{"id":376,"title":"Active Directory'de Risk Odakl\u0131 G\u00fcvenlik: 10 Ad\u0131mda GPO Yap\u0131land\u0131rmas\u0131","content":"<div id=\"model-response-message-contentr_62e909a2736878db\" class=\"markdown markdown-main-panel stronger enable-updated-hr-color\" dir=\"ltr\" aria-live=\"polite\" aria-busy=\"false\">\n<h2 data-path-to-node=\"5\">1. Katman: Etki Alan\u0131 Genelinde Temel G&uuml;venlik (Domain-Wide Baseline)<\/h2>\n<p data-path-to-node=\"6\">Bu politikalar, istisnas\u0131z t&uuml;m kullan\u0131c\u0131lar\u0131 ve cihazlar\u0131 kapsayan \"savunma hatt\u0131\"d\u0131r.<\/p>\n<h3 data-path-to-node=\"7\">1. Kat\u0131 \u015eifre Politikalar\u0131 (Password Policy)<\/h3>\n<p data-path-to-node=\"8\">Varsay\u0131lan ayarlar genellikle yetersizdir.<\/p>\n<ul data-path-to-node=\"9\">\n<li>\n<p data-path-to-node=\"9,0,0\"><strong data-path-to-node=\"9,0,0\" data-index-in-node=\"0\">Uygulama:<\/strong> Minimum 12 karakter, karma\u015f\u0131kl\u0131k gereksinimleri ve son 24 \u015fifrenin hat\u0131rlanmas\u0131.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"9,1,0\"><strong data-path-to-node=\"9,1,0\" data-index-in-node=\"0\">Neden:<\/strong> Kaba kuvvet (brute-force) sald\u0131r\u0131lar\u0131n\u0131 zorla\u015ft\u0131rmak i&ccedil;in.<\/p>\n<\/li>\n<\/ul>\n<h3 data-path-to-node=\"10\">2. Hesap Kilitleme E\u015fi\u011fi (Account Lockout Policy)<\/h3>\n<ul data-path-to-node=\"11\">\n<li>\n<p data-path-to-node=\"11,0,0\"><strong data-path-to-node=\"11,0,0\" data-index-in-node=\"0\">Uygulama:<\/strong> 5 hatal\u0131 denemede 30 dakika kilitlenme.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"11,1,0\"><strong data-path-to-node=\"11,1,0\" data-index-in-node=\"0\">Neden:<\/strong> Otomatik sald\u0131r\u0131 ara&ccedil;lar\u0131n\u0131n hesab\u0131n\u0131z\u0131 ele ge&ccedil;irmesini engeller.<\/p>\n<\/li>\n<\/ul>\n<h3 data-path-to-node=\"12\">3. Geli\u015fmi\u015f Denetim Kayd\u0131 (Advanced Audit Policy)<\/h3>\n<p data-path-to-node=\"13\">Sadece \"bir \u015feyler oldu\" demek yetmez, \"ne oldu\u011funu\" bilmeniz gerekir.<\/p>\n<ul data-path-to-node=\"14\">\n<li>\n<p data-path-to-node=\"14,0,0\"><strong data-path-to-node=\"14,0,0\" data-index-in-node=\"0\">Uygulama:<\/strong> Ba\u015far\u0131l\u0131\/Ba\u015far\u0131s\u0131z oturum a&ccedil;ma i\u015flemleri, nesne eri\u015fimi ve ayr\u0131cal\u0131k kullan\u0131m\u0131 denetimi.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"14,1,0\"><strong data-path-to-node=\"14,1,0\" data-index-in-node=\"0\">Neden:<\/strong> Bir ihlal durumunda adli bili\u015fim (forensics) i&ccedil;in iz b\u0131rak\u0131r.<\/p>\n<\/li>\n<\/ul>\n<hr data-path-to-node=\"15\">\n<h2 data-path-to-node=\"16\">2. Katman: Rol Tabanl\u0131 K\u0131s\u0131tlamalar (Role-Based Access Control)<\/h2>\n<p data-path-to-node=\"17\">Her birimin ihtiyac\u0131 farkl\u0131d\u0131r. \u0130K'n\u0131n verisi ile BT'nin yetkisi bir tutulamaz.<\/p>\n<h3 data-path-to-node=\"18\">4. USB ve &Ccedil;\u0131kar\u0131labilir Medya K\u0131s\u0131tlamas\u0131<\/h3>\n<ul data-path-to-node=\"19\">\n<li>\n<p data-path-to-node=\"19,0,0\"><strong data-path-to-node=\"19,0,0\" data-index-in-node=\"0\">Hedef:<\/strong> Fak&uuml;lte ve &Ouml;\u011frenciler.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"19,1,0\"><strong data-path-to-node=\"19,1,0\" data-index-in-node=\"0\">Uygulama:<\/strong> USB depolama birimlerine yazma veya tamamen okuma engeli.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"19,2,0\"><strong data-path-to-node=\"19,2,0\" data-index-in-node=\"0\">Neden:<\/strong> Veri s\u0131z\u0131nt\u0131s\u0131n\u0131 (Data Exfiltration) ve zararl\u0131 yaz\u0131l\u0131mlar\u0131n fiziksel yolla bula\u015fmas\u0131n\u0131 &ouml;nlemek.<\/p>\n<\/li>\n<\/ul>\n<h3 data-path-to-node=\"20\">5. Klas&ouml;r Y&ouml;nlendirme (Folder Redirection)<\/h3>\n<ul data-path-to-node=\"21\">\n<li>\n<p data-path-to-node=\"21,0,0\"><strong data-path-to-node=\"21,0,0\" data-index-in-node=\"0\">Hedef:<\/strong> T&uuml;m kullan\u0131c\u0131lar.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"21,1,0\"><strong data-path-to-node=\"21,1,0\" data-index-in-node=\"0\">Uygulama:<\/strong> Masa&uuml;st&uuml; ve Belgeler klas&ouml;rlerini merkezi bir dosya sunucusuna y&ouml;nlendirme.