[{"id":381,"title":"\u00a0File Server Performance Test Tool v2.0","content":"<p>&nbsp;File Server Performance Test Tool v2.0 - Advanced Edition<\/p>\n<p>&nbsp;Yeni &Ouml;zellikler<\/p>\n<p>&nbsp;\u2699\ufe0f Ayarlar Sayfas\u0131<br>- Test parametrelerini kaydetme (Sunucu IP, Share Path)<br>- Ayarlar JSON dosyas\u0131nda saklan\u0131r: `C:\\PerformanceTests\\config.json`<\/p>\n<p>&nbsp;\ud83d\udce7 Email G&ouml;nderimi<br>- Test sonu&ccedil;lar\u0131n\u0131 otomatik email ile g&ouml;nderme<br>- SMTP ayarlar\u0131:<br>&nbsp; - SMTP Server ve Port<br>&nbsp; - Kullan\u0131c\u0131 ad\u0131 ve \u015fifre<br>&nbsp; - G&ouml;nderen ve al\u0131c\u0131 email adresleri<br>&nbsp; - SSL deste\u011fi<\/p>\n<p>&nbsp;\u23f0 Otomatik G&ouml;rev Zamanlay\u0131c\u0131<br>- Testleri belirli aral\u0131klarla otomatik &ccedil;al\u0131\u015ft\u0131rma<br>- Windows Task Scheduler entegrasyonu<br>- 5-1440 dakika aras\u0131 ayarlanabilir interval<br>- Otomatik &ccedil;al\u0131\u015fan testler email ile raporlan\u0131r<\/p>\n<p>&nbsp;\ud83d\udcca Geli\u015fmi\u015f Log Sistemi<br>- Her test i&ccedil;in ayr\u0131 log dosyas\u0131<br>- UTF-8 BOM encoding (T&uuml;rk&ccedil;e karakter deste\u011fi)<br>- Dosya ad\u0131 format\u0131: `YYYYMMDD_HHMMSS_TestAdi.txt`<\/p>\n<p>&nbsp;Kullan\u0131m<\/p>\n<p>&nbsp;Manuel &Ccedil;al\u0131\u015ft\u0131rma<br>```powershell<br>&nbsp;PowerShell'i Administrator olarak a&ccedil;\u0131n<br>.\\FileServerTest-GUI-Advanced.ps1<br>```<\/p>\n<p>&nbsp;Otomatik &Ccedil;al\u0131\u015ft\u0131rma (Zamanlay\u0131c\u0131 i&ccedil;in)<br>```powershell<br>.\\FileServerTest-GUI-Advanced.ps1 -AutoRun<br>```<\/p>\n<p>&nbsp;Ayarlar<\/p>\n<p>&nbsp;Test Parametreleri<br>- **Sunucu IP**: Ping testi i&ccedil;in hedef IP veya hostname<br>- **Share Path**: SMB, Bandwidth ve IOPS testleri i&ccedil;in UNC path (&ouml;rn: `\\\\192.168.1.100\\share`)<\/p>\n<p>&nbsp;Email Ayarlar\u0131<br>- **Email G&ouml;nderimi Aktif**: Email g&ouml;nderimini etkinle\u015ftir\/devre d\u0131\u015f\u0131 b\u0131rak<br>- **SMTP Server**: SMTP sunucu adresi (&ouml;rn: `smtp.gmail.com`)<br>- **Port**: SMTP port (genellikle 587 veya 465)<br>- **Kullan\u0131c\u0131 Ad\u0131**: SMTP kimlik do\u011frulama kullan\u0131c\u0131 ad\u0131<br>- **\u015eifre**: SMTP kimlik do\u011frulama \u015fifresi<br>- **G&ouml;nderen Email**: G&ouml;nderen email adresi<br>- **Al\u0131c\u0131 Email**: Al\u0131c\u0131 email adresi (virg&uuml;lle ay\u0131rarak birden fazla eklenebilir)<br>- **SSL Kullan**: SSL\/TLS \u015fifreleme kullan<\/p>\n<p>&nbsp;Gmail i&ccedil;in &Ouml;rnek Ayarlar<br>```<br>SMTP Server: smtp.gmail.com<br>Port: 587<br>SSL: Aktif<br>Kullan\u0131c\u0131 Ad\u0131: your-email@gmail.com<br>\u015eifre: uygulama-sifresi (2FA aktifse App Password kullan\u0131n)<br>```<\/p>\n<p>&nbsp;Office 365 i&ccedil;in &Ouml;rnek Ayarlar<br>```<br>SMTP Server: smtp.office365.com<br>Port: 587<br>SSL: Aktif<br>Kullan\u0131c\u0131 Ad\u0131: your-email@company.com<br>\u015eifre: hesap-sifresi<br>```<\/p>\n<p>&nbsp;Otomatik G&ouml;rev Zamanlay\u0131c\u0131<br>- **Otomatik Test Aktif**: Zamanlay\u0131c\u0131y\u0131 etkinle\u015ftir\/devre d\u0131\u015f\u0131 b\u0131rak<br>- **Test Aral\u0131\u011f\u0131**: Testlerin &ccedil;al\u0131\u015fma s\u0131kl\u0131\u011f\u0131 (dakika cinsinden)<br>&nbsp; - Minimum: 5 dakika<br>&nbsp; - Maksimum: 1440 dakika (24 saat)<br>&nbsp; - &Ouml;nerilen: 60 dakika<\/p>\n<p>&nbsp;&Ouml;zellikler<\/p>\n<p>&nbsp;Testler<br>1. **A\u011f Gecikme Testi**: 100 ping paketi ile latency &ouml;l&ccedil;&uuml;m&uuml;<br>2. **Bant Geni\u015fli\u011fi Testi**: 100MB dosya kopyalama ile throughput &ouml;l&ccedil;&uuml;m&uuml;<br>3. **SMB H\u0131z Testi**: K&uuml;&ccedil;&uuml;k, orta ve b&uuml;y&uuml;k dosyalarla SMB performans testi<br>4. **IOPS Testi**: Random read\/write IOPS &ouml;l&ccedil;&uuml;m&uuml;<br>5. **Sistem Bilgileri**: CPU, RAM, Disk ve Network bilgileri<\/p>\n<p>&nbsp;Raporlama<br>- Her test i&ccedil;in ayr\u0131 log dosyas\u0131<br>- Renkli konsol &ccedil;\u0131kt\u0131s\u0131<br>- UTF-8 