{"id":477571,"date":"2023-08-09T09:16:45","date_gmt":"2023-08-09T09:16:45","guid":{"rendered":""},"modified":"2023-09-05T11:14:59","modified_gmt":"2023-09-05T11:14:59","slug":"indicator-of-compromise","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/ar\/wiki\/indicator-of-compromise\/","title":{"rendered":"\u0645\u0624\u0634\u0631 \u0627\u0644\u062a\u0633\u0648\u064a\u0629"},"content":{"rendered":"<p>\u0645\u0624\u0634\u0631\u0627\u062a \u0627\u0644\u062a\u0633\u0648\u064a\u0629 (IoCs) \u0647\u064a \u0623\u062c\u0632\u0627\u0621 \u0645\u0646 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0637\u0628 \u0627\u0644\u0634\u0631\u0639\u064a \u0627\u0644\u062a\u064a \u062a\u062d\u062f\u062f \u0627\u0644\u0623\u0646\u0634\u0637\u0629 \u0627\u0644\u0636\u0627\u0631\u0629 \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629 \u0639\u0644\u0649 \u0627\u0644\u0634\u0628\u0643\u0629. \u064a\u062a\u0645 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0647\u0630\u0647 \u0627\u0644\u0639\u0646\u0627\u0635\u0631 \u0645\u0646 \u0642\u0628\u0644 \u0645\u062a\u062e\u0635\u0635\u064a \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u0644\u0644\u0643\u0634\u0641 \u0639\u0646 \u062e\u0631\u0648\u0642\u0627\u062a \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0648\u0639\u062f\u0648\u0649 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u0648\u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0627\u0644\u0623\u062e\u0631\u0649. \u064a\u0639\u0645\u0644 \u062a\u0637\u0628\u064a\u0642 IoCs \u0639\u0644\u0649 \u062a\u062d\u0633\u064a\u0646 \u0627\u0644\u0648\u0636\u0639 \u0627\u0644\u0623\u0645\u0646\u064a \u0644\u0644\u0634\u0628\u0643\u0627\u062a\u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u062a\u0644\u0643 \u0627\u0644\u062a\u064a \u062a\u0633\u062a\u062e\u062f\u0645 \u062e\u0648\u0627\u062f\u0645 \u0628\u0631\u0648\u0643\u0633\u064a \u0645\u062b\u0644 \u062a\u0644\u0643 \u0627\u0644\u062a\u064a \u064a\u0648\u0641\u0631\u0647\u0627 OneProxy.<\/p>\n<h2>\u0627\u0644\u0623\u0635\u0644 \u0648\u0627\u0644\u0633\u064a\u0627\u0642 \u0627\u0644\u062a\u0627\u0631\u064a\u062e\u064a \u0644\u0645\u0624\u0634\u0631 \u0627\u0644\u062a\u0633\u0648\u064a\u0629<\/h2>\n<p>\u062a\u0645 \u062a\u0635\u0648\u0631 \u0645\u0641\u0647\u0648\u0645 \u0645\u0624\u0634\u0631 \u0627\u0644\u062a\u0633\u0648\u064a\u0629 \u0643\u0627\u0633\u062a\u062c\u0627\u0628\u0629 \u0644\u0644\u062d\u0627\u062c\u0629 \u0625\u0644\u0649 \u0627\u062a\u062e\u0627\u0630 \u062a\u062f\u0627\u0628\u064a\u0631 \u0627\u0633\u062a\u0628\u0627\u0642\u064a\u0629 \u0641\u064a \u0645\u062c\u0627\u0644 \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a. \u062a\u0645 \u062a\u0642\u062f\u064a\u0645 \u0647\u0630\u0627 \u0627\u0644\u0645\u0635\u0637\u0644\u062d \u0644\u0623\u0648\u0644 \u0645\u0631\u0629 \u0645\u0646 \u0642\u0628\u0644 \u0634\u0631\u0643\u0629 Mandiant (\u0634\u0631\u0643\u0629 \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a) \u0641\u064a \u062a\u0642\u0631\u064a\u0631\u0647\u0627 \u0644\u0639\u0627\u0645 2013 \u062d\u0648\u0644 \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u0645\u0631\u0629 \u0627\u0644\u0645\u062a\u0642\u062f\u0645\u0629 (APTs). \u0648\u062d\u062f\u062f \u0627\u0644\u062a\u0642\u0631\u064a\u0631 \u0627\u0644\u0646\u0647\u062c \u0627\u0644\u0645\u062a\u0628\u0639 \u0644\u062a\u062d\u062f\u064a\u062f \u0627\u0644\u0623\u0646\u0634\u0637\u0629 \u0627\u0644\u0645\u0634\u0628\u0648\u0647\u0629 \u0641\u064a \u0627\u0644\u0646\u0638\u0627\u0645 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u0645\u0624\u0634\u0631\u0627\u062a\u060c \u0648\u0628\u0627\u0644\u062a\u0627\u0644\u064a \u064a\u0645\u062b\u0644 \u0628\u062f\u0627\u064a\u0629 IoCs \u0641\u064a \u0645\u0634\u0647\u062f \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a.