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"21,2,0\"><strong data-path-to-node=\"21,2,0\" data-index-in-node=\"0\">Neden:<\/strong> Kullan\u0131c\u0131 bilgisayar\u0131 bozulsa bile verilerin yedeklenmi\u015f ve g&uuml;venli bir sunucuda kalmas\u0131n\u0131 sa\u011flar.<\/p>\n<\/li>\n<\/ul>\n<h3 data-path-to-node=\"22\">6. Maksimum Karantina (Hassas Veri Birimleri)<\/h3>\n<ul data-path-to-node=\"23\">\n<li>\n<p data-path-to-node=\"23,0,0\"><strong data-path-to-node=\"23,0,0\" data-index-in-node=\"0\">Hedef:<\/strong> \u0130K ve Akademik Hizmetler.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"23,1,0\"><strong data-path-to-node=\"23,1,0\" data-index-in-node=\"0\">Uygulama:<\/strong> \u0130nternet eri\u015fim k\u0131s\u0131tlamalar\u0131, sadece belirli uygulamalar\u0131n &ccedil;al\u0131\u015fmas\u0131na izin verilmesi (AppLocker).<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"23,2,0\"><strong data-path-to-node=\"23,2,0\" data-index-in-node=\"0\">Neden:<\/strong> En kritik veriyi i\u015fleyen personelin hata pay\u0131n\u0131 minimize etmek.<\/p>\n<\/li>\n<\/ul>\n<h3 data-path-to-node=\"24\">7. Minimum K\u0131s\u0131tlama (BT Hizmetleri)<\/h3>\n<ul data-path-to-node=\"25\">\n<li>\n<p data-path-to-node=\"25,0,0\"><strong data-path-to-node=\"25,0,0\" data-index-in-node=\"0\">Hedef:<\/strong> Sistem Y&ouml;neticileri.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"25,1,0\"><strong data-path-to-node=\"25,1,0\" data-index-in-node=\"0\">Uygulama:<\/strong> Y&ouml;netimsel ara&ccedil;lara eri\u015fim izni ancak internet taray\u0131c\u0131 k\u0131s\u0131tlamalar\u0131.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"25,2,0\"><strong data-path-to-node=\"25,2,0\" data-index-in-node=\"0\">Neden:<\/strong> BT personeli i\u015fini yapabilmeli ancak kendi yetkili hesaplar\u0131yla riskli sitelerde s&ouml;rf yapmamal\u0131d\u0131r.<\/p>\n<\/li>\n<\/ul>\n<hr data-path-to-node=\"26\">\n<h2 data-path-to-node=\"27\">3. Katman: U&ccedil; Nokta Sertle\u015ftirme (Endpoint Hardening)<\/h2>\n<p data-path-to-node=\"28\">Bilgisayar laboratuvarlar\u0131 gibi \"y&uuml;ksek riskli\" alanlar i&ccedil;in tam kontrol \u015fartt\u0131r.<\/p>\n<h3 data-path-to-node=\"29\">8. Kontrol Paneli ve CMD Engelleme<\/h3>\n<ul data-path-to-node=\"30\">\n<li>\n<p data-path-to-node=\"30,0,0\"><strong data-path-to-node=\"30,0,0\" data-index-in-node=\"0\">Uygulama:<\/strong> <code data-path-to-node=\"30,0,0\" data-index-in-node=\"10\">Prohibit access to Control Panel<\/code> ve <code data-path-to-node=\"30,0,0\" data-index-in-node=\"46\">Prevent access to the command prompt<\/code> ayarlar\u0131n\u0131n aktifle\u015ftirilmesi.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"30,1,0\"><strong data-path-to-node=\"30,1,0\" data-index-in-node=\"0\">Neden:<\/strong> Kullan\u0131c\u0131n\u0131n sistem ayarlar\u0131n\u0131 de\u011fi\u015ftirmesini veya yerel komutlarla g&uuml;venlik politikalar\u0131n\u0131 atlatmas\u0131n\u0131 engeller.<\/p>\n<\/li>\n<\/ul>\n<h3 data-path-to-node=\"31\">9. Yaz\u0131l\u0131m K\u0131s\u0131tlama Politikalar\u0131 (SRP)<\/h3>\n<ul data-path-to-node=\"32\">\n<li>\n<p data-path-to-node=\"32,0,0\"><strong data-path-to-node=\"32,0,0\" data-index-in-node=\"0\">Uygulama:<\/strong> <code data-path-to-node=\"32,0,0\" data-index-in-node=\"10\">%AppData%<\/code> veya <code data-path-to-node=\"32,0,0\" data-index-in-node=\"25\">Downloads<\/code> klas&ouml;rlerinden <code data-path-to-node=\"32,0,0\" data-index-in-node=\"50\">.exe<\/code> veya <code data-path-to-node=\"32,0,0\" data-index-in-node=\"60\">.msi<\/code> &ccedil;al\u0131\u015ft\u0131r\u0131lmas\u0131n\u0131n engellenmesi.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"32,1,0\"><strong data-path-to-node=\"32,1,0\" data-index-in-node=\"0\">Neden:<\/strong> Kullan\u0131c\u0131lar\u0131n internetten indirdikleri zararl\u0131 yaz\u0131l\u0131mlar\u0131 kazara &ccedil;al\u0131\u015ft\u0131rmas\u0131n\u0131 durdurur.<\/p>\n<\/li>\n<\/ul>\n<h3 data-path-to-node=\"33\">10. Agresif Ekran Kilidi<\/h3>\n<ul data-path-to-node=\"34\">\n<li>\n<p data-path-to-node=\"34,0,0\"><strong data-path-to-node=\"34,0,0\" data-index-in-node=\"0\">Uygulama:<\/strong> 5 dakikal\u0131k hareketsizlik sonras\u0131 parola korumal\u0131 ekran koruyucu.