{"id":37173,"date":"2019-10-31T22:16:11","date_gmt":"2019-10-31T19:16:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/7-klyuchevyh-indikatorov-riska-active-directory-na-paneli-monitoringa-varonis\/"},"modified":"2019-10-31T22:16:11","modified_gmt":"2019-10-31T19:16:11","slug":"7-klyuchevyh-indikatorov-riska-active-directory-na-paneli-monitoringa-varonis","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/7-klyuchevyh-indikatorov-riska-active-directory-na-paneli-monitoringa-varonis","title":{"rendered":"7 nyckeltal f\u00f6r risker i Active Directory p\u00e5 Varonis-panelen","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"7 nyckeltal f\u00f6r risker i Active Directory p\u00e5 Varonis-panelen\" src=\"\/wp-content\/uploads\/2019\/08\/e9d2d7130de9b7daf8f28d965519e606.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAll a malicious actor needs is time and motivation to infiltrate your network. But our task is to prevent this from happening or at least make it as difficult as possible. We need to start by identifying vulnerabilities in Active Directory (hereafter - AD) that an attacker could exploit to gain access and move through the network unnoticed. In this article, we will examine risk indicators that reflect existing cybersecurity vulnerabilities in your organization, using the Varonis AD dashboard as an example.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Malicious actors exploit certain configurations in the domain<\/h2>\n<p>\nAttackers use various tricks and vulnerabilities to infiltrate the corporate network and escalate privileges. Some of these vulnerabilities are domain configuration parameters that can be easily changed once identified.<\/p>\n<p>The AD dashboard will immediately notify you (or your system administrators) if you haven't changed the KRBTGT password in the past month or if someone authenticated with the built-in default administrator account (Administrator). These two accounts provide unrestricted access to your network: criminals will attempt to access them to easily bypass any privilege and access restrictions. As a result, they can access any data that interests them.<\/p>\n<p>Of course, you can discover these vulnerabilities by yourself: for example, set a reminder in your calendar to check or run a PowerShell script to collect this information. <\/p>\n<p>The Varonis dashboard is updated <strong>automatiskt <\/strong>, to provide a quick overview and analysis of key metrics that highlight potential vulnerabilities so you can take immediate action to address them.<\/p>\n<h3>3 key risk indicators at the domain level<\/h3>\n<p>\nBelow are several widgets available on the Varonis dashboard, the use of which will significantly enhance the protection of your corporate network and IT infrastructure as a whole.<\/p>\n<p><strong>1. The number of domains for which the Kerberos account password has not been changed for a significant period <\/strong><\/p>\n<p>The KRBTGT account is a special account in AD that signs all <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/kerberos-authentication-explained\/\">Kerberos tickets <\/a><\/noindex>. Angripare som f\u00e5r tillg\u00e5ng till dom\u00e4nkontrollern (DC) kan anv\u00e4nda detta konto f\u00f6r att skapa <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/kerberos-how-to-stop-golden-tickets\/\">Golden ticket<\/a><\/noindex>, vilket ger dem obegr\u00e4nsad \u00e5tkomst till praktiskt taget alla system i det