<\/p>\n<h2>\u0645\u0624\u0634\u0631 \u0627\u0644\u062a\u0633\u0648\u064a\u0629: \u0641\u0647\u0645 \u0623\u0639\u0645\u0642<\/h2>\n<p>\u062a\u0634\u0628\u0647 IoC \u062f\u0644\u064a\u0644\u064b\u0627 \u064a\u0644\u0645\u062d \u0625\u0644\u0649 \u062d\u062f\u0648\u062b \u0627\u062e\u062a\u0631\u0627\u0642 \u0623\u0648 \u062a\u0633\u0648\u064a\u0629 \u0645\u062d\u062a\u0645\u0644\u0629 \u0641\u064a \u0627\u0644\u0634\u0628\u0643\u0629. \u064a\u0645\u0643\u0646 \u0623\u0646 \u062a\u062a\u0631\u0627\u0648\u062d \u0645\u0646 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0628\u0633\u064a\u0637\u0629 \u0645\u062b\u0644 \u0639\u0646\u0627\u0648\u064a\u0646 IP \u0648\u0639\u0646\u0627\u0648\u064a\u0646 URL \u0648\u0623\u0633\u0645\u0627\u0621 \u0627\u0644\u0646\u0637\u0627\u0642\u0627\u062a \u0625\u0644\u0649 \u0623\u0646\u0645\u0627\u0637 \u0623\u0643\u062b\u0631 \u062a\u0639\u0642\u064a\u062f\u064b\u0627 \u0645\u062b\u0644 \u062a\u062c\u0632\u0626\u0627\u062a \u0645\u0644\u0641\u0627\u062a \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0636\u0627\u0631\u0629 \u0623\u0648 \u0623\u0646\u0645\u0627\u0637 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0646\u0635\u064a\u0629 \u0627\u0644\u0636\u0627\u0631\u0629 \u0623\u0648 \u062d\u062a\u0649 \u0627\u0644\u062a\u0643\u062a\u064a\u0643\u0627\u062a \u0648\u0627\u0644\u062a\u0642\u0646\u064a\u0627\u062a \u0648\u0627\u0644\u0625\u062c\u0631\u0627\u0621\u0627\u062a (TTPs) \u0627\u0644\u062e\u0627\u0635\u0629 \u0628\u062c\u0647\u0627\u062a \u0627\u0644\u062a\u0647\u062f\u064a\u062f.<\/p>\n<p>\u0639\u0646\u062f\u0645\u0627 \u064a\u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u0647\u0630\u0647 \u0627\u0644\u0623\u062f\u0644\u0629 \u0641\u064a \u0627\u0644\u0634\u0628\u0643\u0629\u060c \u0641\u0625\u0646\u0647\u0627 \u062a\u0634\u064a\u0631 \u0625\u0644\u0649 \u0627\u062d\u062a\u0645\u0627\u0644 \u0643\u0628\u064a\u0631 \u0644\u062d\u062f\u0648\u062b \u0627\u062e\u062a\u0631\u0627\u0642 \u0623\u0645\u0646\u064a. \u064a\u062a\u0645 \u062c\u0645\u0639\u0647\u0627 \u0645\u0646 \u0645\u0635\u0627\u062f\u0631 \u0645\u062e\u062a\u0644\u0641\u0629 \u0645\u062b\u0644 \u0627\u0644\u0633\u062c\u0644\u0627\u062a \u0648\u0627\u0644\u062d\u0632\u0645 \u0648\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062a\u062f\u0641\u0642 \u0648\u0627\u0644\u062a\u0646\u0628\u064a\u0647\u0627\u062a\u060c \u0648\u062a\u0633\u062a\u062e\u062f\u0645\u0647\u0627 \u0641\u0631\u0642 \u0627\u0644\u0623\u0645\u0627\u0646 \u0644\u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0648\u0645\u0646\u0639\u0647\u0627 \u0648\u0627\u0644\u062a\u062e\u0641\u064a\u0641 \u0645\u0646\u0647\u0627.<\/p>\n<h2>\u0627\u0644\u0623\u0639\u0645\u0627\u0644 \u0627\u0644\u062f\u0627\u062e\u0644\u064a\u0629 \u0644\u0645\u0624\u0634\u0631 \u0627\u0644\u062a\u0633\u0648\u064a\u0629<\/h2>\n<p>\u062a\u0639\u0645\u0644 \u0645\u0624\u0634\u0631\u0627\u062a \u0627\u0644\u062a\u0633\u0648\u064a\u0629 \u0639\u0644\u0649 \u0623\u0633\u0627\u0633 \u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0627\u0644\u062a\u0647\u062f\u064a\u062f. \u062a\u0642\u0648\u0645 \u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u0628\u062c\u0645\u0639 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0648\u062a\u062d\u0644\u064a\u0644\u0647\u0627 \u0648\u0645\u0642\u0627\u0631\u0646\u062a\u0647\u0627 \u0645\u0639 IoCs \u0627\u0644\u0645\u0639\u0631\u0648\u0641\u0629. \u0625\u0630\u0627 \u062a\u0645 \u0627\u0644\u0639\u062b\u0648\u0631 \u0639\u0644\u0649 \u062a\u0637\u0627\u0628\u0642\u060c \u0641\u0625\u0646\u0647 \u064a\u0634\u064a\u0631 \u0625\u0644\u0649 \u0648\u062c\u0648\u062f \u062a\u0647\u062f\u064a\u062f \u0623\u0648 \u062e\u0631\u0642 \u0623\u0645\u0646\u064a.