{"id":6455,"date":"2024-07-23T00:21:19","date_gmt":"2024-07-22T16:21:19","guid":{"rendered":"https:\/\/aict.nkust.edu.tw\/digitrans\/?p=6455"},"modified":"2024-07-26T00:27:24","modified_gmt":"2024-07-25T16:27:24","slug":"%e8%87%ba%e7%81%a3%e8%b3%87%e5%ae%89%e9%95%b7%e5%b0%87%e8%a6%96crowdstrike%e7%81%bd%e5%be%8c%e6%87%89%e8%ae%8a%e6%85%8b%e5%ba%a6%ef%bc%8c%e4%bd%9c%e7%82%ba%e6%98%af%e5%90%a6%e6%8e%a1%e7%94%a8%e7%9a%84","status":"publish","type":"post","link":"https:\/\/aict.nkust.edu.tw\/digitrans\/?p=6455","title":{"rendered":"\u81fa\u7063\u8cc7\u5b89\u9577\u5c07\u8996CrowdStrike\u707d\u5f8c\u61c9\u8b8a\u614b\u5ea6\uff0c\u4f5c\u70ba\u662f\u5426\u63a1\u7528\u7684\u53c3\u8003"},"content":{"rendered":"\n

2024-07-23 | \u9ec3\u5f65\u68fb<\/p>\n\n\n\n

\u8cc7\u5b89\u696d\u8005CrowdStrike\u65bc7\u670819\u65e5\u56e0\u70baEDR\u8edf\u9ad4\u66f4\u65b0\u51fa\u5305\uff0c\u9020\u6210\u8a31\u591a\u5fae\u8edf\u96fb\u8166\u548c\u4f3a\u670d\u5668\u51fa\u73fe\u85cd\u8272\u7576\u6a5f\u756b\u9762\uff08BSOD\uff09\u3002\u4e5f\u6709\u533f\u540d\u9ad8\u79d1\u6280\u88fd\u9020\u696d\u8cc7\u5b89\u4e3b\u7ba1\u8868\u793a\uff0c\u52d2\u7d22\u8edf\u9ad4\u505a\u4e0d\u5230\u7684\u4e8b\u60c5\uff08\u4f01\u696d\u96fb\u8166\u5927\u898f\u6a21\u7576\u6a5f\uff09\uff0cCrowdStrike\u505a\u5230\u4e86\u3002\u53e6\u5916\u4e5f\u6709\u4e0d\u5c11Line\u8cc7\u5b89\u7fa4\u7d44\uff0c\u7d1b\u7d1b\u4ee5CrowdStrike\u5b98\u7db2\u300c62\u5206\u9418\u5c31\u80fd\u8b93\u60a8\u7684\u4f01\u696d\u505c\u6b62\u904b\u4f5c\u300d\u7684\u7db2\u8def\u9801\u9762\uff0c\u53cd\u8af7CrowdStrike\u771f\u7684\u505a\u5230\u8b93\u4f01\u696d\u505c\u6b62\u904b\u4f5c\u4e86\u3002<\/p>\n\n\n\n

\u76e4\u9ede\u904e\u81fa\u7063CrowdStrike\u5f15\u767c\u7684\u96fb\u8166\u7576\u6a5f\u707d\u60c5\u5f8c\uff0c\u6709\u8a31\u591a\u8cc7\u5b89\u9577\u5766\u8a00\uff0c\u63a1\u7528\u96f2\u7aef\u670d\u52d9\u7684\u8da8\u52e2\u4e0d\u53ef\u9006\uff0c\u5c0d\u65bc\u5df2\u7d93\u662fCrowdStrike\u7684\u7528\u6236\u4e26\u767c\u751f\u5927\u898f\u6a21\u707d\u60c5\uff0c\u6709\u9ad8\u79d1\u6280\u696d\u8cc7\u5b89\u4e3b\u7ba1\u5df2\u7d93\u8003\u616e\u660e\u5e74\u4e0d\u518d\u7e8c\u7d04\uff1b\u4f46\u5c0d\u65bc\u6b63\u5728\u8a55\u4f30\u662f\u5426\u63a1\u8cfcCrowdStrike\u7522\u54c1\u7684\u4f01\u696d\u800c\u8a00\uff0cCrowdStrike\u7684\u61c9\u8b8a\u65b9\u5f0f\u548c\u5c0d\u5ba2\u6236\u7684\u88dc\u511f\u65b9\u5f0f\u7b49\uff0c\u5247\u662f\u4ed6\u5011\u5f8c\u7e8c\u8a55\u4f30\u662f\u5426\u63a1\u8cfc\u7684\u91cd\u8981\u95dc\u9375\u3002<\/p>\n\n\n\n