f\u00f6retagsn\u00e4tverket. Vi har st\u00f6tt p\u00e5 en situation d\u00e4r en angripare hade tillg\u00e5ng till organisationens n\u00e4tverk under tv\u00e5 \u00e5r efter att ha lyckats f\u00e5 en Golden Ticket. Om l\u00f6senordet f\u00f6r KRBTGT-kontot i ditt f\u00f6retag inte har \u00e4ndrats de senaste fyrtio dagarna, kommer widgeten att varna om detta. <\/p>\n<p>Fyrtio dagar \u00e4r mer \u00e4n tillr\u00e4ckligt med tid f\u00f6r en angripare att f\u00e5 tillg\u00e5ng till n\u00e4tverket. Men om du s\u00e4kerst\u00e4ller och standardiserar processen f\u00f6r att \u00e4ndra detta l\u00f6senord regelbundet, kommer det att komplicera f\u00f6r angriparen att infiltrera det f\u00f6retagsn\u00e4tverket avsev\u00e4rt. <\/p>\n<p><img decoding=\"async\" alt=\"7 nyckeltal f\u00f6r risker i Active Directory p\u00e5 Varonis-panelen\" src=\"\/wp-content\/uploads\/2019\/08\/2c6df99a576c2ae61626c21245909d24.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nKom ih\u00e5g att enligt implementeringen av Kerberos-protokollet av Microsoft m\u00e5ste du <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.microsoft.com\/en-us\/windows-server\/identity\/ad-ds\/manage\/ad-forest-recovery-resetting-the-krbtgt-password\"> \u00e4ndra l\u00f6senordet tv\u00e5 g\u00e5nger<\/a><\/noindex> f\u00f6r KRBTGT.<\/p>\n<p>I framtiden kommer denna AD-widget att p\u00e5minna om n\u00e4r det \u00e4r dags att \u00e5terigen \u00e4ndra l\u00f6senordet f\u00f6r KRBTGT f\u00f6r alla dom\u00e4ner i ditt n\u00e4tverk.<\/p>\n<p><strong>2. Antalet dom\u00e4ner d\u00e4r det nyligen har anv\u00e4nts ett inbyggt administrat\u00f6rskonto (Administrator) <\/strong><\/p>\n<p>Enligt <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/max-roi-least-privilege-model\/\">principen om l\u00e4gsta privilegier <\/a><\/noindex> \u2014 systemadministrat\u00f6rer tillhandah\u00e5lls tv\u00e5 konton: det f\u00f6rsta \u00e4r ett konto f\u00f6r daglig anv\u00e4ndning, och det andra \u00e4r f\u00f6r planerade administrativa uppgifter. Detta inneb\u00e4r att ingen b\u00f6r anv\u00e4nda det inbyggda administrat\u00f6rskontot som standard. <\/p>\n<p>Det inbyggda administrat\u00f6rskontot anv\u00e4nds ofta f\u00f6r att f\u00f6renkla systemadministrationen. Det kan bli en d\u00e5lig vana som resulterar i infiltrering. Om detta h\u00e4nder i din organisation kommer det att vara sv\u00e5rt att s\u00e4rskilja korrekt anv\u00e4ndning av detta konto fr\u00e5n potentiellt skadlig \u00e5tkomst.<\/p>\n<p><img decoding=\"async\" alt=\"7 nyckeltal f\u00f6r risker i Active Directory p\u00e5 Varonis-panelen\" src=\"\/wp-content\/uploads\/2019\/08\/a7e51994b6271021ee64552408bbda87.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nOm widgeten visar n\u00e5got annat \u00e4n noll, betyder det att n\u00e5gon hanterar administrat\u00f6rskontona felaktigt. I s\u00e5 fall \u00e4r det n\u00f6dv\u00e4ndigt att vidta \u00e5tg\u00e4rder f\u00f6r att korrigera och begr\u00e4nsa \u00e5tkomsten till det inbyggda administrat\u00f6rskontot. <br \/>\nN\u00e4r du har uppn\u00e5tt ett nollv\u00e4rde f\u00f6r widgeten och systemadministrat\u00f6rerna inte l\u00e4ngre anv\u00e4nder det h\u00e4r konto f\u00f6r sitt arbete, kommer varje efterf\u00f6ljande \u00e4ndring att indikera en potentiell cyberattack.