<\/p>\n<p>\u062a\u0639\u0645\u0644 IoCs \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u062e\u0637\u0648\u0627\u062a \u0627\u0644\u062a\u0627\u0644\u064a\u0629:<\/p>\n<ol>\n<li>\n<p>\u062c\u0645\u0639 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a: \u064a\u062a\u0645 \u062c\u0645\u0639 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0645\u0646 \u0627\u0644\u0633\u062c\u0644\u0627\u062a \u0648\u062d\u0632\u0645 \u0627\u0644\u0634\u0628\u0643\u0629 \u0648\u0623\u0646\u0634\u0637\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0648\u0627\u0644\u0645\u0635\u0627\u062f\u0631 \u0627\u0644\u0623\u062e\u0631\u0649.<\/p>\n<\/li>\n<li>\n<p>\u0627\u0644\u062a\u062d\u0644\u064a\u0644: \u064a\u062a\u0645 \u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0645\u062c\u0645\u0639\u0629 \u0628\u062d\u062b\u064b\u0627 \u0639\u0646 \u0623\u064a \u0623\u0646\u0634\u0637\u0629 \u0645\u0634\u0628\u0648\u0647\u0629 \u0623\u0648 \u062d\u0627\u0644\u0627\u062a \u0634\u0627\u0630\u0629.<\/p>\n<\/li>\n<li>\n<p>\u0645\u0637\u0627\u0628\u0642\u0629 IoC: \u062a\u062a\u0645 \u0645\u0637\u0627\u0628\u0642\u0629 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u0645 \u062a\u062d\u0644\u064a\u0644\u0647\u0627 \u0645\u0639 IoCs \u0627\u0644\u0645\u0639\u0631\u0648\u0641\u0629 \u0645\u0646 \u0645\u0635\u0627\u062f\u0631 \u0627\u0633\u062a\u062e\u0628\u0627\u0631\u0627\u062a \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0627\u0644\u0645\u062e\u062a\u0644\u0641\u0629.<\/p>\n<\/li>\n<li>\n<p>\u0627\u0644\u062a\u0646\u0628\u064a\u0647: \u0625\u0630\u0627 \u062a\u0645 \u0627\u0644\u0639\u062b\u0648\u0631 \u0639\u0644\u0649 \u062a\u0637\u0627\u0628\u0642\u060c \u064a\u062a\u0645 \u0625\u0646\u0634\u0627\u0621 \u062a\u0646\u0628\u064a\u0647 \u0644\u0625\u0628\u0644\u0627\u063a \u0641\u0631\u064a\u0642 \u0627\u0644\u0623\u0645\u0627\u0646 \u0628\u0648\u062c\u0648\u062f \u062a\u0647\u062f\u064a\u062f \u0645\u062d\u062a\u0645\u0644.<\/p>\n<\/li>\n<li>\n<p>\u0627\u0644\u062a\u062d\u0642\u064a\u0642: \u064a\u0642\u0648\u0645 \u0627\u0644\u0641\u0631\u064a\u0642 \u0627\u0644\u0623\u0645\u0646\u064a \u0628\u0627\u0644\u062a\u062d\u0642\u064a\u0642 \u0641\u064a \u0627\u0644\u062a\u0646\u0628\u064a\u0647 \u0644\u0644\u062a\u0623\u0643\u062f \u0645\u0646 \u0637\u0628\u064a\u0639\u0629 \u0627\u0644\u062a\u0647\u062f\u064a\u062f \u0648\u0641\u0647\u0645\u0647.<\/p>\n<\/li>\n<li>\n<p>\u0627\u0644\u062a\u062e\u0641\u064a\u0641: \u064a\u062a\u0645 \u0627\u062a\u062e\u0627\u0630 \u0627\u0644\u062a\u062f\u0627\u0628\u064a\u0631 \u0644\u0644\u0642\u0636\u0627\u0621 \u0639\u0644\u0649 \u0627\u0644\u062a\u0647\u062f\u064a\u062f \u0648\u0627\u0644\u062a\u0639\u0627\u0641\u064a \u0645\u0646 \u0623\u064a \u0636\u0631\u0631.<\/p>\n<\/li>\n<\/ol>\n<h2>\u0627\u0644\u0645\u0644\u0627\u0645\u062d \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629 \u0644\u0645\u0624\u0634\u0631 \u0627\u0644\u062a\u0633\u0648\u064a\u0629<\/h2>\n<ul>\n<li>\n<p>\u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0627\u0644\u0645\u062a\u0642\u062f\u0645\u0629: \u064a\u0645\u0643\u0646 \u0644\u0640 IoCs \u062a\u062d\u062f\u064a\u062f \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0627\u0644\u0645\u0639\u0642\u062f\u0629 \u0627\u0644\u062a\u064a \u0642\u062f \u062a\u0641\u0634\u0644 \u0641\u064a\u0647\u0627 \u0627\u0644\u062f\u0641\u0627\u0639\u0627\u062a \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u062a\u0642\u0644\u064a\u062f\u064a\u0629.<\/p>\n<\/li>\n<li>\n<p>\u0627\u0644\u0623\u0645\u0627\u0646 \u0627\u0644\u0627\u0633\u062a\u0628\u0627\u0642\u064a: \u062a\u0642\u062f\u0645 IoCs \u0646\u0647\u062c\u064b\u0627 \u0627\u0633\u062a\u0628\u0627\u0642\u064a\u064b\u0627 \u0644\u0644\u0623\u0645\u0627\u0646 \u0645\u0646 \u062e\u0644\u0627\u0644 \u062a\u062d\u062f\u064a\u062f \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0641\u064a \u0648\u0642\u062a \u0645\u0628\u0643\u0631 \u0645\u0646 \u062f\u0648\u0631\u0629 \u062d\u064a\u0627\u062a\u0647\u0627.