{"id":166,"title":"Create-Tiers in AD","content":"CreateTiers in AD, Active Directory ortam\u0131nda katmanl\u0131 bir g\u00fcvenlik modeli olu\u015fturmak i\u00e7in kullan\u0131lan g\u00fc\u00e7l\u00fc bir PowerShell script'idir. Bu script, \u00f6zellikle b\u00fcy\u00fck \u00f6l\u00e7ekli kurumsal a\u011flarda g\u00fcvenli\u011fi art\u0131rmak ve y\u00f6netimi kolayla\u015ft\u0131rmak i\u00e7in tasarlanm\u0131\u015ft\u0131r. \u0130\u015fte bu scriptin kurulumu, kullan\u0131m\u0131 ve avantajlar\u0131 hakk\u0131nda detayl\u0131 bir rehber:   CreateTiers in AD Nedir?<\/strong> CreateTiers in AD, Active Directory'de Tiered Security Model (Katmanl\u0131 G\u00fcvenlik Modeli) olu\u015fturmak i\u00e7in kullan\u0131lan bir PowerShell script'idir. Bu model, a\u011f kaynaklar\u0131n\u0131 g\u00fcvenlik seviyelerine g\u00f6re katmanlara ay\u0131r\u0131r ve her katman i\u00e7in farkl\u0131 eri\u015fim kontrolleri uygular. Bu sayede, kritik sistemlerin korunmas\u0131 ve sald\u0131r\u0131 y\u00fczeyinin k\u00fc\u00e7\u00fclt\u00fclmesi sa\u011flan\u0131r.   CreateTiers in AD Kurulumu<\/strong> 1. Script'i \u0130ndirme Script'i GitHub \u00fczerinden indirebilirsiniz: powershell GitHub'dan indirme 
git clone https:\/\/github.com\/techservicesillinois\/SecOpsPowershellADLAB<\/pre>   Veya do\u011frudan scripti indirme 
InvokeWebRequest Uri \"https:\/\/raw.githubusercontent.com\/techservicesillinois\/SecOpsPowershellADLAB\/master\/CreateTiers.ps1\" OutFile \"CreateTiers.ps1\"<\/pre>   2. Script'i \u00c7al\u0131\u015ft\u0131rma Script'i \u00e7al\u0131\u015ft\u0131rmadan \u00f6nce PowerShell'i y\u00f6netici olarak ba\u015flat\u0131n ve script'i import edin: powershell 
Scripti import etme . .\\CreateTiers.ps1<\/pre>   CreateTiers in AD Kullan\u0131m\u0131 1. Temel Yap\u0131land\u0131rma Basit bir tier yap\u0131s\u0131 olu\u015fturmak i\u00e7in a\u015fa\u011f\u0131daki komutu kullan\u0131n: powershell 
CreateTiers DomainName \"domain.local\" Verbose<\/pre>   2. \u00d6zel Yap\u0131land\u0131rma \u00d6zel OU (Organizational Unit) ve grup yap\u0131s\u0131 olu\u015fturmak i\u00e7in: powershell 
CreateTiers DomainName \"domain.local\" Tier0OUName \"T0Admin\" Tier1OUName \"T1ServerAdmins\" Tier2OUName \"T2UserSupport\" CreateGroups $true<\/pre>   3. GPO Yap\u0131land\u0131rmas\u0131 GPO (Group Policy Object) olu\u015fturma ile birlikte: powershell 
CreateTiers CreateGPOs $true GPOPrefix \"SECTIER\"<\/pre>   4. G\u00fcvenlik Gruplar\u0131 Tier bazl\u0131 gruplar olu\u015fturmak i\u00e7in: powershell 
$groups = @{ \"Tier0\" = @(\"T0Admins\", \"T0ServiceAccounts\") \"Tier1\" = @(\"T1ServerAdmins\", \"T1DBAdmins\") \"Tier2\" = @(\"T2Helpdesk\", \"T2Support\") } CreateTiers SecurityGroups $groups<\/pre>   5. Eri\u015fim Kontrolleri Tier eri\u015fim kurallar\u0131 tan\u0131mlamak i\u00e7in: powershell 