<\/p>\n<p><strong>3. Antalet dom\u00e4ner d\u00e4r gruppen f\u00f6r skyddade anv\u00e4ndare (Protected Users) saknas <\/strong><\/p>\n<p>\u00c4ldre versioner av AD st\u00f6dde en svag typ av kryptering - RC4. Hackare br\u00f6t sig in i RC4 f\u00f6r m\u00e5nga \u00e5r sedan, och nu \u00e4r det en ganska trivial uppgift f\u00f6r en angripare att bryta ett konto som fortfarande anv\u00e4nder RC4. I den version av Active Directory som introducerades i Windows Server 2012 tillsattes en ny typ av anv\u00e4ndargrupp kallad skyddade anv\u00e4ndare (Protected Users). Denna grupp ger ytterligare skydds\u00e5tg\u00e4rder och hindrar autentisering av anv\u00e4ndare med RC4-kryptering.<\/p>\n<p>Denna widget kommer att visa om det saknas en s\u00e5dan grupp i n\u00e5gon dom\u00e4n i organisationen, s\u00e5 att ni kan \u00e5tg\u00e4rda detta, det vill s\u00e4ga aktivera gruppen f\u00f6r skyddade anv\u00e4ndare och anv\u00e4nda den f\u00f6r att skydda infrastrukturen.<\/p>\n<p><img decoding=\"async\" alt=\"7 nyckeltal f\u00f6r risker i Active Directory p\u00e5 Varonis-panelen\" src=\"\/wp-content\/uploads\/2019\/08\/9895074051f5acfbfaca3c2fbabc7a17.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h2>L\u00e4tta m\u00e5l f\u00f6r angripare<\/h2>\n<p>\nAnv\u00e4ndarkonton \u00e4r nummer ett bland m\u00e5len f\u00f6r angripare - fr\u00e5n de f\u00f6rsta intr\u00e5ngsf\u00f6rs\u00f6ken till den fortsatta privilegieringen och d\u00f6lja sina handlingar. Angripare letar efter l\u00e4tta m\u00e5l i ditt n\u00e4tverk, och anv\u00e4nda grundl\u00e4ggande PowerShell-kommandon som ofta \u00e4r sv\u00e5ra att uppt\u00e4cka. Ta bort s\u00e5 m\u00e5nga av s\u00e5dana l\u00e4tta m\u00e5l fr\u00e5n AD som m\u00f6jligt.<\/p>\n<p>Angripare letar efter anv\u00e4ndare med obegr\u00e4nsad l\u00f6senordsl\u00e4ngd (eller som inte beh\u00f6ver l\u00f6senord), teknologikonton som \u00e4r administrat\u00f6rer, och konton som anv\u00e4nder gammal RC4-kryptering. <\/p>\n<p>N\u00e5got av dessa konton \u00e4r antingen triviala att f\u00e5 tillg\u00e5ng till eller \u00e4r i allm\u00e4nhet inte under \u00f6vervakning. Angripare kan ta kontroll \u00f6ver dessa konton och r\u00f6ra sig fritt inom er infrastruktur.<\/p>\n<p>S\u00e5 snart angripare har tr\u00e4ngt sig igenom s\u00e4kerhetsperimetern, kommer de troligen att f\u00e5 tillg\u00e5ng till minst ett konto. Kommer ni att kunna hindra dem fr\u00e5n att f\u00e5 tillg\u00e5ng till k\u00e4nslig information innan ni uppt\u00e4cker och \u00e5tg\u00e4rdar attacken?<\/p>\n<p>Varonis AD:s instrumentpanel pekar ut s\u00e5rbara anv\u00e4ndarkonton s\u00e5 att du kan \u00e5tg\u00e4rda problem i f\u00f6rv\u00e4g. Ju sv\u00e5rare det \u00e4r att tr\u00e4nga in i ditt n\u00e4tverk, desto st\u00f6rre \u00e4r dina chanser att neutralisera en angripare innan han orsakar allvarlig skada.<\/p>\n<h3>4 nyckeltal f\u00f6r riskbed\u00f6mning av anv\u00e4ndarkonton<\/h3>\n<p>\nNedan \u00e4r exempel p\u00e5 widgets p\u00e5 Varonis AD:s instrumentpanel som visar de mest s\u00e5rbara anv\u00e4ndarkontona.<\/p>\n<p><strong>1. Antalet aktiva anv\u00e4ndare med l\u00f6senord som aldrig g\u00e5r ut <\/strong><\/p>\n<p>F\u00f6r en angripare \u00e4r det alltid en stor framg\u00e5ng att f\u00e5 tillg\u00e5ng till ett s\u00e5dant konto. Eftersom l\u00f6senordet aldrig g\u00e5r ut f\u00e5r angriparen en st\u00e4ndig bas inom n\u00e4tverket som kan anv\u00e4ndas f\u00f6r <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/blog\/how-to-use-powershell-for-privilege-escalation-with-local-computer-accounts\/\">privilegierande \u00e5tkomst <\/a><\/noindex>eller f\u00f6rflyttningar inom infrastrukturen.