ACTIVE DIRECTORY (AD)GA YO‘NALTIRILGAN ASOSIY TAHDIDLAR
Abstract
Ushbu maqolada Active Directory (AD) tizimiga yo‘naltirilgan asosiy kiberxavfsizlik tahdidlari tahlil qilinadi. Active Directory korporativ tarmoqlarda autentifikatsiya va avtorizatsiyani ta’minlovchi markaziy infratuzilma bo‘lgani sababli, u kiberjinoyatchilar uchun asosiy nishon hisoblanadi. Maqolada parolga asoslangan hujumlar (Password Spraying, Brute Force), Kerberos protokolidagi zaifliklardan foydalanish (Kerberoasting, Golden Ticket), NTLM relay hujumlari, privilegiyalarni oshirish (Privilege Escalation), lateral harakat (Lateral Movement) va domen nazoratchilariga qaratilgan hujumlar yoritiladi.
References
1. Active Directory Security Cookbook. – Packt Publishing, 2020.
2. Microsoft Corporation. Active Directory Security Best Practices.
3. MITRE Corporation. ATT&CK Framework – Enterprise Techniques.
4. SANS Institute. Securing Active Directory in Modern Enterprise.
5. ENISA. Cybersecurity Threat Landscape Reports.
