{"id":477801,"date":"2023-08-09T09:20:26","date_gmt":"2023-08-09T09:20:26","guid":{"rendered":""},"modified":"2023-09-05T11:15:27","modified_gmt":"2023-09-05T11:15:27","slug":"lateral-movement","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/jp\/wiki\/lateral-movement\/","title":{"rendered":"\u6a2a\u65b9\u5411\u306e\u79fb\u52d5"},"content":{"rendered":"

\u30e9\u30c6\u30e9\u30eb\u30e0\u30fc\u30d6\u30e1\u30f3\u30c8\u3068\u306f\u3001\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u8005\u304c\u6700\u521d\u306e\u30a2\u30af\u30bb\u30b9\u3092\u7372\u5f97\u3057\u305f\u5f8c\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3092\u901a\u3058\u3066\u62e1\u6563\u3057\u3001\u65b9\u5411\u8ee2\u63db\u3059\u308b\u305f\u3081\u306b\u4f7f\u7528\u3059\u308b\u624b\u6cd5\u3092\u6307\u3057\u307e\u3059\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u306f\u7d44\u7e54\u306e\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u3092\u6c34\u5e73\u306b\u79fb\u52d5\u3057\u3001\u3059\u3050\u306b\u7591\u308f\u308c\u308b\u3053\u3068\u306a\u304f\u3055\u307e\u3056\u307e\u306a\u30b7\u30b9\u30c6\u30e0\u3092\u63a2\u7d22\u3057\u3066\u60aa\u7528\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u3053\u306e\u65b9\u6cd5\u306f\u3001\u30e9\u30c6\u30e9\u30eb\u30e0\u30fc\u30d6\u30e1\u30f3\u30c8\u306b\u3088\u3063\u3066\u30c7\u30fc\u30bf\u4fb5\u5bb3\u3001\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u3001\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4fb5\u5bb3\u304c\u767a\u751f\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u305f\u3081\u3001\u4f01\u696d\u306b\u3068\u3063\u3066\u7279\u306b\u61f8\u5ff5\u3055\u308c\u307e\u3059\u3002<\/p>\n

\u6a2a\u79fb\u52d5\u306e\u8d77\u6e90\u3068\u305d\u306e\u6700\u521d\u306e\u8a00\u53ca\u306e\u6b74\u53f2<\/h2>\n

\u30e9\u30c6\u30e9\u30eb\u30e0\u30fc\u30d6\u30e1\u30f3\u30c8\u306e\u6982\u5ff5\u306f\u300120 \u4e16\u7d00\u5f8c\u534a\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5316\u3055\u308c\u305f\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf \u30b7\u30b9\u30c6\u30e0\u306e\u9032\u5316\u3068\u3068\u3082\u306b\u751f\u307e\u308c\u307e\u3057\u305f\u3002\u7d44\u7e54\u304c\u5185\u90e8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5185\u3067\u8907\u6570\u306e\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u3092\u63a5\u7d9a\u3059\u308b\u3088\u3046\u306b\u306a\u308b\u3068\u3001\u30cf\u30c3\u30ab\u30fc\u306f\u76f8\u4e92\u63a5\u7d9a\u3055\u308c\u305f\u3053\u308c\u3089\u306e\u30b7\u30b9\u30c6\u30e0\u3092\u6a2a\u65ad\u3057\u3066\u8cb4\u91cd\u306a\u30c7\u30fc\u30bf\u306b\u30a2\u30af\u30bb\u30b9\u3057\u305f\u308a\u3001\u5371\u5bb3\u3092\u52a0\u3048\u305f\u308a\u3059\u308b\u65b9\u6cd5\u3092\u6a21\u7d22\u3057\u307e\u3057\u305f\u3002\u9632\u5fa1\u5074\u304c\u653b\u6483\u8005\u304c\u3055\u307e\u3056\u307e\u306a\u624b\u6cd5\u3092\u4f7f\u7528\u3057\u3066\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5185\u3092\u79fb\u52d5\u3059\u308b\u306e\u3092\u89b3\u5bdf\u3057\u305f\u305f\u3081\u30012000 \u5e74\u4ee3\u521d\u982d\u306b\u300c\u30e9\u30c6\u30e9\u30eb\u30e0\u30fc\u30d6\u30e1\u30f3\u30c8\u300d\u3068\u3044\u3046\u7528\u8a9e\u304c\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5206\u91ce\u3067\u6ce8\u76ee\u3055\u308c\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u3002<\/p>\n

