli litsebiso le REST API li tšehetsoa bakeng sa ho kopanngoa tsamaisong ea hau. U ka reha IBM QRadar, ArcSight, Demisto, Anomali le .
Mokhoa oa ho laola likotsi tsa dijithale - mehato e 4 ea mantlha
Mohato oa 1: Khetholla Matlotlo a Bohlokoa a Khoebo
Bohato bona ba pele ke ho utloisisa hore na mokhatlo o tsotella eng haholo le hore na o batla ho sireletsa eng.
E ka aroloa ka lihlopha tse kholo:
- Batho (bareki, basebetsi, balekane, barekisi);
- Mekhatlo (lik'hamphani tse amanang le litšebeletso, lisebelisoa tse akaretsang);
- Sistimi le lits'ebetso tsa bohlokoa tsa ts'ebetso (liwebsaete, li-portal, li-database tsa bareki, lits'ebetso tsa ts'ebetso ea litefo, lits'ebetso tsa phihlello ea basebetsi kapa lits'ebetso tsa ERP).
Ha u hlophisa lethathamo lena, ho kgothaletswa ho latela mohopolo o bonolo - thepa e lokela ho ba haufi le lits'ebetso tsa bohlokoa tsa khoebo kapa mesebetsi ea bohlokoa moruong ea k'hamphani.
Ka tloaelo ho eketsoa lisebelisoa tse makholo, ho kenyelletsa:
- mabitso a khampani;
- mabitso/matshwao a kgwebo;
- Mekhahlelo ea liaterese tsa IP;
- libaka;
- likhokahano tsa marang-rang a sechaba;
- bafani;
- likopo tsa mehala;
- linomoro tsa patent;
- litokomane tsa ho tšoaea;
- Li-ID tsa DLP;
- li-signature tsa imeile.
Ho etsa hore tšebeletso e lumellane le litlhoko tsa hau ho netefatsa hore u fumana litlhokomeliso tse nepahetseng feela. Ena ke potoloho e iphetang, 'me basebelisi ba sistimi ba tla eketsa thepa ha e ntse e fumaneha, joalo ka litlotla tse ncha tsa projeke, ho kopanya ho tlang le ho fumana, kapa libaka tse nchafalitsoeng tsa webo.
Mohato oa 2: Ho Utloisisa Litšokelo Tse ka Tsoang
Ho bala likotsi hantle, hoa hlokahala ho utloisisa litšokelo tse ka bang teng le likotsi tsa dijithale tsa k'hamphani.
- Maqheka, Maqheka le Mekhoa ea Bahlaseli (TTP)
Moralo 'me tse ling li thusa ho fumana puo e tšoanang pakeng tsa ts'ireletso le tlhaselo. Ho bokella tlhahisoleseding le ho utloisisa boitšoaro ho pholletsa le mefuta e mengata ea bahlaseli ho fana ka moelelo oa bohlokoa haholo ha u sireletsa. Sena se o nolofalletsa ho utloisisa mohato o latelang tlhaselong e hlokometsoeng, kapa u hahe mohopolo o akaretsang oa ts'ireletso o thehiloeng ho eona . - Bokhoni ba ho hlasela
Mohlaseli o tla sebelisa sehokelo se fokolang kapa tsela e khuts'oane. Li-vector tse fapaneng tsa tlhaselo le motsoako oa tsona - mangolo, marang-rang, pokello ea tlhaiso-leseling e sa sebetseng, jj.
Mohato oa 3: Tlhokomelo bakeng sa Ponahalo e sa Batloeng ea Matlotlo a Dijithale
Ho khetholla thepa, hoa hlokahala ho beha leihlo mehloli e mengata khafetsa, joalo ka:
- Git repositories;
- polokelo ea leru e sa lokisoang hantle;
- Beha libaka;
- Setjhaba mecha ea litaba;
- Liforamo tsa botlokotsebe;
- Websaete e lefifi.
Ho u qalisa, u ka sebelisa lisebelisoa tsa mahala le mekhoa e behiloeng ka thata ho tataiso''.
Mohato oa 4: Nka Mehato ea Tšireletso
Ka mor'a ho fumana tsebiso, mehato e tobileng e tlameha ho nkoa. Re ka khetholla Tactical, Operational and Strategic.
Ho Digital Shadows, tlhokomeliso ka 'ngoe e kenyelletsa liketso tse khothaletsoang. Haeba sena e le sebaka sa phishing kapa leqephe ho marang-rang a sechaba, joale u ka lekola boemo ba tefo ho karolo ea "Takedowns".
Ho fihlella portal ea demo ka matsatsi a 7
Ere ke behelle hang hang hore sena ha se teko e felletseng, empa ke phihlello ea nakoana feela ho portal ea demo ho itloaetsa sebopeho sa eona le ho batla tlhahisoleseling. Teko e felletseng e tla ba le data e amanang le k'hamphani e itseng mme e hloka mosebetsi oa mohlahlobi.
Sebaka sa demo se tla ba le:
- Mehlala ea litlhokomeliso bakeng sa libaka tsa phishing, mangolo a pepenene, le bofokoli ba litšebeletso;
- batla maqepheng a darknet, liforamu tsa botlokotsebe, lijo le tse ling tse ngata;
- Lifaele tse 200 tsa litšokelo tsa cyber, lisebelisoa le matšolo.
O ka fihlella sena .
Lingoliloeng tsa beke le beke le podcast
Koranteng ea beke le beke o ka fumana kakaretso e khuts'oane ea tlhaiso-leseling ea ts'ebetso le liketsahalo tsa morao-rao bekeng e fetileng. U ka boela ua mamela podcast .
Ho hlahloba mohloli, Digital Shadows e sebelisa lipolelo tsa boleng bo tsoang ho matrices a mabeli, ho hlahloba botšepehi ba mehloli le ho tšepahala ha boitsebiso bo fumanoang ho bona.
Sengoliloeng se ngotsoe ho latela ''.
Haeba tharollo e u khahla, u ka ikopanya le rona - k'hamphani , morekisi oa Digital Shadows_. Seo u lokelang ho se etsa feela ke ho ngola ka foromo ea mahala ho .
Bangoli: и .
Source: www.habr.com