$accessRules = @{ \"Tier0\" = \"Deny_All_Lower_Tiers\" \"Tier1\" = \"Allow_Same_Tier_Only\" \"Tier2\" = \"Allow_Upper_Tiers\" } CreateTiers AccessRules $accessRules<\/pre>   6. \u0130zleme ve Loglama Detayl\u0131 loglama ile olu\u015fturmak i\u00e7in: powershell 
CreateTiers EnableAuditing $true LogPath \"C:\\Logs\\TierCreation.log\" DetailedLogging $true<\/pre>   Tier Yap\u0131s\u0131 CreateTiers in AD, Active Directory'yi \u00fc\u00e7 temel katmana ay\u0131r\u0131r: 1. Tier 0 (En Y\u00fcksek G\u00fcvenlik): Domain Controllers Enterprise Admins Schema Admins Domain Admins 2. Tier 1 (Sunucu Y\u00f6netimi): Server Admins Application Admins Database Admins 3. Tier 2 (Kullan\u0131c\u0131 Sistemleri): Helpdesk Desktop Support End Users   \u0130yi Uygulama \u00d6nerileri 1. Tier 0'\u0131 S\u0131k\u0131 Koruyun: Dedicated y\u00f6netim istasyonlar\u0131 kullan\u0131n. Smart card authentication zorunlu tutun. JustInTime eri\u015fim uygulay\u0131n. 2. Tier 1 i\u00e7in \u00d6nlemler: Server admin hesaplar\u0131n\u0131 izole edin. Session s\u00fcrelerini s\u0131n\u0131rland\u0131r\u0131n. Remote eri\u015fimleri k\u0131s\u0131tlay\u0131n. 3. Tier 2 i\u00e7in \u00d6nlemler: Standart kullan\u0131c\u0131 politikalar\u0131 uygulay\u0131n. Selfservice imkanlar\u0131 sa\u011flay\u0131n. Help desk eri\u015fimlerini monit\u00f6r edin.   Hata Giderme ve Rollback 1. Test Modu Script'i test modunda \u00e7al\u0131\u015ft\u0131rmak i\u00e7in: powershell 
CreateTiers TestMode $true<\/pre>   2. Rollback \u00d6zelli\u011fi De\u011fi\u015fiklikleri geri almak i\u00e7in: powershell 
CreateTiers EnableRollback $true RollbackPath \"C:\\Backup\\TierConfig\"<\/pre>     CreateTiers in AD, Active Directory ortam\u0131n\u0131zda katmanl\u0131 bir g\u00fcvenlik modeli olu\u015fturarak, kritik sistemlerinizi koruman\u0131z\u0131 ve sald\u0131r\u0131 y\u00fczeyini k\u00fc\u00e7\u00fcltmenizi sa\u011flar. Bu script, \u00f6zellikle b\u00fcy\u00fck \u00f6l\u00e7ekli kurumsal a\u011flarda g\u00fcvenli\u011fi art\u0131rmak i\u00e7in ideal bir \u00e7\u00f6z\u00fcmd\u00fcr. Siber g\u00fcvenlik, s\u00fcrekli bir \u00e7aba gerektirir. CreateTiers in AD gibi ara\u00e7larla ba\u015flay\u0131n, sistemlerinizi g\u00fcvende tutun ve sald\u0131rganlara kar\u015f\u0131 proaktif bir savunma stratejisi olu\u015fturun.    ","excerpt":"Create-Tiers in AD, Active Directory'de katmanl\u0131 bir g\u00fcvenlik modeli olu\u015fturmak i\u00e7in kullan\u0131lan bir PowerShell script'idir.","created_at":"2025-02-06 17:56:18","updated_at":"2026-09-07 16:13:00","category_id":7,"view_count":690,"reading_time":4,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-02-06 17:56:18","featured_image":"resimyok.jpg","slug":"create-tiers-in-ad","category_name":"Cyber Security","category_slug":"cyber-security"}