\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u306b\u95a2\u3059\u308b\u8a73\u7d30\u60c5\u5831\u3002\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u306b\u95a2\u3059\u308b\u30c8\u30d4\u30c3\u30af\u306e\u62e1\u5f35<\/h2>\n

\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u306f\u3001\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u306e\u3055\u307e\u3056\u307e\u306a\u6bb5\u968e\u3092\u793a\u3059\u30e2\u30c7\u30eb\u3067\u3042\u308b\u30b5\u30a4\u30d0\u30fc \u30ad\u30eb \u30c1\u30a7\u30fc\u30f3\u306e\u91cd\u8981\u306a\u6bb5\u968e\u3067\u3059\u3002\u30bd\u30fc\u30b7\u30e3\u30eb \u30a8\u30f3\u30b8\u30cb\u30a2\u30ea\u30f3\u30b0\u3001\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306e\u8106\u5f31\u6027\u306e\u60aa\u7528\u3001\u307e\u305f\u306f\u305d\u306e\u4ed6\u306e\u624b\u6bb5\u306b\u3088\u3063\u3066\u6700\u521d\u306e\u8db3\u639b\u304b\u308a\u304c\u78ba\u7acb\u3055\u308c\u308b\u3068\u3001\u653b\u6483\u8005\u306f\u6a2a\u65b9\u5411\u306b\u79fb\u52d5\u3057\u3066\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3078\u306e\u3088\u308a\u91cd\u8981\u306a\u30a2\u30af\u30bb\u30b9\u3068\u5236\u5fa1\u3092\u7372\u5f97\u3057\u3088\u3046\u3068\u3057\u307e\u3059\u3002<\/p>\n

\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u4e2d\u3001\u653b\u6483\u8005\u306f\u901a\u5e38\u3001\u5075\u5bdf\u3092\u884c\u3063\u3066\u4fa1\u5024\u306e\u9ad8\u3044\u30bf\u30fc\u30b2\u30c3\u30c8\u3092\u7279\u5b9a\u3057\u3001\u6a29\u9650\u3092\u6607\u683c\u3057\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5168\u4f53\u306b\u30de\u30eb\u30a6\u30a7\u30a2\u3084\u30c4\u30fc\u30eb\u3092\u62e1\u6563\u3057\u307e\u3059\u3002\u4fb5\u5bb3\u3055\u308c\u305f\u8cc7\u683c\u60c5\u5831\u3001Pass-the-Hash \u653b\u6483\u3001\u30ea\u30e2\u30fc\u30c8 \u30b3\u30fc\u30c9\u5b9f\u884c\u3001\u305d\u306e\u4ed6\u306e\u9ad8\u5ea6\u306a\u624b\u6cd5\u3092\u4f7f\u7528\u3057\u3066\u3001\u7d44\u7e54\u5185\u3067\u306e\u5f71\u97ff\u529b\u3092\u62e1\u5927\u3059\u308b\u5834\u5408\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

\u6a2a\u65b9\u5411\u306e\u52d5\u304d\u306e\u5185\u90e8\u69cb\u9020\u3002\u6a2a\u65b9\u5411\u306e\u52d5\u304d\u306e\u4ed5\u7d44\u307f<\/h2>\n

\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u306e\u624b\u6cd5\u306f\u3001\u653b\u6483\u8005\u306e\u30b9\u30ad\u30eb \u30ec\u30d9\u30eb\u3001\u7d44\u7e54\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f53\u5236\u3001\u5229\u7528\u53ef\u80fd\u306a\u30c4\u30fc\u30eb\u306b\u3088\u3063\u3066\u7570\u306a\u308a\u307e\u3059\u3002\u305f\u3060\u3057\u3001\u4e00\u822c\u7684\u306a\u6226\u7565\u306b\u306f\u6b21\u306e\u3088\u3046\u306a\u3082\u306e\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