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"34,1,0\"><strong data-path-to-node=\"34,1,0\" data-index-in-node=\"0\">Neden:<\/strong> A&ccedil;\u0131k b\u0131rak\u0131lan terminallerin yetkisiz ki\u015filerce kullan\u0131lmas\u0131n\u0131 &ouml;nlemek.<\/p>\n<\/li>\n<\/ul>\n<hr data-path-to-node=\"35\">\n<h2 data-path-to-node=\"36\">Pratikten &Ccedil;\u0131kar\u0131lan Dersler (Pro Tips)<\/h2>\n<p data-path-to-node=\"37\">GPO yap\u0131land\u0131rmak sadece kutucuklar\u0131 i\u015faretlemek de\u011fildir; mant\u0131\u011f\u0131 anlamakt\u0131r:<\/p>\n<ul data-path-to-node=\"38\">\n<li>\n<p data-path-to-node=\"38,0,0\"><strong data-path-to-node=\"38,0,0\" data-index-in-node=\"0\">Ba\u011flant\u0131 Mant\u0131\u011f\u0131:<\/strong> GPO'lar <strong data-path-to-node=\"38,0,0\" data-index-in-node=\"26\">G&uuml;venlik Gruplar\u0131na<\/strong> de\u011fil, <strong data-path-to-node=\"38,0,0\" data-index-in-node=\"53\">OU'lara<\/strong> ba\u011flan\u0131r. Belirli ki\u015fileri hedeflemek istiyorsan\u0131z \"Security Filtering\" kullanmal\u0131s\u0131n\u0131z.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"38,1,0\"><strong data-path-to-node=\"38,1,0\" data-index-in-node=\"0\">Reboot vs. Logoff:<\/strong> Bilgisayar ayarlar\u0131 (Computer Configuration) i&ccedil;in cihaz\u0131n yeniden ba\u015flamas\u0131; Kullan\u0131c\u0131 ayarlar\u0131 (User Configuration) i&ccedil;in kullan\u0131c\u0131n\u0131n &ccedil;\u0131k\u0131\u015f yap\u0131p tekrar girmesi gerekir.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"38,2,0\"><strong data-path-to-node=\"38,2,0\" data-index-in-node=\"0\">&Ouml;n Haz\u0131rl\u0131k:<\/strong> S&uuml;r&uuml;c&uuml; e\u015fleme (Drive Mapping) yapacaksan\u0131z, GPO'yu basmadan &ouml;nce klas&ouml;r&uuml;n hedef sunucuda fiziksel olarak var oldu\u011fundan ve izinlerinin do\u011fru oldu\u011fundan emin olun.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"38,3,0\"><strong data-path-to-node=\"38,3,0\" data-index-in-node=\"0\">Sadelik G&uuml;venliktir:<\/strong> 100 farkl\u0131 k&uuml;&ccedil;&uuml;k politika yerine, benzer ayarlar\u0131 mant\u0131kl\u0131 gruplar halinde birle\u015ftirin. Bu, \"GPO Bloat\" denilen hantall\u0131\u011f\u0131 &ouml;nler ve oturum a&ccedil;ma s&uuml;relerini h\u0131zland\u0131r\u0131r.<\/p>\n<\/li>\n<\/ul>\n<hr data-path-to-node=\"39\">\n<div id=\"model-response-message-contentr_a7b4cdb507d5f71c\" class=\"markdown markdown-main-panel stronger enable-updated-hr-color\" dir=\"ltr\" aria-live=\"polite\" aria-busy=\"false\">\n<p data-path-to-node=\"0\">GPO yap\u0131land\u0131rmak i\u015fin yar\u0131s\u0131ysa, di\u011fer yar\u0131s\u0131 bu politikalar\u0131n u&ccedil; noktada ger&ccedil;ekten uygulan\u0131p uygulanmad\u0131\u011f\u0131n\u0131 do\u011frulamakt\u0131r. Active Directory d&uuml;nyas\u0131nda \"Neden bu duvar ka\u011f\u0131d\u0131 de\u011fi\u015fmedi?\" veya \"Neden hala USB takabiliyorum?\" sorular\u0131n\u0131n cevab\u0131&nbsp;<strong data-path-to-node=\"0\" data-index-in-node=\"245\">RSOP (Resultant Set of Policy)<\/strong> ve onun komut sat\u0131r\u0131 karde\u015fi <strong data-path-to-node=\"0\" data-index-in-node=\"305\">gpresult<\/strong> ara&ccedil;lar\u0131nda gizlidir.<\/p>\n<hr data-path-to-node=\"2\">\n<h2 data-path-to-node=\"3\">1. RSOP.msc: G&ouml;rsel Do\u011frulama<\/h2>\n<p data-path-to-node=\"4\">RSOP, kullan\u0131c\u0131ya uygulanan t&uuml;m GPO'lar\u0131n birle\u015fmi\u015f halini standart bir Group Policy Management konsolu gibi g&ouml;steren grafiksel bir ara&ccedil;t\u0131r.<\/p>\n<ul data-path-to-node=\"5\">\n<li>\n<p data-path-to-node=\"5,0,0\"><strong data-path-to-node=\"5,0,0\" data-index-in-node=\"0\">Nas\u0131l &Ccedil;al\u0131\u015ft\u0131r\u0131l\u0131r:<\/strong> Hedef bilgisayarda <code data-path-to-node=\"5,0,0\" data-index-in-node=\"39\">Win + R<\/code> tu\u015flar\u0131na bas\u0131p <code data-path-to-node=\"5,0,0\" data-index-in-node=\"63\">rsop.msc<\/code> yazarak ba\u015flat\u0131l\u0131r.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"5,1,0\"><strong data-path-to-node=\"5,1,0\" data-index-in-node=\"0\">Ne Sa\u011flar:<\/strong> Sistemin o anki politikas\u0131n\u0131 tarar ve size \"nihai sonucu\" g&ouml;sterir. E\u011fer bir ayar \"Enabled\" g&ouml;r&uuml;n&uuml;yorsa, o ayar ba\u015far\u0131yla uygulanm\u0131\u015ft\u0131r.