<br \/>\nAngripare har tillg\u00e5ng till listor med miljoner kombinationer av \"anv\u00e4ndare-l\u00f6senord\" som de anv\u00e4nder i attacker med inloggningsuppgifter, och sannolikheten f\u00f6r att<br \/>\nkombinationen f\u00f6r en anv\u00e4ndare med \"evigt\" l\u00f6senord finns p\u00e5 en av dessa listor \u00e4r betydligt mer \u00e4n noll.<\/p>\n<p>Konton med icke-utg\u00e5ende l\u00f6senord \u00e4r l\u00e4tta att hantera, men de \u00e4r inte s\u00e4kra. Anv\u00e4nd denna widget f\u00f6r att hitta alla konton med s\u00e5dana l\u00f6senord. \u00c4ndra denna inst\u00e4llning och uppdatera l\u00f6senordet.<\/p>\n<p><img decoding=\"async\" alt=\"7 nyckeltal f\u00f6r risker i Active Directory p\u00e5 Varonis-panelen\" src=\"\/wp-content\/uploads\/2019\/08\/45efafd3c6c5075c8fac538094f466c2.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nS\u00e5 snart v\u00e4rdet p\u00e5 denna widget n\u00e5r noll kommer nya konton som skapats med s\u00e5dana l\u00f6senord att dyka upp p\u00e5 instrumentpanelen.<\/p>\n<p><strong>2. Antalet administrativa konton med SPN <\/strong><\/p>\n<p>SPN (Service Principal Name) \u00e4r en unik identifierare f\u00f6r en tj\u00e4nsteinstans. Denna widget visar hur m\u00e5nga tj\u00e4nstekonton som har fullst\u00e4ndiga administrativa r\u00e4ttigheter. V\u00e4rdet p\u00e5 widgeten b\u00f6r vara noll. SPN med administrativa r\u00e4ttigheter uppst\u00e5r eftersom erbjuda s\u00e5dana r\u00e4ttigheter \u00e4r praktiskt f\u00f6r programvaruleverant\u00f6rer och applikationsadministrat\u00f6rer, men detta utg\u00f6r en s\u00e4kerhetsrisk.<\/p>\n<p>Att ge en tj\u00e4nstekonto administrat\u00f6rsr\u00e4ttigheter ger en angripare fullst\u00e4ndig tillg\u00e5ng till ett konto som inte anv\u00e4nds. Detta inneb\u00e4r att angripare med tillg\u00e5ng till SPN-konton kan agera fritt inom infrastrukturen utan att bli \u00f6vervakade. <\/p>\n<p>F\u00f6r att \u00e5tg\u00e4rda detta problem b\u00f6r beh\u00f6righeterna f\u00f6r tj\u00e4nstekonton \u00e4ndras. S\u00e5dana konton b\u00f6r f\u00f6lja principen om minimi\u00e5tkomst och endast ha den \u00e5tkomst som \u00e4r strikt n\u00f6dv\u00e4ndig f\u00f6r deras funktion.<\/p>\n<p><img decoding=\"async\" alt=\"7 nyckeltal f\u00f6r risker i Active Directory p\u00e5 Varonis-panelen\" src=\"\/wp-content\/uploads\/2019\/08\/05949515e2ec1d30bf68ef356489c837.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nMed denna widget kan du uppt\u00e4cka alla SPN som har administrat\u00f6rsr\u00e4ttigheter, ta bort s\u00e5dana privilegier och d\u00e4refter \u00f6vervaka SPN enligt samma princip om minimi\u00e5tkomst.<\/p>\n<p>Nya SPN kommer att visas p\u00e5 instrumentpanelen, och du kan kontrollera denna process.<\/p>\n<p><strong>3. Antal anv\u00e4ndare som inte kr\u00e4ver Kerberos-autentisering <\/strong><\/p>\n<p>Idealiskt krypterar Kerberos autentiseringsticket med AES-256-kryptering, som hittills inte har blivit hackad.<\/p>\n<p>Men \u00e4ldre versioner av Kerberos anv\u00e4nde RC4-kryptering, som nu kan hackas p\u00e5 minuter. Denna widget visar vilka anv\u00e4ndarkonton som fortfarande anv\u00e4nder RC4. Microsoft st\u00f6der fortfarande RC4 f\u00f6r bak\u00e5tkompatibilitet, men det betyder inte att du b\u00f6r anv\u00e4nda det i din AD.<\/p>\n<p><img decoding=\"async\" alt=\"7 nyckeltal f\u00f6r risker i Active Directory p\u00e5 Varonis-panelen\" src=\"\/wp-content\/uploads\/2019\/08\/d6eca1f78f2c298dcc65c9a83fc45790.