    \n
  1. \n

    \u30d1\u30b9\u30fb\u30b6\u30fb\u30cf\u30c3\u30b7\u30e5\uff08PtH\uff09\u653b\u6483<\/strong>: \u653b\u6483\u8005\u306f\u3001\u4fb5\u5bb3\u3055\u308c\u305f\u30b7\u30b9\u30c6\u30e0\u304b\u3089\u30cf\u30c3\u30b7\u30e5\u5316\u3055\u308c\u305f\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u62bd\u51fa\u3057\u3001\u5143\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u77e5\u3089\u306a\u304f\u3066\u3082\u3001\u305d\u308c\u3092\u4f7f\u7528\u3057\u3066\u4ed6\u306e\u30b7\u30b9\u30c6\u30e0\u3067\u8a8d\u8a3c\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

  2. \n

    \u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c (RCE)<\/strong>\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u307e\u305f\u306f\u30b5\u30fc\u30d3\u30b9\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3066\u30ea\u30e2\u30fc\u30c8 \u30b7\u30b9\u30c6\u30e0\u4e0a\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3057\u3001\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u3092\u8a31\u53ef\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

  3. \n

    \u30d6\u30eb\u30fc\u30c8\u30d5\u30a9\u30fc\u30b9\u653b\u6483<\/strong>: \u7570\u306a\u308b\u30e6\u30fc\u30b6\u30fc\u540d\u3068\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u7d44\u307f\u5408\u308f\u305b\u3092\u7e70\u308a\u8fd4\u3057\u8a66\u884c\u3057\u3066\u3001\u30b7\u30b9\u30c6\u30e0\u306b\u4e0d\u6b63\u306b\u30a2\u30af\u30bb\u30b9\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

  4. \n

    \u4fe1\u983c\u95a2\u4fc2\u306e\u6d3b\u7528<\/strong>\u30b7\u30b9\u30c6\u30e0\u307e\u305f\u306f\u30c9\u30e1\u30a4\u30f3\u9593\u3067\u78ba\u7acb\u3055\u308c\u305f\u4fe1\u983c\u3092\u60aa\u7528\u3057\u3066\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3092\u6a2a\u65b9\u5411\u306b\u79fb\u52d5\u3059\u308b\u3053\u3068\u3002<\/p>\n<\/li>\n

  5. \n

    \u30ea\u30e2\u30fc\u30c8 \u30a2\u30af\u30bb\u30b9 \u30c8\u30ed\u30a4\u306e\u6728\u99ac (RAT) \u306b\u3088\u308b\u30d4\u30dc\u30c3\u30c8<\/strong>: \u30ea\u30e2\u30fc\u30c8 \u30a2\u30af\u30bb\u30b9 \u30c4\u30fc\u30eb\u3092\u4f7f\u7528\u3057\u3066\u4fb5\u5bb3\u3055\u308c\u305f\u30b7\u30b9\u30c6\u30e0\u3092\u5236\u5fa1\u3057\u3001\u305d\u308c\u3092\u8e0f\u307f\u53f0\u3068\u3057\u3066\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306e\u4ed6\u306e\u90e8\u5206\u306b\u30a2\u30af\u30bb\u30b9\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

  6. \n

    \u8aa4\u3063\u305f\u8a2d\u5b9a\u3092\u60aa\u7528\u3059\u308b<\/strong>: \u8aa4\u3063\u3066\u69cb\u6210\u3055\u308c\u305f\u30b7\u30b9\u30c6\u30e0\u307e\u305f\u306f\u30b5\u30fc\u30d3\u30b9\u3092\u5229\u7528\u3057\u3066\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u3092\u884c\u3046\u3053\u3068\u3002<\/p>\n<\/li>\n<\/ol>\n

    \u6a2a\u65b9\u5411\u79fb\u52d5\u306e\u4e3b\u306a\u7279\u5fb4\u306e\u5206\u6790<\/h2>\n

    \u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u306b\u306f\u3001\u5bfe\u6297\u3059\u308b\u306e\u304c\u96e3\u3057\u3044\u8105\u5a01\u3068\u306a\u308b\u3044\u304f\u3064\u304b\u306e\u91cd\u8981\u306a\u7279\u5fb4\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

      \n
    1. \n

      \u30b9\u30c6\u30eb\u30b9\u6027\u3068\u6c38\u7d9a\u6027<\/strong>\u653b\u6483\u8005\u306f\u9ad8\u5ea6\u306a\u6280\u8853\u3092\u4f7f\u7528\u3057\u3066\u3001\u691c\u51fa\u3055\u308c\u305a\u306b\u9577\u671f\u9593\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092\u7dad\u6301\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