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"5,2,0\"><strong data-path-to-node=\"5,2,0\" data-index-in-node=\"0\">S\u0131n\u0131rlamas\u0131:<\/strong> RSOP art\u0131k \"legacy\" (eski) kabul ediliyor. Baz\u0131 yeni nesil GPO ayarlar\u0131n\u0131 (&ouml;rne\u011fin Registry bazl\u0131 tercihler) her zaman do\u011fru g&ouml;stermeyebilir.<\/p>\n<\/li>\n<\/ul>\n<hr data-path-to-node=\"6\">\n<h2 data-path-to-node=\"7\">2. GPResult: G&uuml;&ccedil;l&uuml; ve Detayl\u0131 Analiz<\/h2>\n<p data-path-to-node=\"8\">Ger&ccedil;ek bir sistem y&ouml;neticisinin as\u0131l silah\u0131 komut sat\u0131r\u0131d\u0131r. <code data-path-to-node=\"8\" data-index-in-node=\"61\">gpresult<\/code>, politikan\u0131n neden uygulanmad\u0131\u011f\u0131n\u0131 (&ccedil;ak\u0131\u015fma m\u0131 var, izin hatas\u0131 m\u0131?) s&ouml;yler.<\/p>\n<h3 data-path-to-node=\"9\">Temel Komutlar:<\/h3>\n<ul data-path-to-node=\"10\">\n<li>\n<p data-path-to-node=\"10,0,0\"><strong data-path-to-node=\"10,0,0\" data-index-in-node=\"0\">H\u0131zl\u0131 &Ouml;zet:<\/strong> <code data-path-to-node=\"10,0,0\" data-index-in-node=\"12\">gpresult \/r<\/code><\/p>\n<ul data-path-to-node=\"10,0,1\">\n<li>\n<p data-path-to-node=\"10,0,1,0,0\">Hangi GPO'lar\u0131n uyguland\u0131\u011f\u0131n\u0131 (Applied GPO), hangilerinin kapsam d\u0131\u015f\u0131 kald\u0131\u011f\u0131n\u0131 (Filtered Out) listeler.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>Detayl\u0131 Rapor (HTML):<\/p>\n<p>gpresult \/h rapor.html<\/p>\n<ul data-path-to-node=\"10,1,1\">\n<li>\n<p data-path-to-node=\"10,1,1,0,0\">Bu komut, t&uuml;m detaylar\u0131 \u015f\u0131k bir HTML dosyas\u0131na d&ouml;ker. &Ccedil;ak\u0131\u015fan ayarlar\u0131, hangi GPO'nun di\u011ferini ezdi\u011fini (Precedence) burada renkli tablolarla g&ouml;rebilirsin.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<hr data-path-to-node=\"11\">\n<h2 data-path-to-node=\"12\">3. Politika &Ccedil;ak\u0131\u015fmalar\u0131n\u0131 Anlamak (Precedence)<\/h2>\n<p data-path-to-node=\"13\">Laboratuvar\u0131nda 10 farkl\u0131 GPO yap\u0131land\u0131rd\u0131\u011f\u0131n i&ccedil;in \"Precedence\" (&Ouml;ncelik S\u0131ras\u0131) en kritik konun haline geldi. Bir ayar hem \"Alan Genelinde\" hem de \"OU Seviyesinde\" yap\u0131land\u0131r\u0131lm\u0131\u015fsa ne olur?<\/p>\n<ul data-path-to-node=\"14\">\n<li>\n<p data-path-to-node=\"14,0,0\"><strong data-path-to-node=\"14,0,0\" data-index-in-node=\"0\">LSDOU Kural\u0131:<\/strong> Politikalar \u015fu s\u0131rayla uygulan\u0131r: <strong data-path-to-node=\"14,0,0\" data-index-in-node=\"48\">L<\/strong>ocal -&gt; <strong data-path-to-node=\"14,0,0\" data-index-in-node=\"57\">S<\/strong>ite -&gt; <strong data-path-to-node=\"14,0,0\" data-index-in-node=\"65\">D<\/strong>omain -&gt; <strong data-path-to-node=\"14,0,0\" data-index-in-node=\"75\">O<\/strong>rganizational <strong data-path-to-node=\"14,0,0\" data-index-in-node=\"90\">U<\/strong>nit.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"14,1,0\"><strong data-path-to-node=\"14,1,0\" data-index-in-node=\"0\">Son Gelen Kazan\u0131r:<\/strong> Alt seviyedeki OU'ya ba\u011flad\u0131\u011f\u0131n k\u0131s\u0131tlama (&ouml;rne\u011fin U&ccedil; Nokta Sertle\u015ftirme), Domain seviyesindeki genel ayar\u0131 ezer.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"14,2,0\"><strong data-path-to-node=\"14,2,0\" data-index-in-node=\"0\">WMI Filtering:<\/strong> E\u011fer bir GPO'yu sadece Windows 11'lere uygulamak i&ccedil;in filtrelediysen, <code data-path-to-node=\"14,2,0\" data-index-in-node=\"85\">gpresult<\/code> raporunda bu GPO'nun \"WMI Filter\" nedeniyle neden uygulanmad\u0131\u011f\u0131n\u0131 g&ouml;rebilirsin.<\/p>\n<\/li>\n<\/ul>\n<hr data-path-to-node=\"15\">\n<h2 data-path-to-node=\"16\">4. Uygulama ve Zorlama (Force Update)<\/h2>\n<p data-path-to-node=\"17\">Bir GPO ayar\u0131n\u0131 de\u011fi\u015ftirdi\u011finde, istemcinin bunu hemen almas\u0131n\u0131 beklemek yerine \u015fu ad\u0131mlar\u0131 izlemek laboratuvar ortam\u0131nda hayat kurtar\u0131r:<\/p>\n<ol start=\"1\" data-path-to-node=\"18\">\n<li>\n<p data-path-to-node=\"18,0,0\"><strong data-path-to-node=\"18,0,0\" data-index-in-node=\"0\">\u0130stemci Taraf\u0131nda:<\/strong> <code data-path-to-node=\"18,0,0\" data-index-in-node=\"19\">gpupdate \/force<\/code> komutunu &ccedil;al\u0131\u015ft\u0131r.