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nN\u00e4r du har uppt\u00e4ckt s\u00e5dana konton, m\u00e5ste du avmarkera alternativet \"kr\u00e4ver inte Kerberos-f\u00f6rautorisering\" i AD f\u00f6r att kontona ska anv\u00e4nda starkare kryptering.<\/p>\n<p>Att sj\u00e4lv uppt\u00e4cka dessa konton utan Varonis AD-instrumentpanelen tar mycket tid. I verkligheten \u00e4r det \u00e4n mer utmanande att vara medveten om alla konton som har redigerats f\u00f6r att anv\u00e4nda RC4-kryptering.<\/p>\n<p>Om v\u00e4rdet p\u00e5 widgeten \u00e4ndras kan det indikera olagliga aktiviteter.<\/p>\n<p><strong>4. Antal anv\u00e4ndare utan l\u00f6senord <\/strong><\/p>\n<p>Angripare anv\u00e4nder grundl\u00e4ggande PowerShell-kommandon f\u00f6r att l\u00e4sa fr\u00e5n AD-flaggor \"PASSWD_NOTREQD\" i kontoinst\u00e4llningarna. Anv\u00e4ndningen av denna flagga betyder att det inte finns n\u00e5gra krav p\u00e5 n\u00e4rvaro eller komplexitet p\u00e5 l\u00f6senordet. <br \/>\nHur l\u00e4tt \u00e4r det att stj\u00e4la ett konto med ett enkelt eller tomt l\u00f6senord? Och f\u00f6rest\u00e4ll dig nu att ett av dessa konton \u00e4r en administrat\u00f6r.<\/p>\n<p><img decoding=\"async\" alt=\"7 nyckeltal f\u00f6r risker i Active Directory p\u00e5 Varonis-panelen\" src=\"\/wp-content\/uploads\/2019\/08\/4278720678ee522a866a4e965c3cc0d6.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nVad h\u00e4nder om en av tusentals konfidentiella filer som \u00e4r \u00f6ppna f\u00f6r alla \u00e4r en kommande finansiell rapport? <\/p>\n<p>Att ignorera det obligatoriska kravet p\u00e5 att ange l\u00f6senord \u00e4r ytterligare en genv\u00e4g inom systemadministration som ofta anv\u00e4ndes tidigare, men idag \u00e4r detta oacceptabelt och os\u00e4kert.<\/p>\n<p>\u00c5tg\u00e4rda detta problem genom att uppdatera l\u00f6senorden f\u00f6r s\u00e5dana konton.<\/p>\n<p>\u00d6vervakning av denna widget i framtiden kommer att hj\u00e4lpa dig att undvika f\u00f6rekomsten av konton utan l\u00f6senord.<\/p>\n<h2>Varonis j\u00e4mnar ut spelplanen<\/h2>\n<p>\nTidigare tog arbetet med att samla in och analysera de n\u00e4mnda m\u00e4tv\u00e4rdena m\u00e5nga timmar och kr\u00e4vde djup kunskap om PowerShell: s\u00e4kerhetsspecialister fick avs\u00e4tta resurser f\u00f6r s\u00e5dana uppgifter varje vecka eller m\u00e5nad. Men manuell insamling och bearbetning av denna information ger angriparna en f\u00f6rdel f\u00f6r intr\u00e5ng och datast\u00f6ld.<\/p>\n<p>Med <noindex><a rel=\"nofollow\" href=\"https:\/\/www.varonis.com\/ru\/products-data-security-platform\/\">Varonis <\/a><\/noindex>Du kommer att spendera en dag p\u00e5 att rulla ut en AD-\u00f6vervakningspanel och ytterligare komponenter, samla in alla identifierade och m\u00e5nga andra s\u00e5rbarheter. H\u00e4refter kommer \u00f6vervakningspanelen att automatiskt uppdateras under drift, i takt med att infrastrukturens tillst\u00e5nd f\u00f6r\u00e4ndras.<\/p>\n<p>Genomf\u00f6rande av cyberattacker \u00e4r alltid en kappl\u00f6pning mellan angripare och f\u00f6rsvarare, d\u00e4r angriparen str\u00e4var efter att stj\u00e4la data innan s\u00e4kerhetsspecialisterna kan st\u00e4nga \u00e5tkomsten. Tidig uppt\u00e4ckte av angripare och deras olagliga handlingar, kombinerat med starkt cyberskydd, \u00e4r nyckeln till att skydda dina data.