{"id":83646,"date":"2020-10-12T12:21:00","date_gmt":"2020-10-12T09:21:00","guid":{"rendered":"http:\/\/hilmibilici.com\/?p=83646"},"modified":"2024-12-05T09:20:33","modified_gmt":"2024-12-05T06:20:33","slug":"red-team-nedir","status":"publish","type":"post","link":"http:\/\/hilmibilici.com\/?p=83646","title":{"rendered":"Red Team Nedir?"},"content":{"rendered":"

Red teaming ekip <\/strong>\u00e7al\u0131\u015fmas\u0131,\u00a0penetrasyon testi<\/strong> kavram\u0131na \u00e7ok benzer bir yakla\u015f\u0131m olsa da daha \u00e7ok y\u00f6nl\u00fc bir kavramd\u0131r. Red team tak\u0131m\u0131n amac\u0131 en fazla say\u0131da g\u00fcvenlik a\u00e7\u0131\u011f\u0131 bulmak de\u011fildir. Ama\u00e7, kurulu\u015fun varsa izinsiz giri\u015fleri tespit etme ve \u00f6nleme yetene\u011fini test ederek zafiyet taramas\u0131n\u0131 yapmakt\u0131r. Ekip, sistemlerde fark edilmeden kalmaya \u00e7al\u0131\u015farak hassas bilgilere m\u00fcmk\u00fcn olan her \u015fekilde eri\u015fmeye \u00e7al\u0131\u015f\u0131r ve bunlar\u0131 raporlar.<\/p>\n

Red team, Read Teaming kavramlar\u0131 Nedir, Nas\u0131l Olu\u015fturulur, Proje Planlamas\u0131 nas\u0131l olmal\u0131d\u0131r, Modeller ve Senaryolar hakk\u0131nda yaz\u0131lar\u0131m\u0131 Secromix<\/a> Blog<\/a> sayfas\u0131ndan takip edebilirsiniz.<\/p>\n

Redteaming nedir?<\/a><\/p>\n

Read Team Nedir?<\/a><\/p>\n

<\/div>\n
Yaz\u0131lar eklendik\u00e7e buradan da ba\u011flant\u0131lar\u0131 payla\u015faca\u011f\u0131m.<\/div>\n
<\/div>\n
\n
\n

Redteaming nedir?<\/h1>\n<\/header>\n
\n

Red teaming\u00a0<\/strong>\u00e7al\u0131\u015fmas\u0131,\u00a0s\u0131zma testi<\/strong>\u00a0kavram\u0131na \u00e7ok benzer bir yakla\u015f\u0131m olup daha \u00e7ok y\u00f6nl\u00fcd\u00fcr. K\u0131rm\u0131z\u0131 tak\u0131m\u0131n amac\u0131 maksimum say\u0131da g\u00fcvenlik a\u00e7\u0131\u011f\u0131 bulmak de\u011fildir. Ama\u00e7, kurulu\u015fun varsa izinsiz giri\u015fleri tespit etme ve \u00f6nleme yetene\u011fini test etmektir. Ekip, sistemlerde fark edilmeden kalmaya \u00e7al\u0131\u015farak hassas bilgilere m\u00fcmk\u00fcn olan her \u015fekilde eri\u015fmeye \u00e7al\u0131\u015f\u0131r.\u00a0APT\u2019lere<\/a>\u00a0benzer hedefli sald\u0131rgan sald\u0131r\u0131lar\u0131n\u0131 taklit ederler.\u00a0\u00a0Red teaming<\/strong>\u00a0yakla\u015f\u0131m\u0131 s\u0131zma testlerine bakarak daha uzun s\u00fcrebilir. S\u0131zma testleri genellikle 1 \u2013 2 hafta s\u00fcrerken,\u00a0Red teaming<\/strong>\u00a0ekip halinde bir \u00e7al\u0131\u015fma ile 3 \u2013 4 hafta veya daha uzun s\u00fcrebilir.<\/p>\n

