{"id":13368,"date":"2024-07-23T10:55:21","date_gmt":"2024-07-23T02:55:21","guid":{"rendered":"https:\/\/starshot.tw\/?p=13368"},"modified":"2024-07-23T10:55:22","modified_gmt":"2024-07-23T02:55:22","slug":"tenable-ad-exposure-sanofi","status":"publish","type":"post","link":"https:\/\/starshot.tw\/2024\/07\/tenable-ad-exposure-sanofi\/","title":{"rendered":"Tenable AD Exposure \u6210\u529f\u4fdd\u8b77\u5168\u7403\u88fd\u85e5\u9818\u5c0e\u8005 Sanofi \u7684Active Directory \u57fa\u790e\u8a2d\u65bd"},"content":{"rendered":"\n
\u884c\u696d<\/strong><\/p>\n\n\n\n \u5236\u85e5<\/p>\n\n\n\n \u5730\u9ede<\/strong><\/p>\n\n\n\n \u5168\u7403<\/p>\n\n\n\n 2017 \u5e74\u6536\u5165<\/strong><\/p>\n\n\n\n 350.55 \u5104\u6b50\u5143<\/p>\n<\/div>\n\n\n\n \u8cfd\u8afe\u83f2\u662f\u4e00\u5bb6\u5168\u7403\u9818\u5148\u7684\u5236\u85e5\u516c\u53f8\uff0c\u81f4\u529b\u65bc\u6539\u5584\u91ab\u7642\u4fdd\u5065\u7684\u53ef\u53ca\u6027\u3002\u5f9e\u9810\u9632\u5230\u6cbb\u7642\uff0c\u8cfd\u8afe\u83f2\u5c07\u79d1\u5b78\u5275\u65b0\u8f49\u5316\u70ba\u4eba\u985e\u75ab\u82d7\u3001\u50b3\u67d3\u75c5\u548c\u7cd6\u5c3f\u75c5\u7b49\u9818\u57df\u7684\u91ab\u7642\u89e3\u6c7a\u65b9\u6848\u3002\u8a72\u516c\u53f8\u7684\u5927\u91cf\u7814\u767c\u6295\u8cc7\u9032\u4e00\u6b65\u978f\u56fa\u4e86\u5176\u9818\u5c0e\u5730\u4f4d\u3002\u8cfd\u8afe\u83f2\u5728\u6d77\u5916\uff0c\u7279\u5225\u662f\u65b0\u8208\u570b\u5bb6\u7684\u696d\u52d9\u5927\u5e45\u589e\u52a0\u3002\u76ee\u524d\uff0c\u8cfd\u8afe\u83f2\u5728 100 \u500b\u570b\u5bb6\u64c1\u6709\u8d85\u904e 100,000 \u540d\u54e1\u5de5\uff0c\u5728 38 \u500b\u570b\u5bb6\u8a2d\u6709 87 \u500b\u88fd\u9020\u57fa\u5730\u3002<\/p>\n\n\n\n \u66f4\u591a\u7684\u4eba\u54e1\u548c\u5730\u9ede\u5c0e\u81f4\u74b0\u5883\u66f4\u52a0\u8907\u96dc\uff0c\u589e\u52a0\u4e86\u653b\u64ca\u9762\u3002\u5168\u7403\u773e\u591a\u8a2d\u65bd\u4e2d\uff0c\u67d0\u4e00\u7aef\u9ede\u7528\u6236\u7684\u8a2d\u5099\u88ab\u653b\u7834\u7684\u6982\u7387\u6709\u591a\u5927\uff1f\u901a\u904e\u57fa\u672c\u7684\u91e3\u9b5a\u653b\u64ca\uff0c\u653b\u64ca\u8005\u5e7e\u4e4e\u53ef\u4ee5\u8f15\u9b06\u5730\u9032\u5165\u516c\u53f8\u4e26\u4f7f\u7528\u539f\u751f\u7684 