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"18,1,0\"><strong data-path-to-node=\"18,1,0\" data-index-in-node=\"0\">Kritik Ayarlarda:<\/strong> Bilgisayar yap\u0131land\u0131rmas\u0131 de\u011fi\u015ftiyse cihaz\u0131 yeniden ba\u015flat, kullan\u0131c\u0131 yap\u0131land\u0131rmas\u0131 de\u011fi\u015ftiyse <code data-path-to-node=\"18,1,0\" data-index-in-node=\"114\">logoff<\/code> yap.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"18,2,0\"><strong data-path-to-node=\"18,2,0\" data-index-in-node=\"0\">DC Taraf\u0131nda:<\/strong> E\u011fer birden fazla Domain Controller varsa, replikasyonun tamamlanmas\u0131n\u0131 bekle veya manuel tetikle.<\/p>\n<\/li>\n<\/ol>\n<hr data-path-to-node=\"19\">\n<div id=\"model-response-message-contentr_ac5a865c83afacf1\" class=\"markdown markdown-main-panel stronger enable-updated-hr-color\" dir=\"ltr\" aria-live=\"polite\" aria-busy=\"false\">\n<p data-path-to-node=\"1\">Red Team bak\u0131\u015f a&ccedil;\u0131s\u0131yla en yayg\u0131n bypass y&ouml;ntemleri ve bunlar\u0131 engelleme yollar\u0131 \u015funlard\u0131r:<\/p>\n<hr data-path-to-node=\"2\">\n<h2 data-path-to-node=\"3\">1. GPO Bilgi Toplama (Enumeration)<\/h2>\n<p data-path-to-node=\"4\">Sald\u0131rgan sisteme s\u0131zd\u0131\u011f\u0131nda ilk yapt\u0131\u011f\u0131 \u015fey, hangi GPO'lar\u0131n aktif oldu\u011funu anlamakt\u0131r.<\/p>\n<ul data-path-to-node=\"5\">\n<li>\n<p data-path-to-node=\"5,0,0\"><strong data-path-to-node=\"5,0,0\" data-index-in-node=\"0\">Sald\u0131r\u0131:<\/strong> <code data-path-to-node=\"5,0,0\" data-index-in-node=\"9\">PowerView<\/code> veya <code data-path-to-node=\"5,0,0\" data-index-in-node=\"24\">BloodHound<\/code> gibi ara&ccedil;larla hangi kullan\u0131c\u0131lar\u0131n \"GPO Edit\" yetkisi oldu\u011funu veya hangi bilgisayarlarda k\u0131s\u0131tlamalar\u0131n gev\u015fek oldu\u011funu haritaland\u0131r\u0131r.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"5,1,0\"><strong data-path-to-node=\"5,1,0\" data-index-in-node=\"0\">Savunma:<\/strong> \"En az yetki\" (Least Privilege) prensibini uygula. GPO y&ouml;netim yetkisini sadece k\u0131s\u0131tl\u0131 bir Domain Admin grubuna ver. Normal kullan\u0131c\u0131lar\u0131n GPO nesnelerini okuma yetkisini k\u0131s\u0131tlamak zordur (varsay\u0131lan AD yap\u0131s\u0131 gere\u011fi), ancak yetki delegasyonunu s\u0131k\u0131 tutabilirsin.<\/p>\n<\/li>\n<\/ul>\n<hr data-path-to-node=\"6\">\n<h2 data-path-to-node=\"7\">2. \"AppLocker\" ve Yaz\u0131l\u0131m K\u0131s\u0131tlama Bypasslar\u0131<\/h2>\n<p data-path-to-node=\"8\">Senin kurdu\u011fun \"\u0130ndirilenler klas&ouml;r&uuml;nde .exe &ccedil;al\u0131\u015ft\u0131rma yasa\u011f\u0131\" harika bir ba\u015flang\u0131&ccedil;, ama sald\u0131rganlar kurnazd\u0131r.<\/p>\n<ul data-path-to-node=\"9\">\n<li>\n<p data-path-to-node=\"9,0,0\"><strong data-path-to-node=\"9,0,0\" data-index-in-node=\"0\">Sald\u0131r\u0131:<\/strong> Kullan\u0131c\u0131 <code data-path-to-node=\"9,0,0\" data-index-in-node=\"19\">.exe<\/code> &ccedil;al\u0131\u015ft\u0131ram\u0131yorsa, sald\u0131rgan <code data-path-to-node=\"9,0,0\" data-index-in-node=\"52\">.ps1<\/code> (PowerShell), <code data-path-to-node=\"9,0,0\" data-index-in-node=\"71\">.vbs<\/code> veya <code data-path-to-node=\"9,0,0\" data-index-in-node=\"81\">rundll32.exe<\/code> gibi Windows'un kendi ara&ccedil;lar\u0131n\u0131 kullanarak zararl\u0131 kod y&uuml;r&uuml;t&uuml;r (Living off the Land).<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"9,1,0\"><strong data-path-to-node=\"9,1,0\" data-index-in-node=\"0\">Savunma:<\/strong> * <strong data-path-to-node=\"9,1,0\" data-index-in-node=\"11\">PowerShell Constrained Language Mode:<\/strong> GPO ile PowerShell'i k\u0131s\u0131tlayarak sald\u0131rgan\u0131n geli\u015fmi\u015f komutlar &ccedil;al\u0131\u015ft\u0131rmas\u0131n\u0131 engelle.<\/p>\n<ul data-path-to-node=\"9,1,1\">\n<li>\n<p data-path-to-node=\"9,1,1,0,0\"><strong data-path-to-node=\"9,1,1,0,0\" data-index-in-node=\"0\">Uzant\u0131 Bazl\u0131 De\u011fil, \u0130mza Bazl\u0131 Engelleme:<\/strong> Sadece belirli klas&ouml;rleri de\u011fil, \"Microsoft taraf\u0131ndan imzalanmam\u0131\u015f\" t&uuml;m dosyalar\u0131 engelleyen bir beyaz liste (Whitelisting) politikas\u0131na ge&ccedil;.