Mhlawumbe uyazi ukuthi i-OSINT iyini futhi usebenzise injini yokusesha yakwa-Shodan, noma usuvele usebenzisa i-Threat Intelligence Platform ukuze ubeke phambili ama-IOC avela kokuphakelayo okuhlukene. Kodwa ngezinye izikhathi udinga ukubheka njalo inkampani yakho ngaphandle futhi uthole usizo ekuqedeni izigameko ezihlonziwe. ikuvumela ukuthi ulandelele izimpahla zedijithali inkampani nabahlaziyi bayo bahlongoza izenzo ezithile.
Empeleni, i-Digital Shadows ihambisana ngokuvumelana ne-SOC ekhona noma ihlanganisa ngokuphelele ukusebenza. ukulandelwa kwe-perimeter yangaphandle. I-ecosystem yakhiwe kusukela ngo-2011 futhi izinto eziningi ezithakazelisayo zenziwe ngaphansi kwe-hood. I-DS_ iqapha i-inthanethi, inkundla yezokuxhumana. amanethiwekhi kanye ne-darknet futhi ikhomba kuphela okubalulekile kukho konke ukugeleza kolwazi.
Encwadini yakho yezindaba yamasonto onke inkampani inikeza uphawu ongalusebenzisa ekuphileni kwakho kwansuku zonke ukuze ukuhlola komthombo kanye nolwazi olutholiwe. Ungabona futhi uphawu ekupheleni kwesihloko.
I-Digital Shadows iyakwazi ukuthola nokucindezela izizinda zobugebengu bokweba imininingwane ebucayi, ama-akhawunti mbumbulu ezinkundleni zokuxhumana; thola imininingwane yesisebenzi esonakalisiwe kanye nedatha eputshuziwe, thola ulwazi mayelana nokuhlasela kwe-inthanethi okuzayo enkampanini, njalo uqaphe umjikelezo womphakathi wenhlangano, futhi uhlaziye njalo izinhlelo zokusebenza zeselula ku-sandbox.
Ukuhlonza izingozi zedijithali
Inkampani ngayinye, phakathi nemisebenzi yayo, ithola amaketanga okuxhumana namakhasimende nozakwethu, futhi idatha efuna ukuyivikela iba sengozini kakhulu, futhi nenani layo liyakhula kuphela.
Ukuze iqale ukuphatha lezi zingozi, inkampani kufanele iqale ukubheka ngale komjikelezo wayo, iyilawule, futhi ithole ulwazi olusheshayo mayelana nezinguquko.
Ukutholwa Kokulahleka Kwedatha (imibhalo ebucayi, abasebenzi abafinyeleleka kalula, imininingwane yezobuchwepheshe, impahla yengqondo).
Cabanga ukuthi impahla yakho yengqondo idalulwe ku-inthanethi noma ikhodi eyimfihlo yangena ngephutha endaweni yokugcina ye-GitHub. Abahlaseli bangasebenzisa le datha ukuze baqalise ukuhlasela kwe-inthanethi okuqondiswe kakhulu.
Ukuphepha Komkhiqizo Ku-inthanethi (izizinda zobugebengu bokweba imininingwane ebucayi namaphrofayili ezinkundleni zokuxhumana, isofthiwe yeselula elingisa inkampani).
Njengoba manje sekunzima ukuthola inkampani engenayo inethiwekhi yokuxhumana nabantu noma inkundla efanayo ukuze uxhumane nabantu abangaba amakhasimende, abahlaseli bazama ukuzenza igama lenkampani. Izigebengu ze-inthanethi zenza lokhu ngokubhalisa izizinda ezingamanga, ama-akhawunti enkundla yezokuxhumana, nezinhlelo zokusebenza zeselula. Uma ubugebengu bokweba imininingwane ebucayi/umkhonyovu kuphumelela, kungaba nomthelela emalini engenayo, ukwethembeka kwekhasimende nokwethenjwa.