<br \/>\n<br \/>K\u00e4lla: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/varonis\/blog\/463703\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u0441\u0435, \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u2013 \u044d\u0442\u043e \u0432\u0440\u0435\u043c\u044f \u0438 \u043c\u043e\u0442\u0438\u0432\u0430\u0446\u0438\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0432\u0430\u0448\u0443 \u0441\u0435\u0442\u044c. \u041d\u043e \u043d\u0430\u0448\u0430 \u0441 \u0432\u0430\u043c\u0438 \u0440\u0430\u0431\u043e\u0442\u0430 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0434\u0430\u0442\u044c \u0435\u043c\u0443 \u044d\u0442\u043e\u0433\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0438\u043b\u0438, \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435, \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u0438\u0442\u044c \u044d\u0442\u0443 \u0437\u0430\u0434\u0430\u0447\u0443. \u041d\u0443\u0436\u043d\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0441\u043b\u0430\u0431\u044b\u0445 \u043c\u0435\u0441\u0442 \u0432 Active Directory (\u0434\u0430\u043b\u0435\u0435 \u2013 AD), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27872,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-37173","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u0441\u0435, \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/7-klyuchevyh-indikatorov-riska-active-directory-na-paneli-monitoringa-varonis\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sv_SE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd477 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u0440\u0438\u0441\u043a\u0430 Active Directory \u043d\u0430 \u043f\u0430\u043d\u0435\u043b\u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 Varonis | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u0441\u0435, \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/7-klyuchevyh-indikatorov-riska-active-directory-na-paneli-monitoringa-varonis\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:16:11+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:16:11+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd477 nyckelindikatorer f\u00f6r risker i Active Directory p\u00e5 Varonis instrumentpanel | ProHoster","description":"Allt som beh\u00f6vs.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/7-klyuchevyh-indikatorov-riska-active-directory-na-paneli-monitoringa-varonis","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd477 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u0440\u0438\u0441\u043a\u0430 Active Directory \u043d\u0430 \u043f\u0430\u043d\u0435\u043b\u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 Varonis | ProHoster","og:description":"\u0412\u0441\u0435, \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e.","og:url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/7-klyuchevyh-indikatorov-riska-active-directory-na-paneli-monitoringa-varonis","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:16:11+00:00","article:modified_time":"2019-10-31T19:16:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37173","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 06:24:26","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:46:18","updated":"2026-01-22 06:24:26","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/37173","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=37173"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/37173\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media\/27872"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=37173"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=37173"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=37173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}