encoding ile T&uuml;rk&ccedil;e karakter deste\u011fi<br>- Otomatik email g&ouml;nderimi<br>- Notepad ile rapor g&ouml;r&uuml;nt&uuml;leme<\/p>\n<p>&nbsp;Dosya Yap\u0131s\u0131<\/p>\n<p>```<br>C:\\PerformanceTests\\<br>\u251c\u2500\u2500 config.json &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Ayarlar dosyas\u0131<br>\u251c\u2500\u2500 20260113_120530_AgGecikme.txt &nbsp; &nbsp; &nbsp; &nbsp;A\u011f gecikme test raporu<br>\u251c\u2500\u2500 20260113_120645_BantGenisligi.txt &nbsp; &nbsp;Bant geni\u015fli\u011fi test raporu<br>\u251c\u2500\u2500 20260113_120820_SMBTest.txt &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;SMB test raporu<br>\u251c\u2500\u2500 20260113_121015_IOPSTest.txt &nbsp; &nbsp; &nbsp; &nbsp; IOPS test raporu<br>\u251c\u2500\u2500 20260113_121200_SistemBilgileri.txt &nbsp;Sistem bilgileri raporu<br>\u2514\u2500\u2500 20260113_121500_TumTestler.txt &nbsp; &nbsp; &nbsp; T&uuml;m testler raporu<br>```<\/p>\n<p>&nbsp;Gereksinimler<\/p>\n<p>- Windows Server 2019 veya &uuml;zeri<br>- PowerShell 5.1 veya &uuml;zeri<br>- Administrator yetkileri<br>- .NET Framework 4.5 veya &uuml;zeri<\/p>\n<p>&nbsp;Sorun Giderme<\/p>\n<p>&nbsp;Email G&ouml;nderilmiyor<br>- SMTP ayarlar\u0131n\u0131 kontrol edin<br>- Firewall'da SMTP portunu a&ccedil;\u0131n<br>- Gmail kullan\u0131yorsan\u0131z \"Daha az g&uuml;venli uygulamalara izin ver\" veya App Password kullan\u0131n<br>- Office 365 kullan\u0131yorsan\u0131z SMTP Auth'un etkin oldu\u011fundan emin olun<\/p>\n<p>&nbsp;Zamanlay\u0131c\u0131 &Ccedil;al\u0131\u015fm\u0131yor<br>- Script'i Administrator olarak &ccedil;al\u0131\u015ft\u0131rd\u0131\u011f\u0131n\u0131zdan emin olun<br>- Task Scheduler'da \"FileServerPerformanceTest\" g&ouml;revini kontrol edin<br>- G&ouml;rev &ouml;zelliklerinde \"Run with highest privileges\" se&ccedil;ene\u011finin aktif oldu\u011fundan emin olun<\/p>\n<p>&nbsp;T&uuml;rk&ccedil;e Karakterler Bozuk<br>- Log dosyalar\u0131n\u0131 UTF-8 destekleyen bir edit&ouml;rle a&ccedil;\u0131n (Notepad++, VS Code)<br>- Windows Notepad kullan\u0131yorsan\u0131z \"Encoding\" men&uuml;s&uuml;nden \"UTF-8\" se&ccedil;in<\/p>\n<p>&nbsp;Lisans<\/p>\n<p>Bu ara&ccedil; &Ouml;nder Ak&ouml;z taraf\u0131ndan Windows Server 2016\/2019\/2022 i&ccedil;in geli\u015ftirilmi\u015ftir.<\/p>\n<p>&nbsp;Versiyon Ge&ccedil;mi\u015fi<\/p>\n<p>&nbsp;v2.0 (2026-01-13)<br>- Ayarlar sayfas\u0131 eklendi<br>- Email g&ouml;nderimi eklendi<br>- Otomatik g&ouml;rev zamanlay\u0131c\u0131 eklendi<br>- JSON tabanl\u0131 konfig&uuml;rasyon sistemi<br>- Her test i&ccedil;in ayr\u0131 log dosyas\u0131<\/p>\n<p>&nbsp;v1.0 (2026-01-13)<br>- \u0130lk s&uuml;r&uuml;m<br>- Temel test fonksiyonlar\u0131<br>- GUI aray&uuml;z&uuml;<\/p>\n<pre class=\"language-markup\"><code># File Server Performance Test Tool - Advanced GUI Version\n# Windows Server 2019 compatible\n# Run as Administrator\n\n# Check for AutoRun parameter\nparam([switch]$AutoRun)\n\nAdd-Type -AssemblyName System.Windows.Forms\nAdd-Type -AssemblyName System.Drawing\n\n# Global variables\n$script:OutputPath = \"C:\\PerformanceTests\"\n$script:ConfigFile = Join-Path $script:OutputPath \"config.json\"\n$script:reportFile = \"\"\n$script:isRunning = $false\n$script:config = $null\n\n# Create output folder\nif (-not (Test-Path $script:OutputPath)) {\n    New-Item -ItemType Directory -Path $script:OutputPath -Force | Out-Null\n}\n\n#region Configuration Management\nfunction Load-Config {\n    if (Test-Path $script:ConfigFile) {\n        try {\n            $json = Get-Content -Path $script:ConfigFile -Raw -Encoding UTF8\n            $script:config = $json | ConvertFrom-Json\n        } catch {\n            $script:config = Get-DefaultConfig\n        }\n    } else {\n        $script:config = Get-DefaultConfig\n    }\n}\n\nfunction Get-DefaultConfig {\n    return [PSCustomObject]@{\n        ServerIP = \"\"\n        SharePath = \"\"\n        OutputPath = \"C:\\PerformanceTests\"\n        EmailEnabled = $false\n        SMTPServer = \"\"\n        SMTPPort = 587\n        