 <\/p>\n

K\u0131rm\u0131z\u0131 tak\u0131m<\/strong>\u00a0\u00e7al\u0131\u015fmas\u0131 s\u0131ras\u0131nda, bir y\u0131\u011f\u0131n g\u00fcvenlik a\u00e7\u0131\u011f\u0131 aranmaz, yaln\u0131zca hedefe ula\u015fmak i\u00e7in gereken a\u00e7\u0131klar aran\u0131r. Hedefler genellikle bir\u00a0s\u0131zma testi<\/strong>\u00a0ile ayn\u0131d\u0131r. Y\u00f6nlendirme s\u0131ras\u0131nda sosyal m\u00fchendislik (fiziksel ve elektronik), kablosuz a\u011flara sald\u0131r\u0131lar, d\u0131\u015f varl\u0131klar\u0131n tespiti ve zafiyetleri vb. gibi teknikler kullan\u0131l\u0131r. Bu t\u00fcr testler herkes i\u00e7in de\u011fil, yaln\u0131zca hassas bilgi g\u00fcvenli\u011fi seviyesine sahip kurulu\u015flar i\u00e7indir. Bu t\u00fcr kurulu\u015flar genellikle\u00a0s\u0131zma testlerini\u00a0ge\u00e7mi\u015f, g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131n \u00e7o\u011funu yamalam\u0131\u015f ve s\u0131zma testlerine ba\u015far\u0131yla kar\u015f\u0131 koyma ge\u00e7mi\u015fine zaten sahiptir.<\/p>\n

Red Teaming \u015fu \u015fekilde ger\u00e7ekle\u015febilir:<\/strong><\/p>\n

Kurum binas\u0131na postac\u0131 k\u0131l\u0131\u011f\u0131na girmi\u015f\u00a0red team<\/strong>\u00a0ekibinden bir ki\u015fi girer.\u00a0\u0130\u00e7eri girdikten sonra, cihaz\u0131 uzaktan eri\u015fim i\u00e7in kurulu\u015fun i\u00e7 a\u011f\u0131na ba\u011flar.\u00a0Cihaz, izin verilen ba\u011flant\u0131 noktalar\u0131ndan birini kullanarak bir a\u011f t\u00fcneli olu\u015fturur: 80, 443 veya 53 (HTTP, HTTPS veya DNS), red team ekibine komut i\u00e7in bir C2 kanal\u0131 sa\u011flar.\u00a0Bu kanal\u0131 kullanan ba\u015fka bir ekip \u00fcyesi, \u00f6rne\u011fin g\u00fcvenli olmayan yaz\u0131c\u0131lar\u0131 veya a\u011f penetrasyon noktas\u0131n\u0131 gizlemeye yard\u0131mc\u0131 olacak di\u011fer cihazlar\u0131 kullanarak a\u011f altyap\u0131s\u0131nda ilerlemeye ba\u015flar.\u00a0B\u00f6ylece\u00a0red team ekibi<\/strong>, hi\u00e7 bir g\u00fcvenlik noktas\u0131na tak\u0131lmadan ve yakalanmay\u0131 hedefleyerek amac\u0131na ula\u015fana kadar i\u00e7 a\u011f\u0131 ara\u015ft\u0131r\u0131r.<\/p>\n

Bu \u00f6rnek,\u00a0red team<\/strong>\u00a0ekibinin kullanabilece\u011fi bir\u00e7ok y\u00f6ntemden sadece birisidir, ancak yap\u0131lan baz\u0131 testlere g\u00f6re iyi bir \u00f6rnektir.<\/p>\n

S\u0131zma testi<\/strong>\u00a0ve\u00a0Red team<\/strong>\u00a0ile benzer yakla\u015f\u0131mlard\u0131r. Her iki yakla\u015f\u0131m\u0131n da hem g\u00fc\u00e7l\u00fc hem de zay\u0131f y\u00f6nleri vard\u0131r, bu da ko\u015fullara ba\u011fl\u0131 olarak bunlardan birini daha tercih edilir k\u0131lar. Bundan en iyi \u015fekilde yararlanmak i\u00e7in hedeflerinizi belirlemeniz ve ard\u0131ndan onlara en uygun se\u00e7imi yapman\u0131z gerekir.<\/p>\n

Kurulu\u015funuzun kritik varl\u0131klar\u0131n\u0131, verilerini ve hassas bilgilerini korumak i\u00e7in s\u0131zma testi ile birlikte\u00a0red teaming<\/strong>\u00a0\u00e7al\u0131\u015fmas\u0131 yapt\u0131rmay\u0131 ihmal etmeyin.<\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Red teaming ekip \u00e7al\u0131\u015fmas\u0131,\u00a0penetrasyon testi kavram\u0131na \u00e7ok benzer bir yakla\u015f\u0131m olsa da daha \u00e7ok y\u00f6nl\u00fc bir kavramd\u0131r. Red team tak\u0131m\u0131n…<\/p>\n","protected":false},"author":1,"featured_media":85114,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[37],"tags":[262,263,341,343,377,378,379,389,424,435],"class_list":["post-83646","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bilisim-hukuku","tag-kirmizi-ekip","tag-kirmizi-takim","tag-penetrasyon-testi","tag-pentest","tag-read-team-nedir","tag-red-team","tag-red-teaming","tag-secromix-red-team","tag-sizma-testi","tag-sql-enjeksiyonu"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t