    2. \n

      \u30b9\u30d4\u30fc\u30c9\u3068\u81ea\u52d5\u5316<\/strong>: \u81ea\u52d5\u5316\u30c4\u30fc\u30eb\u3092\u4f7f\u7528\u3059\u308b\u3068\u3001\u653b\u6483\u8005\u306f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3092\u3059\u3070\u3084\u304f\u79fb\u52d5\u3057\u3001\u6700\u521d\u306e\u4fb5\u5165\u304b\u3089\u9ad8\u4fa1\u5024\u8cc7\u7523\u306b\u5230\u9054\u3059\u308b\u307e\u3067\u306e\u6642\u9593\u3092\u6700\u5c0f\u9650\u306b\u6291\u3048\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n

    3. \n

      \u9032\u5316\u3068\u9069\u5fdc<\/strong>: \u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u6280\u8853\u306f\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56\u3092\u56de\u907f\u3057\u3001\u5909\u5316\u3059\u308b\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u74b0\u5883\u306b\u9069\u5fdc\u3059\u308b\u305f\u3081\u306b\u5e38\u306b\u9032\u5316\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<\/li>\n

    4. \n

      \u8907\u96d1<\/strong>\u653b\u6483\u8005\u306f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3092\u901a\u904e\u3059\u308b\u305f\u3081\u306b\u8907\u6570\u306e\u624b\u6cd5\u3092\u7d44\u307f\u5408\u308f\u305b\u3066\u4f7f\u7528\u3059\u308b\u3053\u3068\u304c\u591a\u304f\u3001\u9632\u5fa1\u5074\u304c\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u3092\u691c\u51fa\u3057\u3066\u9632\u6b62\u3059\u308b\u3053\u3068\u304c\u96e3\u3057\u304f\u306a\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n

      \u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u306e\u7a2e\u985e<\/h2>\n

      \u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u306f\u3001\u653b\u6483\u8005\u306e\u76ee\u7684\u3068\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306e\u30a2\u30fc\u30ad\u30c6\u30af\u30c1\u30e3\u306b\u5fdc\u3058\u3066\u3001\u3055\u307e\u3056\u307e\u306a\u5f62\u3092\u3068\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u306e\u4e00\u822c\u7684\u306a\u30bf\u30a4\u30d7\u306b\u306f\u3001\u6b21\u306e\u3082\u306e\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n\n\n\n\n\n\n\n\n\n
      \u30bf\u30a4\u30d7<\/th>\n\u8aac\u660e<\/th>\n<\/tr>\n<\/thead>\n
      \u30d1\u30b9\u30fb\u30b6\u30fb\u30cf\u30c3\u30b7\u30e5 (PtH)<\/td>\n\u30cf\u30c3\u30b7\u30e5\u3055\u308c\u305f\u8cc7\u683c\u60c5\u5831\u3092\u4f7f\u7528\u3057\u3066\u4ed6\u306e\u30b7\u30b9\u30c6\u30e0\u3067\u8a8d\u8a3c\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n
      \u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c<\/td>\n\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3066\u30ea\u30e2\u30fc\u30c8\u3067\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3059\u308b\u3002<\/td>\n<\/tr>\n
      WMI \u30d9\u30fc\u30b9\u306e\u30e9\u30c6\u30e9\u30eb\u30e0\u30fc\u30d6\u30e1\u30f3\u30c8<\/td>\n\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u306b Windows Management Instrumentation \u3092\u6d3b\u7528\u3059\u308b\u3002<\/td>\n<\/tr>\n
      \u30b1\u30eb\u30d9\u30ed\u30fc\u30b9\u30c6\u30a3\u30f3\u30b0<\/td>\nActive Directory \u304b\u3089\u30b5\u30fc\u30d3\u30b9 \u30a2\u30ab\u30a6\u30f3\u30c8\u8cc7\u683c\u60c5\u5831\u3092\u62bd\u51fa\u3057\u3066\u3044\u307e\u3059\u3002<\/td>\n<\/tr>\n
      SMB \u306e\u6a2a\u5c55\u958b<\/td>\n\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u306b Server Message Block \u30d7\u30ed\u30c8\u30b3\u30eb\u3092\u4f7f\u7528\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