SMTPUsername = \"\"\n        SMTPPassword = \"\"\n        SMTPFrom = \"\"\n        SMTPTo = \"\"\n        SMTPUseSSL = $true\n        ScheduleEnabled = $false\n        ScheduleInterval = 60\n        ScheduleTests = @(\"Network\", \"Bandwidth\", \"SMB\", \"IOPS\")\n    }\n}\n\nfunction Save-Config {\n    try {\n        $utf8BOM = New-Object System.Text.UTF8Encoding $true\n        $json = $script:config | ConvertTo-Json -Depth 10\n        [System.IO.File]::WriteAllText($script:ConfigFile, $json, $utf8BOM)\n        return $true\n    } catch {\n        [System.Windows.Forms.MessageBox]::Show(\"Ayarlar kaydedilemedi: $($_.Exception.Message)\", \"Hata\", [System.Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Error)\n        return $false\n    }\n}\n#endregion\n\n#region Email Functions\nfunction Send-EmailReport {\n    param([string]$ReportFile)\n    \n    if (-not $script:config.EmailEnabled) {\n        return\n    }\n    \n    if ([string]::IsNullOrEmpty($script:config.SMTPServer) -or [string]::IsNullOrEmpty($script:config.SMTPTo)) {\n        Write-Log \"[WARN] Email ayarlar\u0131 eksik, email g&ouml;nderilemedi!\" \"Yellow\"\n        return\n    }\n    \n    try {\n        Write-Log \"Email g&ouml;nderiliyor...\" \"Yellow\"\n        \n        $reportContent = Get-Content -Path $ReportFile -Raw -Encoding UTF8\n        \n        $mailParams = @{\n            SmtpServer = $script:config.SMTPServer\n            Port = $script:config.SMTPPort\n            From = $script:config.SMTPFrom\n            To = $script:config.SMTPTo\n            Subject = \"File Server Test Raporu - $(Get-Date -Format 'dd.MM.yyyy HH:mm')\"\n            Body = $reportContent\n            Encoding = [System.Text.Encoding]::UTF8\n            UseSsl = $script:config.SMTPUseSSL\n        }\n        \n        if (-not [string]::IsNullOrEmpty($script:config.SMTPUsername)) {\n            $securePassword = ConvertTo-SecureString $script:config.SMTPPassword -AsPlainText -Force\n            $credential = New-Object System.Management.Automation.PSCredential($script:config.SMTPUsername, $securePassword)\n            $mailParams.Credential = $credential\n        }\n        \n        Send-MailMessage @mailParams\n        Write-Log \"[OK] Email ba\u015far\u0131yla g&ouml;nderildi!\" \"Green\"\n        \n    } catch {\n        Write-Log \"[ERROR] Email g&ouml;nderilemedi: $($_.Exception.Message)\" \"Red\"\n    }\n}\n#endregion\n\n#region Scheduler Functions\nfunction Register-ScheduledTask {\n    param([int]$IntervalMinutes)\n    \n    try {\n        $taskName = \"FileServerPerformanceTest\"\n        $scriptPath = $PSCommandPath\n        \n        # Mevcut g&ouml;revi sil\n        Unregister-ScheduledTask -TaskName $taskName -Confirm:$false -ErrorAction SilentlyContinue\n        \n        # Yeni g&ouml;rev olu\u015ftur\n        $action = New-ScheduledTaskAction -Execute \"PowerShell.exe\" -Argument \"-NoProfile -ExecutionPolicy Bypass -File `\"$scriptPath`\" -AutoRun\"\n        $trigger = New-ScheduledTaskTrigger -Once -At (Get-Date) -RepetitionInterval (New-TimeSpan -Minutes $IntervalMinutes) -RepetitionDuration ([TimeSpan]::MaxValue)\n        $principal = New-ScheduledTaskPrincipal -UserId \"$env:USERDOMAIN\\$env:USERNAME\" -LogonType Interactive -RunLevel Highest\n        $settings = New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -StartWhenAvailable\n        \n        Register-ScheduledTask -TaskName $taskName -Action $action -Trigger $trigger -Principal $principal -Settings $settings -Force | Out-Null\n        \n        Write-Log \"[OK] Zamanlanm\u0131\u015f g&ouml;rev olu\u015fturuldu (Her $IntervalMinutes dakikada)\" \"Green\"\n        return $true\n        \n    } catch {\n        Write-Log \"[ERROR] Zamanlanm\u0131\u015f g&ouml;rev olu\u015fturulamad\u0131: $($_.Exception.Message)\" \"Red\"\n        return $false\n    }\n}\n\nfunction Unregister-ScheduledTask {\n    try {\n        $taskName = \"FileServerPerformanceTest\"\n        Unregister-ScheduledTask -TaskName $taskName -Confirm:$false -ErrorAction SilentlyContinue\n        Write-Log \"[OK] Zamanlanm\u0131\u015f g&ouml;rev kald\u0131r\u0131ld\u0131\" \"Green\"\n        return $true\n    } catch {\n        Write-Log \"[ERROR] Zamanlanm\u0131\u015f g&ouml;rev kald\u0131r\u0131lamad\u0131: $($_.Exception.Message)\" \"Red\"\n        return $false\n    }\n}\n#endregion\n\n#region Helper Functions\nfunction Write-Log {\n    param([string]$Message, [string]$Color = \"Black\", [string]$TestName = \"\")\n    \n    # GUI kontrol&uuml; - e\u011fer form yoksa sadece console'a yaz\n    if ($null -eq $textBox) {\n        Write-Host $Message\n        return\n    }\n    \n    $textBox.SelectionStart = $textBox.TextLength\n    $textBox.SelectionLength = 0\n    \n    switch ($Color) {\n        \"Green\" { $textBox.SelectionColor = [System.Drawing.Color]::Green }\n        \"Red\" { $textBox.SelectionColor = [System.Drawing.Color]::Red }\n        \"Yellow\" { $textBox.SelectionColor = [System.Drawing.Color]::DarkOrange }\n        \"Cyan\" { $textBox.SelectionColor = [System.Drawing.Color]::DarkCyan }\n        default { $textBox.SelectionColor = [System.Drawing.Color]::Black }\n    }\n    \n    $textBox.AppendText(\"$Message`r`n\")\n    $textBox.ScrollToCaret()\n    $form.Refresh()\n    \n    # Her test i&ccedil;in ayr\u0131 dosya olu\u015ftur\n    if (-not [string]::IsNullOrEmpty($TestName)) {\n        $timestamp = Get-Date -Format \"yyyyMMdd_HHmmss\"\n        $script:reportFile = Join-Path $script:OutputPath \"${timestamp}_${TestName}.txt\"\n        \n        # UTF-8 BOM ile dosya olu\u015ftur\n        $utf8BOM = New-Object System.Text.UTF8Encoding $true\n        $header = \"Test: $TestName`r`nTarih: $(Get-Date)`r`nSunucu: $env:COMPUTERNAME`r`n================================================================`r`n`r`n\"\n        [System.IO.File]::WriteAllText($script:reportFile, $header, $utf8BOM)\n    }\n    \n    if ($script:reportFile -and (Test-Path $script:reportFile)) {\n        # UTF-8 BOM ile append\n        $utf8BOM = New-Object System.Text.UTF8Encoding $true\n        $currentContent = [System.IO.File]::ReadAllText($script:reportFile, $utf8BOM)\n        $newContent = $currentContent + $Message + \"`r`n\"\n        [System.IO.File]::WriteAllText($script:reportFile, $newContent, $utf8BOM)\n    }\n}\n\nfunction Enable-Controls {\n    $btnNetworkTest.Enabled = $true\n    $btnBandwidthTest.Enabled = $true\n    $btnSMBTest.Enabled = $true\n    $btnIOPSTest.Enabled = $true\n    $btnFullTest.Enabled = $true\n    $btnSystemInfo.Enabled = $true\n    $btnClearLog.Enabled = $true\n    $btnSaveReport.Enabled = $true\n    $btnSettings.Enabled = $true\n    $script:isRunning = $false\n}\n\nfunction Disable-Controls {\n    $btnNetworkTest.Enabled = $false\n    $btnBandwidthTest.Enabled = $false\n    $btnSMBTest.Enabled = $false\n    $btnIOPSTest.Enabled = $false\n    $btnFullTest.Enabled = $false\n    $btnSystemInfo.Enabled = $false\n    $btnClearLog.Enabled = $false\n    $btnSaveReport.Enabled = $false\n    $btnSettings.Enabled = $false\n    $script:isRunning = $true\n}\n#endregion\n\n#region Test Functions\nfunction Test-NetworkLatency {\n    $target = if ([string]::IsNullOrEmpty($txtServerIP.Text)) { $script:config.ServerIP } else { $txtServerIP.Text.Trim() }\n    \n    if ([string]::IsNullOrEmpty($target)) {\n        [System.Windows.Forms.MessageBox]::Show(\"L&uuml;tfen Sunucu IP adresi giriniz!\", \"Uyar\u0131\", [System.Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Warning)\n        return\n    }\n    \n    # IP adresi veya hostname validasyonu\n    $ipPattern = \"^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$\"\n    $hostnamePattern = \"^[a-zA-Z0-9]([a-zA-Z0-9\\-]{0,61}[a-zA-Z0-9])?(\\.[a-zA-Z0-9]([a-zA-Z0-9\\-]{0,61}[a-zA-Z0-9])?)*$\"\n    \n    if (-not ($target -match $ipPattern -or $target -match $hostnamePattern)) {\n        [System.Windows.Forms.MessageBox]::Show(\"Ge&ccedil;ersiz IP adresi veya hostname!`n`n&Ouml;rnekler:`n- 192.168.1.1`n- server.domain.com`n- fileserver\", \"Hata\", [System.Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Error)\n        return\n    }\n    \n    Write-Log \"\" \"\" \"AgGecikme\"\n    Write-Log \"`n================================================================\" \"Cyan\"\n    Write-Log \"1. A\u011e GEC\u0130KME TEST\u0130 (Network Latency)\" \"Cyan\"\n    Write-Log \"================================================================\" \"Cyan\"\n    Write-Log \"Ping testi yap\u0131l\u0131yor ($target)...\" \"Yellow\"\n    \n    $pingResults = Test-Connection -ComputerName $target -Count 100 -ErrorAction SilentlyContinue\n    \n    if ($pingResults) {\n        $avgLatency = ($pingResults | Measure-Object -Property ResponseTime -Average).Average\n        $minLatency = ($pingResults | Measure-Object -Property ResponseTime -Minimum).Minimum\n        $maxLatency = ($pingResults | Measure-Object -Property ResponseTime -Maximum).Maximum\n        $successCount = ($pingResults | Where-Object {$_.StatusCode -eq 0}).Count\n        $lossPercent = ((100 - $successCount) \/ 100) * 100\n        \n        Write-Log \"`nPING SONU&Ccedil;LARI:\"\n        Write-Log \"--------------\"\n        Write-Log \"Hedef: $target\"\n        Write-Log \"Paket G&ouml;nderilen: 100\"\n        Write-Log \"Ba\u015far\u0131l\u0131: $successCount\"\n        Write-Log \"Kay\u0131p: $lossPercent%\"\n        Write-Log \"Ortalama Gecikme: $([math]::Round($avgLatency, 2)) ms\"\n        Write-Log \"Minimum Gecikme: $minLatency ms\"\n        Write-Log \"Maksimum Gecikme: $maxLatency ms\"\n        Write-Log \"`nDE\u011eERLEND\u0130RME:\"\n        \n        if ($avgLatency -lt 20) {\n            Write-Log \"[OK] M&Uuml;KEMMEL: Gecikme &ccedil;ok d&uuml;\u015f&uuml;k (&lt;20ms)\" \"Green\"\n        } elseif ($avgLatency -lt 50) {\n            Write-Log \"[OK] \u0130Y\u0130: Gecikme kabul edilebilir seviyede (&lt;50ms)\" \"Green\"\n        } elseif ($avgLatency -lt 100) {\n            Write-Log \"[WARN] ORTA: Gecikme biraz y&uuml;ksek (50-100ms)\" \"Yellow\"\n        } else {\n            Write-Log \"[ERROR] K&Ouml;T&Uuml;: Y&uuml;ksek gecikme tespit edildi (&gt;100ms)\" \"Red\"\n        }\n        \n        if ($lossPercent -gt 1) {\n            Write-Log \"[ERROR] UYARI: Paket kayb\u0131 tespit edildi! (%$lossPercent)\" \"Red\"\n        }\n        \n    } else {\n        Write-Log \"[ERROR] Ping testi ba\u015far\u0131s\u0131z! Hedef sunucuya eri\u015filemiyor.\" \"Red\"\n    }\n}\n\nfunction Test-Bandwidth {\n    $target = if ([string]::IsNullOrEmpty($txtSharePath.Text)) { $script:config.SharePath } else { $txtSharePath.Text.Trim() }\n    \n    if ([string]::IsNullOrEmpty($target)) {\n        [System.Windows.Forms.MessageBox]::Show(\"L&uuml;tfen Share Path giriniz!`n`n&Ouml;rnek: \\\\192.168.1.100\\share\", \"Uyar\u0131\", [System.Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Warning)\n        return\n    }\n    \n    if (-not $target.StartsWith(\"\\\\\")) {\n        [System.Windows.Forms.MessageBox]::Show(\"Share Path UNC format\u0131nda olmal\u0131d\u0131r!`n`n&Ouml;rnek: \\\\192.168.1.100\\share\", \"Hata\", [System.Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Error)\n        return\n    }\n    \n    Write-Log \"\" \"\" \"BantGenisligi\"\n    Write-Log \"`n================================================================\" \"Cyan\"\n    Write-Log \"2. BANT GEN\u0130\u015eL\u0130\u011e\u0130 TEST\u0130 (Bandwidth)\" \"Cyan\"\n    Write-Log \"================================================================\" \"Cyan\"\n    \n    $testFile = Join-Path $script:OutputPath \"bandwidth_test_100MB.tmp\"\n    $testSize = 100MB\n    \n    Write-Log \"Test dosyas\u0131 olu\u015fturuluyor (100MB)...\" \"Yellow\"\n    $random = New-Object byte[] $testSize\n    (New-Object Random).NextBytes($random)\n    [System.IO.File]::WriteAllBytes($testFile, $random)\n    \n    Write-Log \"Dosya kopyalama testi ba\u015flat\u0131l\u0131yor...