Ukunciphisa Indawo Yokuhlasela (amasevisi asengozini kupherimitha ye-inthanethi, izimbobo ezivulekile, izitifiketi eziyinkinga).
Njengoba ingqalasizinda ye-IT ikhula, indawo yokuhlasela kanye nenani lezinto zolwazi liyaqhubeka nokukhula. Ngokushesha noma kamuva, amasistimu angaphakathi angase ashicilelwe ngephutha emhlabeni wangaphandle, njengesizindalwazi.
I-DS_ izokwazisa ngezinkinga ngaphambi kokuba umhlaseli akwazi ukusizakala ngazo, igqamise okubaluleke kakhulu, abahlaziyi bazoncoma ezinye izenzo, futhi ungakwazi ukwehlisa ngokushesha.
Isixhumi esibonakalayo DS_
Ungasebenzisa isixhumi esibonakalayo sewebhu ngokuqondile noma usebenzise i-API.
Njengoba ubona, isifinyezo sokuhlaziya sivezwa ngendlela yefaneli, siqala enanini elikhulunyiwe futhi sigcine ngezigameko zangempela ezitholwe emithonjeni ehlukene.
Abantu abaningi basebenzisa isisombululo njenge-Wikipedia enolwazi mayelana nabahlaseli abakhuthele, imikhankaso yabo kanye nemicimbi emkhakheni wokuphepha kolwazi.
I-Digital Shadows kulula ukuhlanganisa kunoma yiluphi uhlelo lwangaphandle. Kokubili izaziso nama-REST API asekelwe ukuze ahlanganiswe kusistimu yakho. Ungaqamba IBM QRadar, ArcSight, Demisto, Anomali kanye .
Uzilawula kanjani ubungozi bedijithali - izinyathelo ezi-4 eziyisisekelo
Isinyathelo 1: Thola Izimpahla Ezibalulekile Zebhizinisi
Lesi sinyathelo sokuqala, yiqiniso, ukuqonda ukuthi yini inhlangano ekhathalela kakhulu nokuthi ifuna ukuvikela ini.
Ingahlukaniswa ngezigaba ezibalulekile:
- Abantu (amakhasimende, abasebenzi, abalingani, abahlinzeki);
- Izinhlangano (izinkampani ezihlobene nezinkonzo, ingqalasizinda ejwayelekile);
- Amasistimu nezinhlelo zokusebenza ezibucayi (amawebhusayithi, izingosi, imininingo egciniwe yamakhasimende, izinhlelo zokucubungula izinkokhelo, izinhlelo zokufinyelela kwabasebenzi noma izicelo ze-ERP).
Lapho uhlanganisa lolu hlu, kunconywa ukulandela umbono olula - izimpahla kufanele zibe eduze kwezinqubo zebhizinisi ezibucayi noma imisebenzi ebalulekile yezomnotho yenkampani.
Ngokuvamile amakhulukhulu ezinsiza ayengezwa, okuhlanganisa:
- amagama ezinkampani;
- izimpawu/izimpawu zokuhweba;
- Amabanga amakheli e-IP;
- izizinda;
- izixhumanisi zokuxhumana nabantu;
- abahlinzeki;
- izinhlelo zokusebenza zeselula;
- izinombolo zelungelo lobunikazi;
- amadokhumenti okumaka;
- Ama-ID e-DLP;
- amasiginesha e-imeyili.
Ukwenza isevisi ihambisane nezidingo zakho kuqinisekisa ukuthi uthola izexwayiso ezifanele kuphela. Lona umjikelezo ophindaphindayo, futhi abasebenzisi bohlelo bazokwengeza izimpahla njengoba zitholakala, njengezihloko ezintsha zephrojekthi, ukuhlanganiswa okuzayo nokutholwayo, noma izizinda zewebhu ezibuyekeziwe.
Isinyathelo sesi-2: Ukuqonda Izinsongo Ezingaba Khona
Ukuze ubale kahle ubungozi, kuyadingeka ukuqonda izinsongo ezingaba khona kanye nezingozi zedijithali zenkampani.