\u53d7\u6ce2\u53ca\u696d\u8005\u601d\u8003\u662f\u5426\u7e8c\u7d04\uff0c\u8996\u70ba\u4e00\u6b21\u7dca\u6025\u61c9\u8b8a\u5718\u968a\u6f14\u7df4\u6a5f\u6703<\/strong><\/p>\n\n\n\n

\u6709\u533f\u540d\u9ad8\u79d1\u6280\u696d\u8cc7\u5b89\u4e3b\u7ba1\u8868\u793a\uff0c\u8a72\u516c\u53f8\u5927\u91cf\u90e8\u7f72CrowdStrike\u7684EDR\u7522\u54c1\uff0c\u9019\u6b21\u9020\u6210\u96fb\u8166\u548c\u4f3a\u670d\u5668\u7576\u6a5f\uff0c\u9023\u7e3d\u7d93\u7406\u90fd\u6642\u6642\u8ddf\u9032\u8cc7\u5b89\u90e8\u9580\u8655\u7406\u7576\u6a5f\u96fb\u8166\u7684\u5fa9\u539f\u9032\u5ea6\uff0c\u539f\u672c\u662f\u4fdd\u8b77\u516c\u53f8\u8cc7\u8a0a\u8cc7\u7522\u7684\u8cc7\u5b89\u7522\u54c1\uff0c\u6210\u70ba\u8cc7\u8a0a\u8cc7\u7522\u7684\u8cc7\u5b89\u7834\u53e3\u3002\u300c\u9762\u5c0d\u660e\u5e74CrowdStrike\u7684\u63a1\u8cfc\uff0c\u5c07\u8003\u616e\u4e0d\u518d\u7e8c\u7d04\u3002\u300d\u4ed6\u8aaa\u3002<\/p>\n\n\n\n

\u53e6\u5916\u4e00\u540d\u533f\u540d\u9ad8\u79d1\u6280\u88fd\u9020\u696d\u8cc7\u5b89\u9577\u8868\u793a\uff0c\u8a72\u516c\u53f8\u6b64\u6b21\u6709\u5341\u516b\u81fa\u5b89\u88dd\u95dc\u9375\u670d\u52d9\u7684\u5fae\u8edf\u4f3a\u670d\u5668\u53d7\u5bb3\uff0c\u5e78\u597d\u7b2c\u4e00\u6642\u9593\u5c31\u7dca\u6025\u8655\u7406\u5b8c\u7562\uff0c\u52a0\u4e0a\u4e26\u6c92\u6709\u727d\u9023\u5230\u5176\u4ed6Linux\u4e3b\u6a5f\uff0c\u4e0d\u7136\u61c9\u8a72\u662f\u7cfb\u7d71\u6027\u5927\u707d\u96e3\u3002<\/p>\n\n\n\n

\u8a72\u540d\u9ad8\u79d1\u6280\u88fd\u9020\u696d\u8cc7\u5b89\u9577\u8868\u793a\uff0c\u82e5\u6b63\u9762\u601d\u8003\u3001\u5f80\u597d\u8655\u60f3\u60f3\uff0c\u9019\u6b21\u4e8b\u4ef6\u525b\u597d\u8b93\u516c\u53f8\u7684\u7dca\u6025\u61c9\u8b8a\u5718\u968a\u505a\u4e00\u6b21\u5be6\u6230\u6f14\u7df4\uff0c\u4e5f\u53ef\u4ee5\u9a57\u6536\u7dca\u6025\u61c9\u8b8a\u5718\u968a\u904b\u4f5c\u7684\u6210\u719f\u5ea6\u3002<\/p>\n\n\n\n

