Threat Hunting Engagement
ENingizimu Afrika, lapho kufanele khona ngokomongo, okulindelwe mayelana nokulungela ukuphepha nobungozi bokuhlaselwa kwamakhompyutha okubhekelela i-POPIA kunikeza isisekelo esinemingcele se-Threat Hunting Engagement eqondiswa imibono ezohlolwa futhi esekelwe kurejista yobungozi nobubanzi bomsebenzi, idatha yokuqapha egunyaziwe, isikhathi sokugcina idatha okuvunyelwene ngaso, nemikhawulo echaziwe yokuphathwa kolwazi olubucayi. I-BilgeQor ihlunga okutholakele ngokubaluleka futhi ikhiqiza izinto zobufakazi ezifanele ze-IOC noma ze-IOA kanye nezincomo ngezikhala ekutholeni izinsongo phakathi nesikhathi okuvunyelwene ngaso. Lokhu kuwumsebenzi onobubanzi obunqunyiwe oqala ngesicelo; akukhona ukuqapha kwe-24/7, i-SOC noma i-MDR, ukunqanda ukuhlaselwa ngesikhathi kwenzeka, ukubuyisela amasistimu esimweni sokusebenza, noma ubufakazi bokuthi akukho ukungena okungagunyaziwe.
Yenza uphenyo lokuzingela izinsongo olunomkhawulo wesikhathi, oluqondiswa imibono ecatshangelwayo, kuyo yonke imithombo okuvunyelwene ngayo yedatha eqoqwa ezinhlelweni, ukuze kuvezwe izinkomba, imisebenzi esolisayo kanye nezikhala okungenzeka ukuthi izexwayiso ezizenzakalelayo azizibonanga.
Ifanele uma
- ✓Ugunyaze ukuhlolwa kochwepheshe, kwavunyelwana ngento ezohlolwa, ububanzi, nesikhathi sokuhlola noma imithetho yokwenza ukuhlolwa
- ✓Udinga ukuhlolwa okunobubanzi nemingcele echaziwe, ngaphakathi kwemibandela eqinisekiswe ngokucacile
- ✓Ufuna imiphumela ebhalwe phansi kanye nokuphawuliwe okuhlelwe ngokubaluleka, okuvela emsebenzini owenziwa ngaphansi kwezimo ezilawulwayo
- ✓Uyaqonda ukuthi lokhu ukuhlolwa okunobubanzi obunqunyiwe, hhayi ukuvikelwa okuqhubekayo noma umphumela oqinisekisiwe
Akufaneleki uma
- –Udinga ukuskena okwenziwa nje noma ukuhlolwa okuvamile kobuthakathaka
- –Udinga ukusabela ngesikhathi sangempela esimweni esiphuthumayo noma ukuhlolwa okungagunyaziwe
- –Ulindele ukuqinisekiswa kokutholakala kwe-exploit noma ukuvikelwa okuphelele
- –Udinga ukuqapha 24/7, MDR, noma ukuthungatha izinsongo ngokuqhubekayo okudlulela ngalé kobubanzi bomsebenzi obuvunyelwene ngabo
Ilungele
- Ukuphepha: amaqembu aqoqa idatha ngokuqapha amasistimu kodwa angakakwenzi ukusesha izinsongo okuhlelekile kusetshenziswa leyo datha
- Izinhlangano ezilungiselela ukuhlolwa, ukubuyekezwa yibhodi, noma isigaba esibalulekile sokuqinisekisa amakhasimende, lapho okutholakele ekuzingeleni izinsongo okubhalwe phansi kusiza khona
- Amaqembu anokukhathazeka okuthile, umbono ocatshangelwayo noma ushintsho lwakamuva afuna ukuba kuhlolwe phakathi nesikhathi esichaziwe
- Amabhizinisi afuna ukuqapha okuzimele kwe-telemetry yawo ngaphandle kokuzibophezela esivumelwaneni sokuqapha okuqhubekayo
Lokho Esikuhlolayo
- Imibono ecatshangelwayo yokuzingela izinsongo okuvunyelwene ngayo, echazwa futhi ihlelwe ngokubaluleka ngesikhathi sokuchaza ububanzi bomsebenzi
- Ukubuyekezwa kwemithombo yedatha yokuqapha okuvunyelwene ngayo phakathi nesikhathi okuvunyelwene ngaso — amarekhodi amadivayisi okugcina, obunikazi, efu, enethiwekhi noma ezinhlelo zokusebenza, njengoba kufakwe ebubanzini bomsebenzi.