- Amasu Okuhlasela, Amaqhinga Nezinqubo (TTP)
Uhlaka kanti abanye basiza ukuthola ulimi olufanayo phakathi kokuzivikela nokuhlasela. Ukuqoqa ulwazi nokuziphatha kokuqonda kubahlaseli abahlukahlukene kunikeza umongo owusizo kakhulu lapho uvikela. Lokhu kukuvumela ukuthi uqonde isinyathelo esilandelayo ekuhlaselweni okuphawuliwe, noma wakhe umqondo ojwayelekile wokuvikela ngokusekelwe kulokho . - Amandla omhlaseli
Umhlaseli uzosebenzisa isixhumanisi esibuthakathaka kakhulu noma indlela emfushane kakhulu. Ama-vector ahlukahlukene okuhlasela kanye nenhlanganisela yawo - i-imeyili, iwebhu, ukuqoqwa kolwazi lwenziwa, njll.
Isinyathelo sesi-3: Ukuqapha Ukubukeka Okungadingeki Kwezimpahla Zedijithali
Ukuze ukhombe izimpahla, kuyadingeka ukuqapha njalo inani elikhulu lemithombo, njenge:
- Git izinqolobane;
- Isitoreji samafu esilungiselelwe kabi;
- Namathisela amasayithi;
- Okomphakathi abezindaba;
- izinkundla zobugebengu;
- Iwebhu emnyama.
Ukuze uqalise, ungasebenzisa izinsiza zamahhala nezindlela ezibalwa ngobunzima kumhlahlandlela''.
Isinyathelo sesi-4: Thatha Izinyathelo Zokuvikela
Ngemva kokuthola isaziso, kufanele kuthathwe izinyathelo ezithile. Singakwazi ukuhlukanisa i-Tactical, Operational and Strategic.
Ku-Digital Shadows, isexwayiso ngasinye sihlanganisa izenzo ezinconyiwe. Uma lesi kuyisizinda sobugebengu bokweba imininingwane ebucayi noma ikhasi kunethiwekhi yokuxhumana nomphakathi, ungakwazi ukulandelela isimo senkokhelo esigabeni "sokwehliswa".
Ukufinyelela kuphothali yedemo izinsuku ezingu-7
Ake ngenze ukubhuka ngokushesha ukuthi lokhu akukona ukuhlola okuphelele, kodwa ukufinyelela kwesikhashana kuphela kuphothali yedemo ukuze uzijwayeze isixhumi esibonakalayo futhi useshe ulwazi oluthile. Ukuhlola okuphelele kuzoqukatha idatha ephathelene nenkampani ethile futhi kudinga umsebenzi womhlaziyi.
Iphothali yedemo izoqukatha:
- Izibonelo zezaziso zezizinda zobugebengu bokweba imininingwane ebucayi, imininingwane edaluliwe, nobuthakathaka bengqalasizinda;
- sesha emakhasini e-darknet, izinkundla zobugebengu, izifunzo nokunye okuningi;
- Amaphrofayili, amathuluzi nemikhankaso engama-200 yosongo lwe-inthanethi.
Ungakwazi ukufinyelela lokhu .
Izincwadi zezindaba zamasonto onke nama-podcast
Ephephandabeni lamasonto onke ungathola isifinyezo esifushane solwazi lokusebenza kanye nemicimbi yakamuva yesonto eledlule. Ungakwazi futhi ukulalela i-podcast .
Ukuhlola umthombo, i-Digital Shadows isebenzisa izitatimende zekhwalithi ezivela kumatrices amabili, ihlola ukwethembeka kwemithombo kanye nokuthembeka kolwazi olutholwe kubo.
Isihloko sabhalwa sisekelwe kokuthi ''.
Uma ikhambi likuthakasela, ungaxhumana nathi - inkampani , umsabalalisi we-Digital Shadows_. Okufanele ukwenze ukubhala ngefomu lamahhala ku .
Ababhali: ΠΈ .
Source: www.habr.com