\" \"Yellow\"\n    \n    $startTime = Get-Date\n    try {\n        $destFile = Join-Path $target \"bandwidth_test_100MB.tmp\"\n        Copy-Item -Path $testFile -Destination $destFile -Force\n        $endTime = Get-Date\n        $duration = ($endTime - $startTime).TotalSeconds\n        $speedMBps = ($testSize \/ 1MB) \/ $duration\n        $speedMbps = $speedMBps * 8\n        \n        Write-Log \"`nBANT GEN\u0130\u015eL\u0130\u011e\u0130 TEST SONU&Ccedil;LARI:\"\n        Write-Log \"-----------------------------\"\n        Write-Log \"Test Dosya Boyutu: 100 MB\"\n        Write-Log \"S&uuml;re: $([math]::Round($duration, 2)) saniye\"\n        Write-Log \"Ortalama H\u0131z: $([math]::Round($speedMBps, 2)) MB\/s ($([math]::Round($speedMbps, 2)) Mbps)\"\n        Write-Log \"`nDE\u011eERLEND\u0130RME:\"\n        \n        if ($speedMbps -gt 800) {\n            Write-Log \"[OK] M&Uuml;KEMMEL: Gigabit h\u0131za yak\u0131n performans\" \"Green\"\n        } elseif ($speedMbps -gt 400) {\n            Write-Log \"[OK] \u0130Y\u0130: MPLS 500Mbps hatt\u0131 verimli kullan\u0131l\u0131yor\" \"Green\"\n        } elseif ($speedMbps -gt 80) {\n            Write-Log \"[WARN] ORTA: MPLS 100Mbps hatt\u0131 kullan\u0131l\u0131yor\" \"Yellow\"\n        } else {\n            Write-Log \"[ERROR] D&Uuml;\u015e&Uuml;K: Bant geni\u015fli\u011fi beklenenin alt\u0131nda\" \"Red\"\n        }\n        \n        Remove-Item -Path $destFile -Force -ErrorAction SilentlyContinue\n        \n    } catch {\n        Write-Log \"[ERROR] Kopyalama hatas\u0131: $($_.Exception.Message)\" \"Red\"\n    }\n    \n    Remove-Item -Path $testFile -Force -ErrorAction SilentlyContinue\n}\n\nfunction Test-SMBPerformance {\n    $sharePath = if ([string]::IsNullOrEmpty($txtSharePath.Text)) { $script:config.SharePath } else { $txtSharePath.Text.Trim() }\n    \n    if ([string]::IsNullOrEmpty($sharePath)) {\n        [System.Windows.Forms.MessageBox]::Show(\"L&uuml;tfen Share Path giriniz!\", \"Uyar\u0131\", [System.Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Warning)\n        return\n    }\n    \n    Write-Log \"\" \"\" \"SMBTest\"\n    Write-Log \"`n================================================================\" \"Cyan\"\n    Write-Log \"3. SMB BA\u011eLANTI HIZ TEST\u0130\" \"Cyan\"\n    Write-Log \"================================================================\" \"Cyan\"\n    \n    $testFolder = Join-Path $script:OutputPath \"SMBTest\"\n    if (-not (Test-Path $testFolder)) {\n        New-Item -ItemType Directory -Path $testFolder -Force | Out-Null\n    }\n    \n    $testSizes = @{\n        \"Small\" = 1MB\n        \"Medium\" = 10MB\n        \"Large\" = 50MB\n    }\n    \n    $results = @{}\n    \n    foreach ($sizeType in $testSizes.Keys) {\n        $size = $testSizes[$sizeType]\n        $count = if ($sizeType -eq \"Small\") { 100 } elseif ($sizeType -eq \"Medium\") { 10 } else { 5 }\n        \n        Write-Log \"`n$sizeType dosyalar test ediliyor ($count adet x $($size\/1MB)MB)...\" \"Yellow\"\n        \n        $files = @()\n        for ($i = 1; $i -le $count; $i++) {\n            $fileName = \"test_${sizeType}_$i.tmp\"\n            $filePath = Join-Path $testFolder $fileName\n            $random = New-Object byte[] $size\n            (New-Object Random).NextBytes($random)\n            [System.IO.File]::WriteAllBytes($filePath, $random)\n            $files += $filePath\n        }\n        \n        $startTime = Get-Date\n        try {\n            foreach ($file in $files) {\n                Copy-Item -Path $file -Destination $sharePath -Force\n            }\n            $endTime = Get-Date\n            $duration = ($endTime - $startTime).TotalSeconds\n            $totalSizeMB = ($size * $count) \/ 1MB\n            $speedMBps = $totalSizeMB \/ $duration\n            \n            $results[$sizeType] = @{\n                Count = $count\n                TotalSize = $totalSizeMB\n                Duration = $duration\n                Speed = $speedMBps\n            }\n            \n            Write-Log \"  [OK] Tamamland\u0131: $([math]::Round($speedMBps, 