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<hr data-path-to-node=\"10\">\n<h2 data-path-to-node=\"11\">3. Komut \u0130stemi (CMD\/PowerShell) Engeli Bypass<\/h2>\n<p data-path-to-node=\"12\"><code data-path-to-node=\"12\" data-index-in-node=\"0\">gpedit<\/code> ile CMD'yi engelledin ama bu sadece \"etkile\u015fimli\" kabu\u011fu engeller.<\/p>\n<ul data-path-to-node=\"13\">\n<li>\n<p data-path-to-node=\"13,0,0\"><strong data-path-to-node=\"13,0,0\" data-index-in-node=\"0\">Sald\u0131r\u0131:<\/strong> Bir <code data-path-to-node=\"13,0,0\" data-index-in-node=\"13\">.bat<\/code> dosyas\u0131 haz\u0131rlay\u0131p i&ccedil;ine komutlar\u0131n\u0131 yazar ve &ccedil;al\u0131\u015ft\u0131r\u0131r. Windows bunu engellemez &ccedil;&uuml;nk&uuml; sadece kullan\u0131c\u0131ya bir komut sat\u0131r\u0131 ekran\u0131 a&ccedil;mas\u0131n\u0131 yasaklad\u0131n, arka planda komut y&uuml;r&uuml;t&uuml;lmesini de\u011fil.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"13,1,0\"><strong data-path-to-node=\"13,1,0\" data-index-in-node=\"0\">Savunma:<\/strong> <code data-path-to-node=\"13,1,0\" data-index-in-node=\"9\">AppLocker<\/code> veya <code data-path-to-node=\"13,1,0\" data-index-in-node=\"24\">Windows Defender Application Control (WDAC)<\/code> kullanarak betik (.bat, .ps1, .js) dosyalar\u0131n\u0131n y&uuml;r&uuml;t&uuml;lmesini tamamen denetim alt\u0131na al.<\/p>\n<\/li>\n<\/ul>\n<hr data-path-to-node=\"14\">\n<h2 data-path-to-node=\"15\">4. GPO \"Gecikmesi\" ve Yerel Admin Haklar\u0131<\/h2>\n<p data-path-to-node=\"16\">GPO'lar her 90 dakikada bir g&uuml;ncellenir.<\/p>\n<ul data-path-to-node=\"17\">\n<li>\n<p data-path-to-node=\"17,0,0\"><strong data-path-to-node=\"17,0,0\" data-index-in-node=\"0\">Sald\u0131r\u0131:<\/strong> E\u011fer kullan\u0131c\u0131 yerel admin haklar\u0131na sahipse, GPO'nun uygulad\u0131\u011f\u0131 bir Registry ayar\u0131n\u0131 de\u011fi\u015ftirebilir ve bir sonraki GPO g&uuml;ncellemesine kadar (veya a\u011f ba\u011flant\u0131s\u0131n\u0131 keserek s&uuml;resiz olarak) k\u0131s\u0131tlamay\u0131 devre d\u0131\u015f\u0131 b\u0131rakabilir.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"17,1,0\"><strong data-path-to-node=\"17,1,0\" data-index-in-node=\"0\">Savunma:<\/strong> <strong data-path-to-node=\"17,1,0\" data-index-in-node=\"9\">Restricted Groups<\/strong> GPO'sunu kullanarak kullan\u0131c\u0131lar\u0131 yerel \"Administrators\" grubundan zorla &ccedil;\u0131kar. Hi&ccedil;bir son kullan\u0131c\u0131 kendi makinesinde admin olmamal\u0131d\u0131r.<\/p>\n<\/li>\n<\/ul>\n<hr data-path-to-node=\"18\">\n<h2 data-path-to-node=\"19\">5. SYSVOL \u0130&ccedil;indeki \"GPP\" Parolalar\u0131 (Klasik Bir Hata)<\/h2>\n<p data-path-to-node=\"20\">E\u011fer eski bir laboratuvar rehberi izlediysen, \"Group Policy Preferences\" (GPP) ile yerel admin \u015fifresi belirlemi\u015f olabilirsin.<\/p>\n<ul data-path-to-node=\"21\">\n<li>\n<p data-path-to-node=\"21,0,0\"><strong data-path-to-node=\"21,0,0\" data-index-in-node=\"0\">Sald\u0131r\u0131:<\/strong> GPO ayarlar\u0131 <code data-path-to-node=\"21,0,0\" data-index-in-node=\"22\">SYSVOL<\/code> klas&ouml;r&uuml;nde XML dosyalar\u0131 olarak saklan\u0131r. Microsoft eskiden buradaki \u015fifreleri \"AES\" ile \u015fifreliyordu ama anahtar\u0131 halka a&ccedil;\u0131k bir \u015fekilde yay\u0131nlad\u0131. Sald\u0131rgan bu klas&ouml;re eri\u015fip saniyeler i&ccedil;inde yerel admin \u015fifreni &ccedil;&ouml;zebilir.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"21,1,0\"><strong data-path-to-node=\"21,1,0\" data-index-in-node=\"0\">Savunma:<\/strong> <strong data-path-to-node=\"21,1,0\" data-index-in-node=\"9\">LAPS (Local Administrator Password Solution)<\/strong> kullan. LAPS, her bilgisayar i&ccedil;in benzersiz ve rastgele bir yerel admin \u015fifresi olu\u015fturur ve bunu AD &uuml;zerindeki g&uuml;venli bir nitelikte saklar.<\/p>\n<\/li>\n<\/ul>\n<hr data-path-to-node=\"22\">\n<h3 data-path-to-node=\"23\">Red Team Testi \u0130&ccedil;in K&uuml;&ccedil;&uuml;k Bir &Ouml;dev:<\/h3>\n<p data-path-to-node=\"24\">Laboratuvar\u0131ndaki bir istemci makinede \u015funu dene:<\/p>\n<ol start=\"1\" data-path-to-node=\"25\">\n<li>\n<p data-path-to-node=\"25,0,0\">CMD engelliyken, bir Notepad a&ccedil;.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"25,1,0\">\u0130&ccedil;ine <code data-path-to-node=\"25,1,0\" data-index-in-node=\"6\">ipconfig \/all<\/code> ve alt\u0131na <code data-path-to-node=\"25,1,0\" data-index-in-node=\"30\">pause<\/code> yaz.