      \u6a2a\u79fb\u52d5\u306e\u4f7f\u3044\u65b9\u3001\u4f7f\u7528\u306b\u4f34\u3046\u554f\u984c\u3068\u305d\u306e\u89e3\u6c7a\u7b56<\/h2>\n

      \u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u306e\u4f7f\u7528:<\/h3>\n
        \n
      1. \n

        \u30ec\u30c3\u30c9\u30c1\u30fc\u30e0\u6f14\u7fd2<\/strong>\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5c02\u9580\u5bb6\u306f\u3001\u30e9\u30c6\u30e9\u30eb\u30e0\u30fc\u30d6\u30e1\u30f3\u30c8\u6280\u8853\u3092\u4f7f\u7528\u3057\u3066\u3001\u73fe\u5b9f\u4e16\u754c\u306e\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u3092\u30b7\u30df\u30e5\u30ec\u30fc\u30c8\u3057\u3001\u7d44\u7e54\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f53\u5236\u3092\u8a55\u4fa1\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

      2. \n

        \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8a55\u4fa1<\/strong>\u7d44\u7e54\u306f\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5185\u306e\u8106\u5f31\u6027\u3092\u7279\u5b9a\u3057\u3066\u4fee\u6b63\u3059\u308b\u305f\u3081\u306b\u3001\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u8a55\u4fa1\u3092\u63a1\u7528\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n

        \u554f\u984c\u3068\u89e3\u6c7a\u7b56:<\/h3>\n
          \n
        1. \n

          \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306e\u30bb\u30b0\u30e1\u30f3\u30c6\u30fc\u30b7\u30e7\u30f3\u304c\u4e0d\u5341\u5206<\/strong>\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3092\u9069\u5207\u306b\u30bb\u30b0\u30e1\u30f3\u30c8\u5316\u3059\u308b\u3068\u3001\u653b\u6483\u8005\u3092\u7279\u5b9a\u306e\u30be\u30fc\u30f3\u5185\u306b\u5c01\u3058\u8fbc\u3081\u3066\u3001\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u306b\u3088\u308b\u6f5c\u5728\u7684\u306a\u5f71\u97ff\u3092\u5236\u9650\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n

        2. \n

          \u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027<\/strong>: \u4e0d\u6b63\u306a\u30a8\u30b9\u30ab\u30ec\u30fc\u30b7\u30e7\u30f3\u3092\u9632\u3050\u305f\u3081\u306b\u3001\u30e6\u30fc\u30b6\u30fc\u6a29\u9650\u3092\u5b9a\u671f\u7684\u306b\u78ba\u8a8d\u304a\u3088\u3073\u7ba1\u7406\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

        3. \n

          \u4e0d\u5341\u5206\u306a\u30a2\u30af\u30bb\u30b9\u5236\u5fa1<\/strong>: \u5f37\u529b\u306a\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u3068 2 \u8981\u7d20\u8a8d\u8a3c\u3092\u5b9f\u88c5\u3057\u3066\u3001\u4e0d\u6b63\u306a\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u3092\u5236\u9650\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n

          \u4e3b\u306a\u7279\u5fb4\u3068\u985e\u4f3c\u7528\u8a9e\u3068\u306e\u6bd4\u8f03<\/h2>\n\n\n\n\n\n\n
          \u5b66\u671f<\/th>\n\u8aac\u660e<\/th>\n<\/tr>\n<\/thead>\n
          \u5782\u76f4\u65b9\u5411\u306e\u52d5\u304d<\/td>\n\u6a29\u9650\u306e\u6607\u683c\u3084\u4fe1\u983c\u30ec\u30d9\u30eb\u9593\u306e\u79fb\u52d5\u306b\u91cd\u70b9\u3092\u7f6e\u3044\u305f\u653b\u6483\u3092\u6307\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n
          \u6c34\u5e73\u65b9\u5411\u306e\u79fb\u52d5<\/td>\n\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u3068\u4e92\u63db\u7684\u306b\u4f7f\u7528\u3055\u308c\u308b\u5225\u306e\u7528\u8a9e\u3067\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306e\u6a2a\u65ad\u306b\u91cd\u70b9\u3092\u7f6e\u304d\u307e\u3059\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