2)) MB\/s\" \"Green\"\n            \n            foreach ($file in $files) {\n                $fileName = Split-Path $file -Leaf\n                Remove-Item -Path \"$sharePath\\$fileName\" -Force -ErrorAction SilentlyContinue\n            }\n            \n        } catch {\n            Write-Log \"  [ERROR] Hata: $($_.Exception.Message)\" \"Red\"\n        }\n        \n        foreach ($file in $files) {\n            Remove-Item -Path $file -Force -ErrorAction SilentlyContinue\n        }\n    }\n    \n    Write-Log \"`n`nSMB PERFORMANS TEST SONU&Ccedil;LARI:\"\n    Write-Log \"-----------------------------\"\n    Write-Log \"Share Path: $sharePath`n\"\n    \n    foreach ($sizeType in $results.Keys) {\n        $r = $results[$sizeType]\n        Write-Log \"$sizeType Dosyalar:\"\n        Write-Log \"  Dosya Say\u0131s\u0131: $($r.Count) adet\"\n        Write-Log \"  Toplam Boyut: $([math]::Round($r.TotalSize, 2)) MB\"\n        Write-Log \"  S&uuml;re: $([math]::Round($r.Duration, 2)) saniye\"\n        Write-Log \"  Ortalama H\u0131z: $([math]::Round($r.Speed, 2)) MB\/s`n\"\n    }\n    \n    if ($results.Count -gt 0) {\n        Write-Log \"DE\u011eERLEND\u0130RME:\"\n        \n        # Speed de\u011ferlerini topla\n        $speedValues = @()\n        foreach ($key in $results.Keys) {\n            if ($results[$key].Speed) {\n                $speedValues += $results[$key].Speed\n            }\n        }\n        \n        if ($speedValues.Count -gt 0) {\n            $avgSpeed = ($speedValues | Measure-Object -Average).Average\n            if ($avgSpeed -gt 50) {\n                Write-Log \"[OK] M&Uuml;KEMMEL: SMB performans\u0131 &ccedil;ok iyi\" \"Green\"\n            } elseif ($avgSpeed -gt 20) {\n                Write-Log \"[OK] \u0130Y\u0130: SMB performans\u0131 kabul edilebilir\" \"Green\"\n            } else {\n                Write-Log \"[ERROR] D&Uuml;\u015e&Uuml;K: SMB performans\u0131 optimize edilmeli\" \"Red\"\n            }\n        } else {\n            Write-Log \"[ERROR] Test tamamlanamad\u0131 - Speed de\u011ferleri al\u0131namad\u0131!\" \"Red\"\n        }\n    } else {\n        Write-Log \"[ERROR] Test tamamlanamad\u0131!\" \"Red\"\n    }\n    \n    Remove-Item -Path $testFolder -Recurse -Force -ErrorAction SilentlyContinue\n}\n\nfunction Test-IOPS {\n    $testPath = if ([string]::IsNullOrEmpty($txtSharePath.Text)) { $script:config.SharePath } else { $txtSharePath.Text.Trim() }\n    \n    if ([string]::IsNullOrEmpty($testPath)) {\n        [System.Windows.Forms.MessageBox]::Show(\"L&uuml;tfen Test Path giriniz!\", \"Uyar\u0131\", [System.Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Warning)\n        return\n    }\n    \n    Write-Log \"\" \"\" \"IOPSTest\"\n    Write-Log \"`n================================================================\" \"Cyan\"\n    Write-Log \"4. IOPS (Disk Performans) TEST\u0130\" \"Cyan\"\n    Write-Log \"================================================================\" \"Cyan\"\n    Write-Log \"IOPS testi yap\u0131l\u0131yor... Bu test birka&ccedil; dakika s&uuml;rebilir...\" \"Yellow\"\n    \n    $testFolder = Join-Path $testPath \"IOPSTest\"\n    if (-not (Test-Path $testFolder)) {\n        New-Item -ItemType Directory -Path $testFolder -Force | Out-Null\n    }\n    \n    $testFile = Join-Path $testFolder \"iops_test.tmp\"\n    $fileSize = 100MB\n    $blockSize = 4KB\n    \n    Write-Log \"Test dosyas\u0131 olu\u015fturuluyor...\" \"Yellow\"\n    $random = New-Object byte[] $fileSize\n    (New-Object Random).NextBytes($random)\n    [System.IO.File]::WriteAllBytes($testFile, $random)\n    \n    Write-Log \"Random Read testi...\" \"Yellow\"\n    $readOps = 0\n    $startTime = Get-Date\n    $duration = 10\n    $fileStream = [System.IO.File]::OpenRead($testFile)\n    $buffer = New-Object byte[] $blockSize\n    \n    while (((Get-Date) - $startTime).TotalSeconds -lt $duration) {\n        $pos = Get-Random -Minimum 0 -Maximum ($fileSize - $blockSize)\n        $fileStream.Seek($pos, [System.IO.SeekOrigin]::Begin) | Out-Null\n        $fileStream.Read($buffer, 0, $blockSize) | Out-Null\n        $readOps++\n    }\n    \n    $fileStream.Close()\n    $readIOPS = [math]::Round($readOps \/ $duration, 0)\n    \n    Write-Log \"Random Write testi...