<\/p>\n<\/li>\n<li>\n<p>\u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0627\u0644\u0633\u064a\u0627\u0642\u064a\u0629: \u062a\u0648\u0641\u0631 IoCs \u0633\u064a\u0627\u0642\u064b\u0627 \u0642\u064a\u0645\u064b\u0627 \u062d\u0648\u0644 \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a\u060c \u0645\u062b\u0644 \u0627\u0644\u062c\u0647\u0627\u062a \u0627\u0644\u0641\u0627\u0639\u0644\u0629 \u0641\u064a \u0627\u0644\u062a\u0647\u062f\u064a\u062f \u0627\u0644\u0645\u0639\u0646\u064a\u0629 \u0648\u062a\u0642\u0646\u064a\u0627\u062a\u0647\u0627 \u0648\u0623\u0647\u062f\u0627\u0641\u0647\u0627.<\/p>\n<\/li>\n<li>\n<p>\u0627\u0644\u062a\u0643\u0627\u0645\u0644 \u0645\u0639 \u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0623\u0645\u0627\u0646: \u064a\u0645\u0643\u0646 \u062f\u0645\u062c IoCs \u0645\u0639 \u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0623\u0645\u0627\u0646 \u0627\u0644\u0645\u062e\u062a\u0644\u0641\u0629 \u0645\u062b\u0644 SIEMs \u0648\u062c\u062f\u0631\u0627\u0646 \u0627\u0644\u062d\u0645\u0627\u064a\u0629 \u0648IDS\/IPS \u0644\u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0641\u064a \u0627\u0644\u0648\u0642\u062a \u0627\u0644\u0641\u0639\u0644\u064a.<\/p>\n<\/li>\n<li>\n<p>\u0627\u0633\u062a\u062e\u0628\u0627\u0631\u0627\u062a \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a: \u062a\u0633\u0627\u0647\u0645 IoCs \u0641\u064a \u0627\u0633\u062a\u062e\u0628\u0627\u0631\u0627\u062a \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0645\u0646 \u062e\u0644\u0627\u0644 \u062a\u0648\u0641\u064a\u0631 \u0631\u0624\u0649 \u062d\u0648\u0644 \u0645\u0634\u0647\u062f \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0627\u0644\u0645\u062a\u0637\u0648\u0631.<\/p>\n<\/li>\n<\/ul>\n<h2>\u0623\u0646\u0648\u0627\u0639 \u0645\u0624\u0634\u0631\u0627\u062a \u0627\u0644\u062a\u0633\u0648\u064a\u0629<\/h2>\n<p>\u0647\u0646\u0627\u0643 \u0623\u0646\u0648\u0627\u0639 \u0645\u062e\u062a\u0644\u0641\u0629 \u0645\u0646 IoCs \u0628\u0646\u0627\u0621\u064b \u0639\u0644\u0649 \u0646\u0648\u0639 \u0627\u0644\u0623\u062f\u0644\u0629 \u0627\u0644\u062a\u064a \u062a\u0642\u062f\u0645\u0647\u0627:<\/p>\n<ol>\n<li>\n<p><strong>\u0645\u0624\u0634\u0631\u0627\u062a \u0627\u0644\u0634\u0628\u0643\u0629:<\/strong><\/p>\n<ul>\n<li>\u0639\u0646\u0627\u0648\u064a\u0646 \u0627\u0644\u0627\u0646\u062a\u0631\u0646\u062a \u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644<\/li>\n<li>\u0623\u0633\u0645\u0627\u0621 \u0627\u0644\u0646\u0637\u0627\u0642\u0627\u062a<\/li>\n<li>\u0639\u0646\u0627\u0648\u064a\u0646 URL\/\u0639\u0646\u0627\u0648\u064a\u0646 URI<\/li>\n<li>\u0648\u0643\u0644\u0627\u0621 \u0645\u0633\u062a\u062e\u062f\u0645 HTTP<\/li>\n<li>\u0645\u0624\u0634\u0631\u0627\u062a \u0627\u0633\u0645 \u0627\u0644\u062e\u0627\u062f\u0645 (SNI)<\/li>\n<li>\u0628\u0631\u0648\u062a\u0648\u0643\u0648\u0644\u0627\u062a \u0627\u0644\u0634\u0628\u0643\u0629<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><strong>\u0645\u0624\u0634\u0631\u0627\u062a \u0627\u0644\u0645\u0636\u064a\u0641:<\/strong><\/p>\n<ul>\n<li>\u062a\u062c\u0632\u0626\u0629 \u0627\u0644\u0645\u0644\u0641 (MD5\u060c SHA1\u060c SHA256)<\/li>\n<li>\u0645\u0633\u0627\u0631\u0627\u062a \u0627\u0644\u0645\u0644\u0641\u0627\u062a<\/li>\n<li>\u0645\u0641\u0627\u062a\u064a\u062d \u0627\u0644\u062a\u0633\u062c\u064a\u0644<\/li>\n<li>\u0623\u0633\u0645\u0627\u0621 Mutex (\u0645\u062a\u062d\u0648\u0644\u0629).