\u7576\u7136\uff0c\u8a72\u540d\u8cc7\u5b89\u9577\u5766\u8a00\uff0c\u8a72\u8d77\u4e8b\u4ef6\u5fc5\u7136\u6703\u5c0d\u8a72\u516c\u53f8\u672a\u4f86\u7684\u63a1\u8cfc\u6c7a\u7b56\u7522\u751f\u5f71\u97ff\u3002<\/p>\n\n\n\n

\u4ed6\u8aaa\uff0c\u9996\u5148\uff0c\u8a72\u516c\u53f8\u5c07\u5c0dCrowdStrike\u7684\u4fe1\u8b7d\u548c\u7522\u54c1\u53ef\u9760\u6027\u9032\u884c\u91cd\u65b0\u8a55\u4f30\uff1b\u5176\u6b21\uff0c\u8a72\u516c\u53f8\u5c07\u66f4\u52a0\u95dc\u6ce8\u4f9b\u61c9\u5546\u7684\u66f4\u65b0\u548c\u6e2c\u8a66\u6d41\u7a0b\uff0c\u78ba\u4fdd\u672a\u4f86\u985e\u4f3c\u4e8b\u4ef6\u7684\u98a8\u96aa\u964d\u5230\u6700\u4f4e\u3002\u6b64\u5916\uff0c\u8cc7\u5b89\u9577\u4e5f\u8aaa\uff0c\u672a\u4f86\u4e5f\u6703\u8003\u616e\u63a1\u7528\u591a\u5143\u5316\u7684\u4f9b\u61c9\u5546\u7b56\u7565\uff0c\u907f\u514d\u5c0d\u55ae\u4e00\u4f9b\u61c9\u5546\u7684\u904e\u5ea6\u4f9d\u8cf4\uff0c\u5f9e\u800c\u63d0\u9ad8\u8a72\u516c\u53f8\u7684\u6574\u9ad4\u98a8\u96aa\u7ba1\u7406\u80fd\u529b\u3002<\/p>\n\n\n\n

\u7e3d\u7d50\u4f86\u8aaa\uff0c\u4ed6\u8868\u793a\uff0c\u5f9e\u9019\u6b21\u4e8b\u4ef6\u63d0\u9192\uff0c\u4f01\u696d\u5728\u9078\u64c7\u548c\u7ba1\u7406\u96f2\u7aef\u8cc7\u5b89\u670d\u52d9\u6642\uff0c\u9700\u8981\u66f4\u52a0\u8b39\u614e\uff0c\u4e26\u52a0\u5f37\u5167\u90e8\u7684\u61c9\u6025\u8655\u7406\u548c\u6e2c\u8a66\u6d41\u7a0b\uff0c\u4ee5\u4fdd\u969c\u7cfb\u7d71\u7684\u7a69\u5b9a\u6027\u548c\u5b89\u5168\u6027\u3002<\/p>\n\n\n\n

\u9032\u884c\u7522\u54c1POC\u7684\u91d1\u878d\u696d\u8005\uff0c\u9078\u64c7\u66ab\u505cPOC<\/strong><\/p>\n\n\n\n

\u533f\u540d\u7684\u91d1\u878d\u696d\u8cc7\u5b89\u9577\u8868\u793a\uff0c\u56e0\u70ba\u8a72\u516c\u53f8\u6b63\u597d\u5728\u5c0dCrowdStrike\u9032\u884cPOC\uff08\u6982\u5ff5\u9a57\u8b49\uff09\uff0c\u7522\u54c1\u5b89\u88dd\u5728\u6e2c\u8a66\u5340\u74b0\u5883\u4e2d\uff0c\u6240\u5e78\u6c92\u6709\u5f71\u97ff\u6b63\u5e38\u670d\u52d9\u3002\u96fb\u8166\u7576\u6a5f\u7684\u707d\u60c5\u7206\u767c\u5f8c\uff0c\u8a72\u8cc7\u5b89\u9577\u5df2\u7d93\u5148\u8acb\u540c\u4ec1\u66ab\u505cPOC\uff0c\u4e26\u770b\u5f8c\u7e8c\u72c0\u6cc1\u4f86\u8abf\u6574POC\u7684\u65b9\u5f0f\u3002<\/p>\n\n\n\n