          \u30e9\u30c6\u30e9\u30eb\u30e0\u30fc\u30d6\u30e1\u30f3\u30c8\u306b\u95a2\u3059\u308b\u5c06\u6765\u306e\u5c55\u671b\u3068\u6280\u8853<\/h2>\n

          \u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u9632\u5fa1\u306e\u5c06\u6765\u306f\u3001\u6b21\u306e\u3088\u3046\u306a\u9ad8\u5ea6\u306a\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\u3092\u6d3b\u7528\u3059\u308b\u3053\u3068\u306b\u3042\u308a\u307e\u3059\u3002<\/p>\n

            \n
          1. \n

            \u884c\u52d5\u5206\u6790<\/strong>\u6a5f\u68b0\u5b66\u7fd2\u3092\u4f7f\u7528\u3057\u3066\u7570\u5e38\u306a\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u30d1\u30bf\u30fc\u30f3\u3092\u691c\u51fa\u3057\u3001\u6f5c\u5728\u7684\u306a\u8105\u5a01\u3092\u7279\u5b9a\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

          2. \n

            \u30bc\u30ed\u30c8\u30e9\u30b9\u30c8\u30a2\u30fc\u30ad\u30c6\u30af\u30c1\u30e3<\/strong>: \u3059\u3079\u3066\u306e\u30a2\u30af\u30bb\u30b9\u8a66\u884c\u304c\u6f5c\u5728\u7684\u306b\u60aa\u610f\u306e\u3042\u308b\u3082\u306e\u3067\u3042\u308b\u3068\u60f3\u5b9a\u3057\u3066\u3001\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u306e\u5f71\u97ff\u3092\u6700\u5c0f\u9650\u306b\u6291\u3048\u308b\u305f\u3081\u306b\u30bc\u30ed \u30c8\u30e9\u30b9\u30c8\u306e\u539f\u5247\u3092\u5b9f\u88c5\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

          3. \n

            \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30bb\u30b0\u30e1\u30f3\u30c6\u30fc\u30b7\u30e7\u30f3\u3068\u30de\u30a4\u30af\u30ed\u30bb\u30b0\u30e1\u30f3\u30c6\u30fc\u30b7\u30e7\u30f3<\/strong>\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306e\u30bb\u30b0\u30e1\u30f3\u30c6\u30fc\u30b7\u30e7\u30f3\u3092\u5f37\u5316\u3057\u3066\u91cd\u8981\u306a\u8cc7\u7523\u3092\u5206\u96e2\u3057\u3001\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u306e\u62e1\u5927\u3092\u5236\u9650\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n

            \u30d7\u30ed\u30ad\u30b7\u30b5\u30fc\u30d0\u30fc\u304c\u3069\u306e\u3088\u3046\u306b\u4f7f\u7528\u3055\u308c\u3001\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u3068\u95a2\u9023\u4ed8\u3051\u3089\u308c\u308b\u304b<\/h2>\n

            \u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001\u6b21\u306e\u65b9\u6cd5\u3067\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u306e\u30ea\u30b9\u30af\u3092\u8efd\u6e1b\u3059\u308b\u4e0a\u3067\u91cd\u8981\u306a\u5f79\u5272\u3092\u679c\u305f\u3057\u307e\u3059\u3002<\/p>\n

              \n
            1. \n

              \u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u306e\u76e3\u8996<\/strong>: \u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u30ed\u30b0\u306b\u8a18\u9332\u3057\u3066\u5206\u6790\u3057\u3001\u6f5c\u5728\u7684\u306a\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u30a2\u30af\u30c6\u30a3\u30d3\u30c6\u30a3\u306b\u95a2\u3059\u308b\u6d1e\u5bdf\u3092\u63d0\u4f9b\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

            2. \n

              \u60aa\u8cea\u306a\u30b3\u30f3\u30c6\u30f3\u30c4\u306e\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0<\/strong>\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u6a5f\u80fd\u3092\u5099\u3048\u305f\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001\u60aa\u610f\u306e\u3042\u308b\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u30d6\u30ed\u30c3\u30af\u3057\u3001\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u306e\u8a66\u307f\u3092\u9632\u3050\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n