<\/li>\n<li>\u0627\u0644\u0623\u0646\u0627\u0628\u064a\u0628 \u0627\u0644\u0645\u0633\u0645\u0627\u0629<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><strong>\u0627\u0644\u0645\u0624\u0634\u0631\u0627\u062a \u0627\u0644\u0633\u0644\u0648\u0643\u064a\u0629:<\/strong><\/p>\n<ul>\n<li>\u0623\u0646\u0645\u0627\u0637 \u0627\u0644\u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0646\u0635\u064a\u0629 \u0627\u0644\u0636\u0627\u0631\u0629<\/li>\n<li>\u0639\u0645\u0644\u064a\u0627\u062a \u063a\u064a\u0631 \u0639\u0627\u062f\u064a\u0629<\/li>\n<li>\u0627\u0644\u062a\u0643\u062a\u064a\u0643\u0627\u062a \u0648\u0627\u0644\u062a\u0642\u0646\u064a\u0627\u062a \u0648\u0627\u0644\u0625\u062c\u0631\u0627\u0621\u0627\u062a (TTPs)<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<h2>\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0645\u0624\u0634\u0631 \u0627\u0644\u062a\u0633\u0648\u064a\u0629: \u0627\u0644\u062a\u062d\u062f\u064a\u0627\u062a \u0648\u0627\u0644\u062d\u0644\u0648\u0644<\/h2>\n<p>\u0625\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 IoCs \u0644\u0627 \u064a\u062e\u0644\u0648 \u0645\u0646 \u0627\u0644\u062a\u062d\u062f\u064a\u0627\u062a. \u064a\u0645\u0643\u0646 \u0623\u0646 \u062a\u0624\u062f\u064a \u0627\u0644\u0625\u064a\u062c\u0627\u0628\u064a\u0627\u062a \u0627\u0644\u0643\u0627\u0630\u0628\u0629 \u0648IoCs \u0627\u0644\u062a\u064a \u0639\u0641\u0627 \u0639\u0644\u064a\u0647\u0627 \u0627\u0644\u0632\u0645\u0646 \u0648\u0646\u0642\u0635 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0627\u0644\u0633\u064a\u0627\u0642\u064a\u0629 \u0625\u0644\u0649 \u0625\u0639\u0627\u0642\u0629 \u0641\u0639\u0627\u0644\u064a\u0629 IoCs.<\/p>\n<p>\u0648\u0645\u0639 \u0630\u0644\u0643\u060c \u064a\u0645\u0643\u0646 \u0645\u0639\u0627\u0644\u062c\u0629 \u0647\u0630\u0647 \u0627\u0644\u0645\u0634\u0643\u0644\u0627\u062a \u0645\u0646 \u062e\u0644\u0627\u0644:<\/p>\n<ul>\n<li>\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062e\u0644\u0627\u0635\u0627\u062a \u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0627\u0644\u062a\u0647\u062f\u064a\u062f \u0627\u0644\u0645\u062d\u062f\u062b\u0629 \u0639\u0627\u0644\u064a\u0629 \u0627\u0644\u062c\u0648\u062f\u0629 \u0644\u062a\u0642\u0644\u064a\u0644 \u0645\u062e\u0627\u0637\u0631 \u0627\u0644\u0646\u062a\u0627\u0626\u062c \u0627\u0644\u0625\u064a\u062c\u0627\u0628\u064a\u0629 \u0627\u0644\u0643\u0627\u0630\u0628\u0629 \u0648IoCs \u0627\u0644\u0642\u062f\u064a\u0645\u0629.<\/li>\n<li>\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u0623\u062f\u0648\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u0648\u0641\u0631 \u0633\u064a\u0627\u0642\u064b\u0627 \u063a\u0646\u064a\u064b\u0627 \u0644\u0640 IoCs \u0644\u0641\u0647\u0645 \u0637\u0628\u064a\u0639\u0629 \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0628\u0634\u0643\u0644 \u0623\u0641\u0636\u0644.<\/li>\n<li>\u0636\u0628\u0637 \u0648\u062a\u062d\u062f\u064a\u062b \u0623\u062f\u0648\u0627\u062a \u0648\u0645\u0646\u0647\u062c\u064a\u0627\u062a \u0645\u0637\u0627\u0628\u0642\u0629 IoC \u0628\u0627\u0646\u062a\u0638\u0627\u0645.<\/li>\n<\/ul>\n<h2>\u0645\u0642\u0627\u0631\u0646\u0629 \u0645\u0624\u0634\u0631\u0627\u062a \u0627\u0644\u062a\u0633\u0648\u064a\u0629 \u0645\u0639 \u0627\u0644\u0645\u0635\u0637\u0644\u062d\u0627\u062a \u0627\u0644\u0645\u0645\u0627\u062b\u0644\u0629<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u0634\u0631\u0637<\/th>\n<th>\u0648\u0635\u0641<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u0645\u0624\u0634\u0631 \u0627\u0644\u062a\u0633\u0648\u064a\u0629 (IoC)<\/td>\n<td>\u062c\u0632\u0621 \u0645\u0646 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u062d\u062f\u062f \u0627\u0644\u0623\u0646\u0634\u0637\u0629 \u0627\u0644\u0636\u0627\u0631\u0629 \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629.<\/td>\n<\/tr>\n<tr>\n<td>\u0645\u0624\u0634\u0631 \u0627\u0644\u0647\u062c\u0648\u0645 (IoA)<\/td>\n<td>\u062f\u0644\u064a\u0644 \u0639\u0644\u0649 \u0623\u0646 \u0627\u0644\u0647\u062c\u0648\u0645 \u064a\u062d\u062f\u062b \u062d\u0627\u0644\u064a\u064b\u0627 \u0623\u0648 \u0639\u0644\u0649 \u0648\u0634\u0643 \u0627\u0644\u062d\u062f\u0648\u062b.