<\/p>\n<\/li>\n<li>\n<p>.txt yerine .bat olarak kaydet ve &ccedil;al\u0131\u015ft\u0131r.<\/p>\n<p>Sonu&ccedil;: Komut &ccedil;al\u0131\u015ft\u0131 m\u0131? E\u011fer &ccedil;al\u0131\u015ft\u0131ysa, \"Endpoint Hardening\" katman\u0131nda sadece kabu\u011fu de\u011fil, betik y&uuml;r&uuml;tmeyi de hedeflemen gerekti\u011fini g&ouml;rm&uuml;\u015f olacaks\u0131n.<\/p>\n<\/li>\n<\/ol>\n<div id=\"model-response-message-contentr_8e9fad4a47405fe9\" class=\"markdown markdown-main-panel stronger enable-updated-hr-color\" dir=\"ltr\" aria-live=\"polite\" aria-busy=\"false\">\n<p data-path-to-node=\"0\">Red Team analizinden sonra savunma hatt\u0131n\u0131 g&uuml;&ccedil;lendirmek i&ccedil;in en kritik iki kaleye odaklanal\u0131m: <strong data-path-to-node=\"0\" data-index-in-node=\"95\">LAPS<\/strong> (Local Administrator Password Solution) ve <strong data-path-to-node=\"0\" data-index-in-node=\"143\">PowerShell K\u0131s\u0131tlama Politikalar\u0131<\/strong>. Bu iki yap\u0131land\u0131rma, sald\u0131rganlar\u0131n yanal hareket (lateral movement) ve kod y&uuml;r&uuml;tme yeteneklerini b&uuml;y&uuml;k &ouml;l&ccedil;&uuml;de k\u0131s\u0131tlar.<\/p>\n<h3 data-path-to-node=\"1\">1. LAPS: Yerel Parola G&uuml;venli\u011fi (Arka Kap\u0131y\u0131 Kilitlemek)<\/h3>\n<p data-path-to-node=\"2\">LAPS, her bilgisayardaki yerel y&ouml;netici parolas\u0131n\u0131 benzersiz ve rastgele hale getirir. Microsoft, 2023 y\u0131l\u0131nda <strong data-path-to-node=\"2\" data-index-in-node=\"111\">Windows LAPS<\/strong>'i do\u011frudan i\u015fletim sistemine entegre ederek eski (legacy) MSI tabanl\u0131 &ccedil;&ouml;z&uuml;m&uuml; g&uuml;ncelledi.<\/p>\n<p data-path-to-node=\"3\"><strong data-path-to-node=\"3\" data-index-in-node=\"0\">Kurulum Ad\u0131mlar\u0131:<\/strong><\/p>\n<ol start=\"1\" data-path-to-node=\"4\">\n<li>\n<p data-path-to-node=\"4,0,0\"><strong data-path-to-node=\"4,0,0\" data-index-in-node=\"0\">\u015eema Geni\u015fletme:<\/strong> AD \u015feman\u0131z\u0131 LAPS niteliklerini saklayacak \u015fekilde g&uuml;ncelleyin.<\/p>\n<ul data-path-to-node=\"4,0,1\">\n<li>\n<p data-path-to-node=\"4,0,1,0,0\">Komut: <code data-path-to-node=\"4,0,1,0,0\" data-index-in-node=\"7\">Update-LapsADSchema<\/code> (PowerShell &uuml;zerinden Domain Admin yetkisiyle).<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p data-path-to-node=\"4,1,0\"><strong data-path-to-node=\"4,1,0\" data-index-in-node=\"0\">GPO Olu\u015fturma:<\/strong> <code data-path-to-node=\"4,1,0\" data-index-in-node=\"15\">Computer Configuration -&gt; Admin Templates -&gt; System -&gt; LAPS<\/code> yolunu izleyin.<\/p>\n<ul data-path-to-node=\"4,1,1\">\n<li>\n<p data-path-to-node=\"4,1,1,0,0\"><strong data-path-to-node=\"4,1,1,0,0\" data-index-in-node=\"0\">Configure password backup directory:<\/strong> Parolalar\u0131n AD'de saklanmas\u0131n\u0131 se&ccedil;in.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"4,1,1,1,0\"><strong data-path-to-node=\"4,1,1,1,0\" data-index-in-node=\"0\">Password Settings:<\/strong> Karma\u015f\u0131kl\u0131k, uzunluk ve de\u011fi\u015ftirme periyodunu (&ouml;rne\u011fin 30 g&uuml;n) belirleyin.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p data-path-to-node=\"4,2,0\"><strong data-path-to-node=\"4,2,0\" data-index-in-node=\"0\">\u0130zinlerin Y&ouml;netimi:<\/strong> Varsay\u0131lan olarak parolalar \u015fifrelenmi\u015ftir. Sadece BT yetkililerinin bu parolalar\u0131 okumas\u0131na izin verin (<code data-path-to-node=\"4,2,0\" data-index-in-node=\"125\">Set-LapsADReadPasswordPermission<\/code>).<\/p>\n<\/li>\n<\/ol>\n<h3 data-path-to-node=\"5\">2. PowerShell K\u0131s\u0131tlama Politikalar\u0131 (Kodu Etkisiz Hale Getirmek)<\/h3>\n<p data-path-to-node=\"6\">Sadece CMD'yi engellemek yetmez; PowerShell'in geli\u015fmi\u015f &ouml;zelliklerini de dizginlemek gerekir.<\/p>\n<ul data-path-to-node=\"7\">\n<li>\n<p data-path-to-node=\"7,0,0\"><strong data-path-to-node=\"7,0,0\" data-index-in-node=\"0\">Constrained Language Mode (CLM):<\/strong> PowerShell'in en g&uuml;&ccedil;l&uuml; (ve tehlikeli) .NET fonksiyonlar\u0131n\u0131 devre d\u0131\u015f\u0131 b\u0131rak\u0131r.