Active Directory \u547d\u4ee4\u63a2\u7d22\u6574\u500b\u7db2\u7d61\u3002<\/p>\n\n\n\n \u6b64\u5916\uff0c\u8cfd\u8afe\u83f2\u7684\u751f\u7522\u93c8\u9084\u53d7\u5230\u56b4\u683c\u7684\u6cd5\u5f8b\u76e3\u7ba1\u3002\u4f8b\u5982\uff0c\u5c0d\u75ab\u82d7\u5291\u91cf\u7684\u64d4\u6182\u5c31\u8db3\u4ee5\u8b93\u6cd5\u5f8b\u63aa\u65bd\u8feb\u4f7f\u8cfd\u8afe\u83f2\u64a4\u56de\u6574\u6279\u75ab\u82d7\uff0c\u9020\u6210\u6578\u767e\u842c\u7f8e\u5143\u7684\u640d\u5931\u3002\u96a8\u8457\u8a2d\u65bd\u8d8a\u4f86\u8d8a\u76f8\u4e92\u806f\u7e6b\uff0c\u5fc5\u9808\u63a1\u53d6\u9069\u7576\u7684\u5b89\u5168\u63aa\u65bd\u3002<\/p>\n\n\n\n \u4f5c\u70ba\u4fe1\u606f\u7cfb\u7d71\u7684\u5b89\u5168\u9aa8\u5e79\uff0cActive Directory \u662f\u7528\u4f86\u76e3\u63a7\u548c\u4fdd\u8b77\u9019\u4e9b\u751f\u7522\u74b0\u5883\u7684\u6838\u5fc3\u7d44\u4ef6\u4e4b\u4e00\u3002\u8cfd\u8afe\u83f2\u9762\u81e8\u7684\u6311\u6230\u662f\u627e\u5230\u80fd\u5920\u4fdd\u8b77\u5176\u5168\u7403\u5468\u908a\u4e26\u978f\u56fa\u9019\u4e9b Active Directory \u74b0\u5883\u5b89\u5168\u7684\u89e3\u6c7a\u65b9\u6848\u3002<\/p>\n\n\n\n \u8cfd\u8afe\u83f2\u7684\u9996\u5e2d\u4fe1\u606f\u5b89\u5168\u5b98\uff08CISO\uff09\u5718\u968a\u8a8d\u5b9a Tenable Identity Exposure\uff08\u524d\u7a31 Tenable.ad\uff09\u662f\u89e3\u6c7a Active Directory \u98a8\u96aa\u7684\u6700\u4f73\u9014\u5f91\uff0c\u800c\u4e0d\u662f\u4e8b\u5f8c\u8655\u7406\u3002<\/p>\n\n\n\n \u8cfd\u8afe\u83f2\u7684\u4e3b\u8981\u76ee\u6a19\u4e4b\u4e00\u662f\u91d0\u6e05\u96c6\u5718\u5167\u4e0d\u540c\u7684\u653f\u7b56\u3001\u914d\u7f6e\u548c\u6578\u64da\uff0c\u4ee5\u6aa2\u6e2c\u4e0d\u4e00\u81f4\u3001\u6f0f\u6d1e\u548c\/\u6216\u60e1\u610f\u884c\u70ba\u3002Tenable Identity Exposure \u5e73\u53f0\u7ba1\u7406\u591a\u500b\u57fa\u790e\u8a2d\u65bd\uff0c\u8b93\u8cfd\u8afe\u83f2\u80fd\u901a\u904e\u7368\u7279\u7684\u63a7\u5236\u53f0\u4e00\u76ee\u4e86\u7136\u5730\u67e5\u770b\u6240\u6709\u9019\u4e9b\u5b89\u5168\u53c3\u6578\u3002\u6388\u6b0a\u6b0a\u9650\u3001\u5bc6\u78bc\u7b56\u7565\u3001\u8eab\u4efd\u9a57\u8b49\u5354\u8b70\u3001GPO \u548c\u5176\u4ed6\u95dc\u9375\u529f\u80fd\u73fe\u5728\u7531\u8cfd\u8afe\u83f2\u5718\u968a\u5b8c\u7f8e\u7ba1\u7406\u548c\u63a7\u5236\u3002AD \u5468\u908a\u7684\u898f\u6a21\u548c\u4e0d\u65b7\u8b8a\u5316\u4e0d\u518d\u662f\u5b89\u5168\u98a8\u96aa\u3002<\/p>\n\n\n\n \u8cfd\u8afe\u83f2\u6839\u64da Tenable Identity Exposure \u7684\u5efa\u8b70\u9032\u4e00\u6b65\u64f4\u5927\u4e86\u5176\u5b89\u5168\u908a\u754c\uff0c\u5236\u5b9a\u4e86\u5168\u7403\u5b89\u5168\u8def\u7dda\u5716\u8a08\u5283\u3002\u8a72\u8edf\u4ef6\u7684\u6df1\u5165\u5a01\u8105\u8a55\u5206\u4f7f\u8cfd\u8afe\u83f2\u80fd\u5920\u78ba\u5b9a\u5be6\u73fe\u5148\u9032 Active Directory \u57fa\u790e\u8a2d\u65bd\u7684\u6700\u4f73\u884c\u52d5\u65b9\u6848\u3002<\/p>\n\n\n\n Tenable Identity Exposure \u7684\u90e8\u7f72\u8fc5\u901f\u5b8c\u6210\u3002\u7121\u9700\u5b89\u88dd\u4ee3\u7406\u6216\u7ba1\u7406\u54e1\u6b0a\u9650\uff0c\u76e3\u63a7\u9806\u5229\u5be6\u65bd\u5728\u6574\u500b AD \u5468\u908a\uff0c\u5305\u62ec\u88fd\u85e5\u96c6\u5718\u7684\u773e\u591a\u5be6\u9ad4\u548c\u570b\u969b\u5b50\u516c\u53f8\u3002\u8a72\u89e3\u6c7a\u65b9\u6848\u7684\u5be6\u65bd\u5c0d 360,000 \u500b AD \u7528\u6236\u8cec\u6236\u5b8c\u5168\u900f\u660e\uff0c\u5c0d\u8cfd\u8afe\u83f2\u54e1\u5de5\u7684\u65e5\u5e38\u6d3b\u52d5\u6c92\u6709\u5f71\u97ff\u3002\u4f7f\u7528\u8a72\u8edf\u4ef6\u7121\u8207\u502b\u6bd4\u7684\u66b4\u9732\u6307\u6a19\uff0c\u8cfd\u8afe\u83f2\u80fd\u5920\u8b58\u5225\u4e26\u89e3\u6c7a\u516c\u53f8\u74b0\u5883\u4e2d\u7684\u4e3b\u8981\u5b89\u5168\u98a8\u96aa\u3002\u81ea\u90a3\u4ee5\u4f86\uff0c\u8a72\u516c\u53f8\u5229\u7528 Tenable Identity Exposure \u7684\u5be6\u6642\u76e3\u63a7\u9632\u6b62\u4e86\u6240\u6709\u57fa\u790e\u8a2d\u65bd\u7684\u5b89\u5168\u5012\u9000\u3002<\/p>\n\n\n\n \u7814\u767c\u6578\u64da\u662f\u72af\u7f6a\u7d44\u7e54\u3001\u6d41\u6c13\u570b\u5bb6\u548c\u7af6\u722d\u5c0d\u624b\u7684\u6230\u7565\u76ee\u6a19\u3002\u901a\u904e\u52a0\u5f37\u7528\u6236\u8a2a\u554f\u6838\u5fc3\u7cfb\u7d71\u7684\u5f37\u5927\u5b89\u5168\u908a\u754c\u4f86\u9632\u6b62\u654f\u611f\u6578\u64da\u6d29\u9732\u662f\u78ba\u4fdd\u5236\u85e5\u884c\u696d\u5f37\u5927\u5e02\u5834\u5730\u4f4d\u7684\u95dc\u9375\u3002<\/p>\n\n\n\n \u8cfd\u8afe\u83f2\u9078\u64c7 Tenable Identity Exposure \u662f\u56e0\u70ba\u5b83\u80fd\u5920\u8d85\u8d8a\u50b3\u7d71\u7684\u4e8b\u4ef6\u65e5\u8a8c\u76f8\u95dc\u65b9\u6cd5\uff0c\u8003\u616e\u6574\u500b\u98a8\u96aa\u7bc4\u570d\u3002\u9019\u6a23\uff0c\u8cfd\u8afe\u83f2\u7372\u5f97\u4e86\u6210\u529f\u61c9\u5c0d\u4e0d\u65b7\u8b8a\u5316\u548c\u589e\u52a0\u7684\u653b\u64ca\u5411\u91cf\u6240\u9700\u7684\u6240\u6709\u5de5\u5177\u3002\u901a\u904e\u5c07 Tenable Identity Exposure \u7684\u5be6\u6642\u80fd\u529b\u8207\u5176 SIEM \u57fa\u790e\u8a2d\u65bd\u5c0d\u63a5\uff0c\u8cfd\u8afe\u83f2\u80fd\u5920\u7acb\u5373\u61c9\u5c0d\u4efb\u4f55\u65b0\u7684\u653b\u64ca\u5411\u91cf\u4e26\u5728\u640d\u5bb3\u767c\u751f\u524d\u4fdd\u8b77\u5176\u57fa\u790e\u8a2d\u65bd\u3002<\/p>\n\n\n\n Tenable \u53ca\u5176\u8a8d\u8b49\u5408\u4f5c\u5925\u4f34\u7db2\u7d61\u4e0d\u50c5\u63d0\u4f9b\u6700\u5148\u9032\u7684 Active Directory \u5b89\u5168\u7522\u54c1\uff0c\u9084\u63d0\u4f9b\u9069\u61c9\u4efb\u4f55\u4f01\u696d\u74b0\u5883\u7684\u5b8c\u6574\u89e3\u6c7a\u65b9\u6848\u3002\u901a\u904e\u4ed4\u7d30\u50be\u807d\u8cfd\u8afe\u83f2\u7684\u554f\u984c\u548c\u7279\u9ede\uff0cTenable \u7684\u8a8d\u8b49\u5408\u4f5c\u5925\u4f34\u6df1\u5165\u4e86\u89e3\u8cfd\u8afe\u83f2\u7684\u696d\u52d9\uff0c\u4ee5\u4fbf\u8a2d\u8a08\u91cf\u8eab\u5b9a\u5236\u7684\u5efa\u8b70\u3002\u6700\u5f8c\uff0c\u8cfd\u8afe\u83f2\u7684\u5de5\u7a0b\u5e2b\u7372\u5f97\u4e86 Tenable \u7528\u6236\u793e\u5340\u7684\u8a2a\u554f\u6b0a\u9650\uff0c\u5728\u90a3\u88e1\u4ed6\u5011\u6709\u6a5f\u6703\u8207\u5b89\u5168\u540c\u884c\u5206\u4eab\u60c5\u5831\u548c\u6700\u4f73\u5be6\u8e10\u3002<\/p>\n\n\n\n<\/figure><\/div><\/div>\n<\/div>\n\n\n\n
\u5168\u7403\u95dc\u9375\u57fa\u790e\u8a2d\u65bd<\/h2>\n\n\n\n
\u6311\u6230<\/h2>\n\n\n\n
\u89e3\u6c7a\u65b9\u6848<\/h2>\n\n\n
<\/figure><\/div>\n\n\n
\u7d50\u679c<\/h2>\n\n\n\n
\u5168\u7403 Active Directory \u57fa\u790e\u8a2d\u65bd\u8986\u84cb<\/h3>\n\n\n\n
\u6301\u7e8c\u4fdd\u8b77\u9ad8\u5ea6\u95dc\u9375\u7684\u8cc7\u7522<\/h3>\n\n\n\n
\u9069\u61c9\u73fe\u4ee3\u4f01\u696d\u74b0\u5883<\/h3>\n\n\n\n