<\/td>\n<\/tr>\n<tr>\n<td>\u0645\u0624\u0634\u0631 \u0627\u0644\u062a\u0647\u062f\u064a\u062f<\/td>\n<td>\u0645\u0635\u0637\u0644\u062d \u0639\u0627\u0645 \u0644\u0640 IoC \u0623\u0648 IoA \u064a\u0634\u064a\u0631 \u0625\u0644\u0649 \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629 \u0623\u0648 \u0627\u0644\u0641\u0639\u0644\u064a\u0629.<\/td>\n<\/tr>\n<tr>\n<td>\u0627\u0644\u062a\u0643\u062a\u064a\u0643 \u0648\u0627\u0644\u062a\u0642\u0646\u064a\u0629 \u0648\u0627\u0644\u0625\u062c\u0631\u0627\u0621\u0627\u062a (TTP)<\/td>\n<td>\u064a\u0635\u0641 \u0643\u064a\u0641\u064a\u0629 \u0639\u0645\u0644 \u0627\u0644\u062c\u0647\u0627\u062a \u0627\u0644\u0641\u0627\u0639\u0644\u0629 \u0641\u064a \u0645\u062c\u0627\u0644 \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u060c \u0648\u0645\u0627 \u0642\u062f \u064a\u0641\u0639\u0644\u0648\u0646\u0647 \u0628\u0639\u062f \u0630\u0644\u0643.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u0627\u0644\u0631\u0624\u0649 \u0627\u0644\u0645\u0633\u062a\u0642\u0628\u0644\u064a\u0629 \u0648\u0627\u0644\u062a\u0642\u0646\u064a\u0627\u062a \u0627\u0644\u0645\u062a\u0639\u0644\u0642\u0629 \u0628\u0645\u0624\u0634\u0631 \u0627\u0644\u062a\u0633\u0648\u064a\u0629<\/h2>\n<p>\u064a\u0643\u0645\u0646 \u0645\u0633\u062a\u0642\u0628\u0644 IoCs \u0641\u064a \u0627\u0644\u062a\u0643\u0627\u0645\u0644 \u0645\u0639 \u0627\u0644\u062a\u0642\u0646\u064a\u0627\u062a \u0627\u0644\u0645\u062a\u0642\u062f\u0645\u0629 \u0645\u062b\u0644 \u0627\u0644\u062a\u0639\u0644\u0645 \u0627\u0644\u0622\u0644\u064a \u0648\u0627\u0644\u0630\u0643\u0627\u0621 \u0627\u0644\u0627\u0635\u0637\u0646\u0627\u0639\u064a. \u064a\u0645\u0643\u0646 \u0644\u0647\u0630\u0647 \u0627\u0644\u062a\u0642\u0646\u064a\u0627\u062a \u0623\u062a\u0645\u062a\u0629 \u062c\u0645\u0639 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0648\u062a\u062d\u0644\u064a\u0644\u0647\u0627\u060c \u0648\u062a\u0639\u0632\u064a\u0632 \u0642\u062f\u0631\u0627\u062a \u0627\u0644\u0643\u0634\u0641 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0627\u0644\u062a\u0639\u0644\u0645 \u0645\u0646 \u0627\u0644\u0623\u0646\u0645\u0627\u0637 \u0627\u0644\u0645\u0648\u062c\u0648\u062f\u0629 \u0641\u064a \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a. \u0639\u0644\u0627\u0648\u0629 \u0639\u0644\u0649 \u0630\u0644\u0643\u060c \u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u0624\u062f\u064a \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062a\u0642\u0646\u064a\u0629 blockchain \u0625\u0644\u0649 \u062a\u062d\u0633\u064a\u0646 \u0645\u0635\u062f\u0627\u0642\u064a\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0633\u062a\u062e\u0628\u0627\u0631\u0627\u062a \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0648\u062b\u0628\u0627\u062a\u0647\u0627.<\/p>\n<h2>\u0627\u0644\u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0648\u0643\u064a\u0644\u0629 \u0648\u0645\u0624\u0634\u0631 \u0627\u0644\u062a\u0633\u0648\u064a\u0629<\/h2>\n<p>\u064a\u0645\u0643\u0646 \u0644\u0644\u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0648\u0643\u064a\u0644\u0629\u060c \u0645\u062b\u0644 \u062a\u0644\u0643 \u0627\u0644\u062a\u064a \u064a\u0648\u0641\u0631\u0647\u0627 OneProxy\u060c \u0623\u0646 \u062a\u062a\u0641\u0627\u0639\u0644 \u0628\u0634\u0643\u0644 \u0643\u0628\u064a\u0631 \u0645\u0639 IoCs. \u062a\u0648\u0641\u0631 \u0627\u0644\u0648\u0643\u0644\u0627\u0621 \u0637\u0628\u0642\u0629 \u0645\u0646 \u0627\u0644\u062a\u062c\u0631\u064a\u062f \u0648\u0627\u0644\u0623\u0645\u0627\u0646 \u0628\u064a\u0646 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0648\u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a. \u064a\u0645\u0643\u0646 \u0641\u062d\u0635 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062a\u064a \u062a\u0645\u0631 \u0639\u0628\u0631 \u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0648\u0643\u064a\u0644 \u0628\u062d\u062b\u064b\u0627 \u0639\u0646 IoCs\u060c \u0645\u0645\u0627 \u064a\u062c\u0639\u0644\u0647\u0627 \u0646\u0642\u0637\u0629 \u0642\u064a\u0645\u0629 \u0644\u0627\u0643\u062a\u0634\u0627\u0641 \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0648\u0627\u0644\u062a\u062e\u0641\u064a\u0641 \u0645\u0646 \u0622\u062b\u0627\u0631\u0647\u0627. \u0639\u0644\u0627\u0648\u0629 \u0639\u0644\u0649 \u0630\u0644\u0643\u060c \u064a\u0645\u0643\u0646 \u0623\u064a\u0636\u064b\u0627 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u0648\u0643\u0644\u0627\u0621 \u0644\u0625\u062e\u0641\u0627\u0621 \u0647\u0648\u064a\u0629 \u0645\u0635\u062f\u0631 IoCs\u060c \u0645\u0645\u0627 \u064a\u062c\u0639\u0644 \u0627\u0644\u0623\u0645\u0631 \u0623\u0643\u062b\u0631 \u0635\u0639\u0648\u0628\u0629 \u0628\u0627\u0644\u0646\u0633\u0628\u0629 \u0644\u0644\u062c\u0647\u0627\u062a \u0627\u0644\u0641\u0627\u0639\u0644\u0629 \u0641\u064a \u0645\u062c\u0627\u0644 \u0627\u0644\u062a\u0647\u062f\u064a\u062f \u0644\u062a\u062d\u062f\u064a\u062f \u0623\u0647\u062f\u0627\u0641\u0647\u0627.<\/p>\n<h2>\u0631\u0648\u0627\u0628\u0637 \u0630\u0627\u062a \u0639\u0644\u0627\u0642\u0629<\/h2>\n<ol>\n<li><a href=\"https:\/\/attack.mitre.org\/\" target=\"_new\" rel=\"noopener nofollow\">\u0625\u0637\u0627\u0631 \u0645\u064a\u062a\u0631\u064a ATT&amp;CK<\/a><\/li>\n<li><a href=\"http:\/\/openioc.org\/\" target=\"_new\" rel=\"noopener nofollow\">\u0625\u0637\u0627\u0631 \u0639\u0645\u0644 OpenIOC<\/a><\/li>\n<li><a href=\"https:\/\/oasis-open.github.io\/cti-documentation\/\" target=\"_new\" rel=\"noopener nofollow\">STIX\/TAXII \u0627\u0633\u062a\u062e\u0628\u0627\u0631\u0627\u062a \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0629<\/a><\/li>\n<li><a href=\"https:\/\/www.sans.org\/reading-room\/whitepapers\/forensics\/paper\/33949\" target=\"_new\" rel=\"noopener nofollow\">\u0645\u0624\u0634\u0631\u0627\u062a \u0627\u0644\u062a\u0633\u0648\u064a\u0629 (IoCs) \u2013 \u0645\u0639\u0647\u062f SANS<\/a><\/li>\n<\/ol>\n<p>\u062a\u0648\u0641\u0631 \u0645\u0624\u0634\u0631\u0627\u062a \u0627\u0644\u062a\u0633\u0648\u064a\u0629 \u0631\u0624\u0649 \u0645\u0647\u0645\u0629 \u062d\u0648\u0644 \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0627\u0644\u0645\u062d\u062a\u0645\u0644\u0629 \u0623\u0648 \u0627\u0644\u062d\u0627\u0644\u064a\u0629. \u0639\u0644\u0649 \u0627\u0644\u0631\u063a\u0645 \u0645\u0646 \u0623\u0646\u0647\u0627 \u062a\u0645\u062b\u0644 \u062a\u062d\u062f\u064a\u0627\u062a\u060c \u0625\u0644\u0627 \u0623\u0646 \u0627\u0644\u0641\u0648\u0627\u0626\u062f \u0627\u0644\u062a\u064a \u062a\u0642\u062f\u0645\u0647\u0627 \u0641\u064a\u0645\u0627 \u064a\u062a\u0639\u0644\u0642 \u0628\u0627\u0644\u0643\u0634\u0641 \u0627\u0644\u0627\u0633\u062a\u0628\u0627\u0642\u064a \u0639\u0646 \u0627\u0644\u062a\u0647\u062f\u064a\u062f\u0627\u062a \u0648\u0627\u0644\u062a\u062e\u0641\u064a\u0641 \u0645\u0646 \u0622\u062b\u0627\u0631\u0647\u0627 \u062a\u0639\u062a\u0628\u0631 \u0643\u0628\u064a\u0631\u0629. \u0648\u0645\u0639 \u062f\u0645\u062c \u0627\u0644\u062a\u0642\u0646\u064a\u0627\u062a \u0627\u0644\u0645\u062a\u0642\u062f\u0645\u0629\u060c \u0633\u062a\u0638\u0644 IoCs \u062c\u0632\u0621\u064b\u0627 \u062d\u064a\u0648\u064a\u064b\u0627 \u0645\u0646 \u0627\u0633\u062a\u0631\u0627\u062a\u064a\u062c\u064a\u0627\u062a \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a.<\/p>","protected":false},"featured_media":477572,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477571","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Indicator of Compromise: An Essential Tool for Cybersecurity<\/mark>","faq_items":[{"question":"What is an Indicator of Compromise (IoC)?","answer":"<p>An Indicator of Compromise (IoC) is a piece of forensic data that cybersecurity professionals use to identify potentially malicious activities on a network. IoCs can range from simple data like IP addresses, URLs, and domain names to more complex patterns such as hashes of malware files or patterns of malicious scripts.