            3. \n

              \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30bb\u30b0\u30e1\u30f3\u30c8\u306e\u5206\u96e2<\/strong>: \u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001\u7570\u306a\u308b\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30bb\u30b0\u30e1\u30f3\u30c8\u3092\u5206\u96e2\u3057\u3001\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u306e\u53ef\u80fd\u6027\u3092\u5236\u9650\u3059\u308b\u306e\u306b\u5f79\u7acb\u3061\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n

              \u95a2\u9023\u30ea\u30f3\u30af<\/h2>\n

              \u30e9\u30c6\u30e9\u30eb\u30e0\u30fc\u30d6\u30e1\u30f3\u30c8\u3068\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u30d9\u30b9\u30c8\u30d7\u30e9\u30af\u30c6\u30a3\u30b9\u306e\u8a73\u7d30\u306b\u3064\u3044\u3066\u306f\u3001\u6b21\u306e\u30ea\u30bd\u30fc\u30b9\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n

                \n
              1. MITRE ATT&CK\u00ae \u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af<\/a><\/li>\n
              2. CISA \u306e\u30e9\u30c6\u30e9\u30eb\u30e0\u30fc\u30d6\u30e1\u30f3\u30c8\u30ac\u30a4\u30c9<\/a><\/li>\n
              3. SANS \u7814\u7a76\u6240: \u6a2a\u65b9\u5411\u306e\u79fb\u52d5<\/a><\/li>\n
              4. NIST \u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af<\/a><\/li>\n<\/ol>","protected":false},"featured_media":0,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477801","wiki","type-wiki","status-publish","hentry"],"acf":{"faq_title":"Frequently Asked Questions about Lateral Movement: Enhancing Network Accessibility and Security<\/mark>","faq_items":[{"question":"What is Lateral Movement?","answer":"

                Lateral movement refers to the technique used by cyber attackers to move horizontally through a network after gaining initial access. It allows them to explore and exploit different systems without being immediately detected.<\/p>"},{"question":"How did Lateral Movement originate?","answer":"

                The concept of lateral movement emerged with the evolution of networked computer systems in the late 20th century. As organizations interconnected multiple computers within their internal networks, hackers sought ways to traverse these systems to access valuable data or cause harm.<\/p>"},{"question":"How does Lateral Movement work?","answer":"

                Once attackers gain initial access to a network, they perform reconnaissance to identify high-value targets and then use various techniques like pass-the-hash attacks, remote code execution, and exploiting trust relationships to expand their influence within the organization.<\/p>"},{"question":"What are the key features of Lateral Movement?","answer":"

                Lateral movement is characterized by stealth and persistence, speed and automation, evolution and adaptation, and complexity. These features make it a challenging threat to combat for organizations.<\/p>"},{"question":"What types of Lateral Movement exist?","answer":"

                There are several types of lateral movement, including Pass-the-Hash (PtH) attacks, Remote Code Execution (RCE), WMI-based lateral movement, Kerberoasting, and SMB lateral movement.<\/p>"},{"question":"How can Lateral Movement be used, and what are the associated problems and solutions?","answer":"

                Lateral movement can be simulated in Red Team exercises and used for security assessments. Problems may arise due to insufficient network segmentation, privilege escalation vulnerabilities, and inadequate access controls. Solutions involve proper network segmentation, user privilege management, and robust access controls.<\/p>"},{"question":"How is Lateral Movement compared to similar terms?","answer":"

                Lateral movement is synonymous with horizontal movement, both describing the technique of traversing networks after gaining initial access. It is different from vertical movement, which focuses on privilege escalation.<\/p>"},{"question":"What are the future perspectives and technologies related to Lateral Movement?","answer":"

                The future of lateral movement defense lies in leveraging advanced technologies like behavioral analytics, zero trust architecture, and network segmentation to isolate critical assets.<\/p>"},{"question":"How can proxy servers be used in association with Lateral Movement?","answer":"

                Proxy servers can play a crucial role in mitigating lateral movement risks by monitoring traffic, filtering malicious content, and isolating network segments.<\/p>"},{"question":"Where can I find more information about Lateral Movement and cybersecurity best practices?","answer":"

                For more information about lateral movement and cybersecurity best practices, you can refer to resources like the MITRE ATT&CK\u00ae Framework, CISA's Guide to Lateral Movement, SANS Institute, and NIST Cybersecurity Framework.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/477801","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/477801\/revisions"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media?parent=477801"}],"curies":[{"name":"\u3046\u30fc\u3093","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}