- Ukuphenya amaphethini asolisayo atholakala ngesikhathi sokuzingela
- Ukuhlolwa nokuhlukaniswa kokutholakele kube izigaba zokunikeza ulwazi, zokusolisayo, nezokuqinisekisiwe ukuthi kufanele kunakwe
- Izinto eziwubufakazi bezinkomba zokwephulwa kokuphepha (IOC) nezinkomba zokuhlasela (IOA), lapho zisebenza khona emicabangweni okuvunyelwene ukuthi ihlolwe
Okuzolethwa
Izidingo Zokuqala & Imvume
- +Ukugunyazwa okubhaliwe komnikazi wedatha ukufinyelela emithonjeni ye-telemetry evunyelwene ngayo
- +Uhlu okuvunyelwene ngalo lwemithombo ye-telemetry, izikhathi zokugcinwa kwedatha, kanye nendlela yokufinyelela, okuqinisekiswe ngokubhala
- +Iwindi lokuzingela elivunyelwe elinezikhathi ezichaziwe zokuqala nokumisa
- +Imibono ecatshangelwayo okuvunyelwene ngayo yokuzingela izinsongo kanye nanoma yimiphi imikhawulo ephathelene nokuzwela kubhalwa phansi ngaphambi kokuqala komsebenzi
- +Abantu bokuxhumana abashiwo ngamagama, abayinhloko nababambelayo, abangathintwa kuso sonke isikhathi okuvunyelwene ngaso sokuzingela izinsongo
- +Imvume yomhlinzeki, yenkundla yefu noma yenkundla yokuphatha ubunikazi etholakele lapho idingeka khona ukuze kufinyelelwe kudatha yethelemetri
Okungafakiwe & Imingcele
- Lokhu kuwumsebenzi owenziwa phakathi nesikhathi esinqunyiwe, hhayi ilungiselelo lokuqapha okuqhubekayo noma le-MDR
- Ukusebenza kwe-SOC amahora angamashumi amabili nane, ukuphendula izexwayiso uma kubiziwe, nokutholwa okuphethwe akufakiwe
- Ukuphendula ezigamekweni ngesikhathi zenzeka, ukunqanda ukusabalala kwazo, nokwenza umsebenzi wokubuyisela ukusebenza akufakiwe ngaphandle uma ububanzi baleyo misebenzi buchazwe ngokwehlukana
- Ukufakwa kwezinhlelo ezintsha zokuqoqa nokuthumela idatha yokusebenza, izinhlelo ezingama-ejenti, noma izindlela zokugeleza kwedatha yokurekhoda akufakiwe ngaphandle uma kuvunyelwene ngakho ngokwehlukana
- Lokhu kuhlanganyela akuqinisekisi ukuthi zonke izinsongo ezikhona endaweni yokusebenza zizotholakala
- Lo msebenzi awukhiphi isitifiketi, ukugunyazwa, noma ubufakazi obusemthethweni bokuthobela izimfuneko.
- Ukulungiswa kobuthakathaka obutholakele akufakiwe ngaphandle uma kuchazwe ngokwehlukile njengengxenye yobubanzi bomsebenzi
Indlela Esebenza Ngayo
Ukuchaza ububanzi bomsebenzi nokubeka umcabango ozohlolwa
Siyavumelana ngemibono ezohlolwa ekuzingeleni izinsongo, imithombo yedatha yokuqapha engaphakathi kobubanzi bomsebenzi, isikhathi sokuzingela, indlela yokufinyelela, imikhawulo ephathelene nokuzwela kolwazi, nezimo zokumisa umsebenzi. Konke kubhalwa phansi ngaphambi kokuba umsebenzi uqale.
Ukugunyazwa nokufinyelela
Kuqinisekiswa ukugunyazwa okubhaliwe okuvela kumnikazi wedatha kanye nanoma yiziphi izimvume ezidingekayo ezivela kumhlinzeki. Kusungulwa ukufinyelela emithonjeni okuvunyelwene ngayo yedatha yokuqapha ukusebenza kwezinhlelo, ngaphakathi kwemingcele okuvunyelwene ngayo.
Ukuqhuba ukuzingela izinsongo
Sivivinya imibono ecatshangelwayo okuvunyelwene ngayo sisebenzisa idatha eqoqwa ngokuzenzakalela engaphakathi kobubanzi bomsebenzi ngesikhathi okuvunyelwene ngaso, siphenye amaphethini asolisayo futhi sihlunge okutholakele ngokubaluleka njengoba kuvela.
Ukubika
Siletha umbiko wemiphumela yophenyo, izinto zobufakazi ze-IOC ne-IOA lapho kufanele khona, izincomo mayelana nezikhala ekutholeni izinsongo nasekuqoqweni kwedatha yokusebenza kwesistimu, kanye nezinto okufanele zibekwe phambili ophenyweni olulandelayo.
Ingxoxo yokubuyekeza umsebenzi
Siba nomhlangano ohlanganyelwe wokubuyekeza umsebenzi, ohlanganisa indlela yokufuna izinsongo, okutholakele okudonsa ukunaka, nezinyathelo ezilandelayo ezihlelwe ngokubaluleka zabathintekayo bakho kwezokuphepha nakwezobunjiniyela.
Cela ububanzi bomsebenzi kuqala. Siqinisekisa ngokubhaliwe lokho okuzohlolwa, ukugunyazwa, isikhathi esibekelwe ukuhlola kanye nemithetho yokwenza umsebenzi ngaphambi kwanoma yisiphi isinyathelo sezentengiselwano esilandelayo. Leli khasi alamukeli inkokhelo futhi aliqali umsebenzi okhethekile. Awukho umsebenzi okhethekile oqala ngaphambi kokugunyazwa kobubanzi bomsebenzi.
Ububanzi bomsebenzi & Isilinganiso senani
Ububanzi bokugcina bomsebenzi nekhotheshini kuncike kulokho okugunyaziwe ukuthi kuhlolwe, endaweni yokusebenza, nasezimweni zokuhlola okuvunyelwene ngazo.
Imibuzo Evame Ukubuzwa
Ukulungele ukuxoxa ngobubanzi bomsebenzi wakho?
Sitshele ngalokho ofuna ukukuhlola, indawo okuzohlolwa kuyo, nesikhathi esibekelwe ukuhlola. Sizokuthumelela isilinganiso sentengo esichaza umkhawulo womsebenzi.