<\/p>"},{"question":"Who introduced the concept of Indicator of Compromise?","answer":"<p>The concept of Indicator of Compromise was first introduced by Mandiant, a cybersecurity firm, in its 2013 report on Advanced Persistent Threats (APTs).<\/p>"},{"question":"How does an Indicator of Compromise work?","answer":"<p>An IoC works by collecting data from various sources like logs, packets, and alerts. This data is then analyzed and compared against known IoCs from various threat intelligence sources. If a match is found, an alert is generated to inform the security team of a potential threat, who then investigates and takes measures to mitigate the threat.<\/p>"},{"question":"What are the key features of an Indicator of Compromise?","answer":"<p>Key features of IoCs include their ability to detect advanced threats that traditional security defenses might miss, their proactive approach to security, the provision of valuable contextual information about threats, their integration with various security tools, and their contribution to threat intelligence.<\/p>"},{"question":"What are the different types of Indicator of Compromise?","answer":"<p>IoCs can be classified into Network Indicators (IP Addresses, Domain Names, URLs\/URIs, HTTP User Agents, Server Name Indicators, Network Protocols), Host Indicators (File Hashes, File Paths, Registry Keys, Mutex names, Named Pipes), and Behavioral Indicators (Patterns of Malicious Scripts, Unusual Processes, Tactics, Techniques, and Procedures).<\/p>"},{"question":"What challenges are associated with the use of Indicator of Compromise?","answer":"<p>The use of IoCs can come with challenges such as false positives, outdated IoCs, and lack of contextual information. However, these issues can be addressed by using high-quality, updated threat intelligence feeds, tools that provide rich context for IoCs, and regularly tuning and updating IoC matching tools and methodologies.<\/p>"},{"question":"How does an Indicator of Compromise compare with similar terms like Indicator of Attack and Threat Indicator?","answer":"<p>While an IoC is a piece of data that identifies potentially malicious activity, an Indicator of Attack (IoA) is evidence that an attack is currently happening or is about to occur. A Threat Indicator is a general term for either an IoC or an IoA that indicates potential or actual threats.<\/p>"},{"question":"How are proxy servers associated with Indicator of Compromise?","answer":"<p>Proxy servers, such as those provided by OneProxy, can inspect the data passing through them for IoCs, making them a valuable point for detecting and mitigating threats. Moreover, proxies can also be used to anonymize the source of IoCs, making it more challenging for threat actors to identify their targets.<\/p>"},{"question":"What are the future perspectives related to Indicator of Compromise?","answer":"<p>The future of IoCs lies in their integration with advanced technologies such as machine learning, artificial intelligence, and blockchain technology. These technologies can automate the collection and analysis of data, enhance detection capabilities, and improve the trustworthiness of threat intelligence data.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/wiki\/477571","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/wiki\/477571\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/media\/477572"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/ar\/wp-json\/wp\/v2\/media?parent=477571"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}