\u53e6\u5916\u4e00\u4f4d\u91d1\u878d\u696d\u8cc7\u5b89\u9577\u8868\u793a\uff0c\u8a72\u516c\u53f8\u525b\u597d\u91dd\u5c0dCrowdStrike\u7684EDR\u7522\u54c1\u9032\u884cPOC\uff0c\u5305\u62ec\u7c3d\u6838\u4f3a\u670d\u5668\u3001\u90f5\u4ef6\u4f3a\u670d\u5668\u90fd\u53d7\u5230\u5f71\u97ff\uff0c\u6578\u91cf\u5f88\u591a\uff0c\u4f46\u8655\u7406\u5373\u6642\uff0c\u5f8c\u907a\u75c7\u4e0d\u5927\u3002\u4e0d\u904e\uff0c\u4ed6\u4e5f\u8a8d\u70ba\uff0c\u9019\u6b21\u7684\u8cc7\u5b89\u4e8b\u4ef6\u4e5f\u662f\u4e00\u500b\u597d\u7684\u8cc7\u5b89\u6f14\u7df4\u6a5f\u6703\uff0c\u4f46\u662f\u5426\u6709\u53d7\u5bb3\u5c31\u9700\u8981\u767c\u4f48\u91cd\u8a0a\uff0c\u4ed6\u8a8d\u70ba\uff0c\u61c9\u8a72\u9084\u662f\u8981\u770b\u53d7\u5bb3\u7bc4\u570d\uff0c\u6709\u6c92\u6709\u5f71\u97ff\u516c\u53f8\u7684\u6b63\u5e38\u71df\u904b\u6c7a\u5b9a\u91cd\u8a0a\u767c\u5e03\u8207\u5426\u3002<\/p>\n\n\n\n

\u8cc7\u5b89\u9577\u4e5f\u6307\u51fa\uff0c\u8cc7\u5b89\u90e8\u9580\u4e0d\u7ba1\u5728\u5b89\u88dd\u3001\u57f7\u884c\u4efb\u4f55\u7a0b\u5f0f\u6642\uff0c\u90fd\u6703\u9047\u5230\u5404\u7a2e\u8cc7\u5b89\u5de5\u5177\u7684\u78b0\u649e\uff0c\u90fd\u5fc5\u9808\u518d\u4e09\u5be6\u6e2c\u3001\u4e0d\u80fd\u4e2d\u65b7\u3002\u95dc\u65bc\u9019\u6b21\u7206\u767c\u7684\u8edf\u9ad4\u66f4\u65b0\u51fa\u5305\uff0c\u4ed6\u8a8d\u70ba\uff0c\u96f2\u7aef\u670d\u52d9\u51fa\u5305\u662f\u53ef\u4ee5\u9810\u671f\u7684\uff0c\u4e0d\u80fd\u56e0\u54bd\u5ee2\u98df\u800c\u4e0d\u4f7f\u7528\u96f2\u7aef\u670d\u52d9\uff1b\u4ed6\u4e5f\u5b78\u5230\uff0c\u6240\u6709\u7684\u8edf\u9ad4\u66f4\u65b0\u90fd\u5fc5\u9808\u5728\u6e2c\u8a66\u5340\u518d\u4e09\u78ba\u8a8d\u5f8c\uff0c\u624d\u6703\u5faa\u5e8f\u6f38\u9032\u7684\u6d3e\u9001\u5230\u6b63\u5f0f\u4e0a\u7dda\u5340\u3002<\/p>\n\n\n\n