<\/p>\n<ul data-path-to-node=\"7,0,1\">\n<li>\n<p data-path-to-node=\"7,0,1,0,0\"><strong data-path-to-node=\"7,0,1,0,0\" data-index-in-node=\"0\">Uygulama:<\/strong> Bu mod genellikle <strong data-path-to-node=\"7,0,1,0,0\" data-index-in-node=\"28\">AppLocker<\/strong> veya <strong data-path-to-node=\"7,0,1,0,0\" data-index-in-node=\"43\">Windows Defender Application Control (WDAC)<\/strong> ile tetiklenir. Bir script \"Allow\" listesinde de\u011filse, otomatik olarak CLM modunda &ccedil;al\u0131\u015f\u0131r ve sald\u0131rgan\u0131n geli\u015fmi\u015f zararl\u0131 kodlar &ccedil;al\u0131\u015ft\u0131rmas\u0131n\u0131 engeller.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p data-path-to-node=\"7,1,0\"><strong data-path-to-node=\"7,1,0\" data-index-in-node=\"0\">Execution Policy:<\/strong> Sadece imzal\u0131 scriptlerin &ccedil;al\u0131\u015fmas\u0131na izin verin.<\/p>\n<ul data-path-to-node=\"7,1,1\">\n<li>\n<p data-path-to-node=\"7,1,1,0,0\"><strong data-path-to-node=\"7,1,1,0,0\" data-index-in-node=\"0\">GPO:<\/strong> <code data-path-to-node=\"7,1,1,0,0\" data-index-in-node=\"5\">Computer Configuration -&gt; Admin Templates -&gt; Windows Components -&gt; Windows PowerShell -&gt; Turn on Script Execution<\/code>.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"7,1,1,1,0\">Ayar: <strong data-path-to-node=\"7,1,1,1,0\" data-index-in-node=\"6\">Allow only signed scripts<\/strong>.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p data-path-to-node=\"7,2,0\"><strong data-path-to-node=\"7,2,0\" data-index-in-node=\"0\">Logging (G&ouml;r&uuml;n&uuml;rl&uuml;k):<\/strong><\/p>\n<ul data-path-to-node=\"7,2,1\">\n<li>\n<p data-path-to-node=\"7,2,1,0,0\"><strong data-path-to-node=\"7,2,1,0,0\" data-index-in-node=\"0\">Module Logging:<\/strong> Hangi komutlar\u0131n &ccedil;al\u0131\u015ft\u0131\u011f\u0131n\u0131 kaydeder.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"7,2,1,1,0\"><strong data-path-to-node=\"7,2,1,1,0\" data-index-in-node=\"0\">Script Block Logging:<\/strong> &Ccedil;al\u0131\u015ft\u0131r\u0131lan kodun i&ccedil;eri\u011fini (karart\u0131lm\u0131\u015f\/obfuscated olsa bile) Event Viewer'a yans\u0131t\u0131r.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p data-path-to-node=\"9\">LAPS ile sald\u0131rgan\u0131n bir bilgisayar\u0131 ele ge&ccedil;irdikten sonra ayn\u0131 \u015fifreyle di\u011ferine atlamas\u0131n\u0131 (Pass-the-Hash) engellersin. PowerShell k\u0131s\u0131tlamalar\u0131yla da, i&ccedil;eri s\u0131zsa bile sistem komutlar\u0131n\u0131 silah olarak kullanmas\u0131n\u0131 zorla\u015ft\u0131r\u0131rs\u0131n.<\/p>\n<p data-path-to-node=\"10\">Bu yap\u0131land\u0131rmalar laboratuvar\u0131n\u0131 \"kurumsal seviyede g&uuml;venli\" bir ortama d&ouml;n&uuml;\u015ft&uuml;recektir. <!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><a class=\"ng-star-inserted\" href=\"https:\/\/www.youtube.com\/watch?v=9BPHJChumAQ\" target=\"_blank\" rel=\"noopener\" data-hveid=\"0\" data-ved=\"0CAAQ_4QMahgKEwjU7cyox_ORAxUAAAAAHQAAAAAQzAI\">LAPS kurulumu ve detayl\u0131 demo<\/a><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----> videosu, Active Directory &uuml;zerinde \u015fifre y&ouml;netimini nas\u0131l otomatize edece\u011finizi uygulamal\u0131 olarak g&ouml;stermektedir.<\/p>\n<div class=\"attachment-container youtube\"><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><\/div>\n<p>&nbsp;<\/p>\n<\/div>\n<p data-path-to-node=\"26\"><!----><\/p>\n<\/div>\n<p data-path-to-node=\"22\"><!----><\/p>\n<\/div>\n<p data-path-to-node=\"40\"><strong data-path-to-node=\"40\" data-index-in-node=\"0\"><!----><\/strong><\/p>\n<\/div>\n<p><!----><\/p>","excerpt":"Ger\u00e7ek bir kurumsal ortamda g\u00fcvenlik,\u00a0\"Kimin neye eri\u015fti\u011fi\" kadar \"Cihaz\u0131n ve kullan\u0131c\u0131n\u0131n nas\u0131l davranabilece\u011fi\" ile ilgilidir. 500+ kullan\u0131c\u0131l\u0131 senaryomda uygulad\u0131\u011f\u0131m 10 kritik GPO yap\u0131land\u0131rmas\u0131","created_at":"2026-01-05 08:35:23","updated_at":"2026-09-07 23:54:48","category_id":6,"view_count":524,"reading_time":12,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2026-01-05 05:35:23","featured_image":"\/uploads\/images\/2026\/01\/695b4d981d514_1767591320.png","slug":"active-directory-de-risk-odakli-guvenlik-10-adimda-gpo-yapilandirmasi","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"}