\u533f\u540d\u71df\u5efa\u696d\u8cc7\u5b89\u9577\u8868\u793a\uff0c\u5728\u7206\u767cCrowdStrike\u707d\u60c5\u6642\uff0c\u4ed6\u6176\u5e78\u7576\u521d\u9078\u64c7\u53e6\u5916\u4e00\u5bb6\u7af6\u722d\u54c1\u724c\uff0c\u6709\u4e00\u500b\u539f\u56e0\u5728\u65bc\u4ed6\u60f3\u8981\u6df1\u5316\u548c\u67d0\u500b\u8cc7\u5b89\u516c\u53f8\u7684\u9023\u7d50\uff0c\u53ef\u4ee5\u5728\u7ba1\u7406\u4e0a\u3001\u9810\u7b97\u4e0a\uff0c\u751a\u81f3\u6280\u8853\u652f\u63f4\u7b49\u7b49\uff0c\u53ef\u4ee5\u63d0\u4f9b\u6bd4\u8f03\u6709\u5f48\u6027\u3001\u5168\u9762\u6027\u4e14\u66f4\u6709\u6df1\u5ea6\u7684\u5408\u4f5c\u3002<\/p>\n\n\n\n

\u53e6\u5916\u4e00\u4f4d\u533f\u540d\u9ad8\u79d1\u6280\u88fd\u9020\u696d\u8cc7\u5b89\u9577\u4e5f\u8aaa\uff0c\u5f9e\u9019\u6b21\u707d\u60c5\u5b78\u5230\uff0c\u672a\u4f86\u6240\u6709\u7684\u8edf\u9ad4\u66f4\u65b0\u90fd\u8981\u7d93\u904e\u9a57\u8b49\u7a0b\u5e8f\u4e26\u4f5c\u885d\u64ca\u8a55\u4f30\u5f8c\u624d\u80fd\u4e0a\u7dda\uff0c\u8a72\u516c\u53f8\u96d6\u7136\u6c92\u6709\u9078\u64c7CrowdStrike\u7684\u7522\u54c1\uff0c\u4f46\u4ed6\u4e0d\u8af1\u8a00\uff0c\u8a72\u516c\u53f8\u7684\u5371\u6a5f\u61c9\u8b8a\u4ee5\u53ca\u5f8c\u7e8c\u7684\u8655\u7406\uff0c\u5c07\u6703\u662f\u672a\u4f86\u8a55\u4f30\u8cc7\u5b89\u4f9b\u61c9\u5ee0\u5546\u505a\u7684\u53c3\u8003\u3002<\/p>\n\n\n\n

\u8cc7\u6599\u4f86\u6e90:https:\/\/www.ithome.com.tw\/news\/164089<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

2024-07-23 | \u9ec3\u5f65\u68fb \u8cc7\u5b89\u696d\u8005CrowdStrike\u65bc7\u670819\u65e5\u56e0\u70baEDR\u8edf\u9ad4\u66f4\u65b0\u51fa\u5305\uff0c\u9020\u6210\u8a31\u591a\u5fae\u8edf\u96fb\u8166\u548c\u4f3a\u670d\u5668\u51fa\u73fe\u85cd\u8272\u7576\u6a5f\u756b\u9762\uff08BSOD\uff09\u3002\u4e5f\u6709\u533f\u540d\u9ad8\u79d1\u6280\u88fd\u9020\u696d\u8cc7\u5b89\u4e3b…<\/p>\n","protected":false},"author":4,"featured_media":6456,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[352],"tags":[204],"class_list":["post-6455","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-information-security","tag-204"],"gutentor_comment":0,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/aict.nkust.edu.tw\/digitrans\/wp-content\/uploads\/2024\/07\/960-csguan_wang_.jpg?fit=960%2C420&ssl=1","jetpack-related-posts":[],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/posts\/6455","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6455"}],"version-history":[{"count":1,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/posts\/6455\/revisions"}],"predecessor-version":[{"id":6457,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/posts\/6455\/revisions\/6457"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=\/wp\/v2\/media\/6456"}],"wp:attachment":[{"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6455"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6455"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aict.nkust.edu.tw\/digitrans\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6455"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}