\" \"Yellow\"\n    $writeOps = 0\n    $startTime = Get-Date\n    $fileStream = [System.IO.File]::OpenWrite($testFile)\n    $buffer = New-Object byte[] $blockSize\n    \n    while (((Get-Date) - $startTime).TotalSeconds -lt $duration) {\n        $pos = Get-Random -Minimum 0 -Maximum ($fileSize - $blockSize)\n        $fileStream.Seek($pos, [System.IO.SeekOrigin]::Begin) | Out-Null\n        (New-Object Random).NextBytes($buffer)\n        $fileStream.Write($buffer, 0, $blockSize)\n        $writeOps++\n    }\n    \n    $fileStream.Close()\n    $writeIOPS = [math]::Round($writeOps \/ $duration, 0)\n    \n    Write-Log \"`nIOPS TEST SONU&Ccedil;LARI:\"\n    Write-Log \"-------------------\"\n    Write-Log \"Test Path: $testPath\"\n    Write-Log \"Block Size: 4KB\"\n    Write-Log \"Test S&uuml;resi: $duration saniye\"\n    Write-Log \"Random Read IOPS: $readIOPS\"\n    Write-Log \"Random Write IOPS: $writeIOPS\"\n    Write-Log \"`nDE\u011eERLEND\u0130RME:\"\n    \n    if ($readIOPS -gt 10000) {\n        Write-Log \"[OK] M&Uuml;KEMMEL: NVMe SSD performans\u0131\" \"Green\"\n    } elseif ($readIOPS -gt 3000) {\n        Write-Log \"[OK] \u0130Y\u0130: SSD performans\u0131\" \"Green\"\n    } elseif ($readIOPS -gt 500) {\n        Write-Log \"[WARN] ORTA: SATA SSD veya y&uuml;ksek performansl\u0131 HDD\" \"Yellow\"\n    } else {\n        Write-Log \"[ERROR] D&Uuml;\u015e&Uuml;K: Geleneksel HDD performans\u0131 - SSD'ye ge&ccedil;i\u015f &ouml;nerilir\" \"Red\"\n    }\n    \n    if ($writeIOPS -lt 100 -and $testPath.StartsWith(\"\\\\\")) {\n        Write-Log \"[WARN] UYARI: Network storage &uuml;zerinde d&uuml;\u015f&uuml;k write IOPS\" \"Yellow\"\n    }\n    \n    Remove-Item -Path $testFolder -Recurse -Force -ErrorAction SilentlyContinue\n}\n\nfunction Get-SystemInfo {\n    Write-Log \"\" \"\" \"SistemBilgileri\"\n    Write-Log \"`n================================================================\" \"Cyan\"\n    Write-Log \"S\u0130STEM B\u0130LG\u0130LER\u0130\" \"Cyan\"\n    Write-Log \"================================================================\" \"Cyan\"\n    \n    $cpu = Get-WmiObject Win32_Processor | Select-Object -First 1\n    $ram = Get-WmiObject Win32_ComputerSystem\n    $disk = Get-WmiObject Win32_LogicalDisk -Filter \"DeviceID='C:'\"\n    $network = Get-NetAdapter | Where-Object {$_.Status -eq \"Up\"}\n    \n    Write-Log \"`nSunucu: $env:COMPUTERNAME\" \"Cyan\"\n    Write-Log \"\u0130\u015fletim Sistemi: $((Get-WmiObject Win32_OperatingSystem).Caption)\" \"Cyan\"\n    Write-Log \"Processor: $($cpu.Name)\" \"Cyan\"\n    Write-Log \"CPU &Ccedil;ekirdek: $($cpu.NumberOfCores)\" \"Cyan\"\n    Write-Log \"RAM: $([math]::Round($ram.TotalPhysicalMemory\/1GB, 2)) GB\" \"Cyan\"\n    Write-Log \"C: Disk Bo\u015f Alan: $([math]::Round($disk.FreeSpace\/1GB, 2)) GB \/ $([math]::Round($disk.Size\/1GB, 2)) GB\" \"Cyan\"\n    Write-Log \"`nAktif Network Adapt&ouml;rleri:\" \"Cyan\"\n    \n    foreach ($adapter in $network) {\n        Write-Log \"  - $($adapter.Name): $($adapter.LinkSpeed)\" \"Cyan\"\n    }\n}\n#endregion\n\n#region Settings Form\nfunction Show-SettingsForm {\n    $settingsForm = New-Object System.Windows.Forms.Form\n    $settingsForm.Text = \"Ayarlar\"\n    $settingsForm.Size = New-Object System.Drawing.Size(600, 650)\n    $settingsForm.StartPosition = \"CenterParent\"\n    $settingsForm.FormBorderStyle = \"FixedDialog\"\n    $settingsForm.MaximizeBox = $false\n    $settingsForm.MinimizeBox = $false\n    \n    $yPos = 20\n    \n    # Test Parametreleri\n    $grpTest = New-Object System.Windows.Forms.GroupBox\n    $grpTest.Location = New-Object System.Drawing.Point(10, $yPos)\n    $grpTest.Size = New-Object System.Drawing.Size(560, 100)\n    $grpTest.Text = \"Test Parametreleri\"\n    $settingsForm.Controls.Add($grpTest)\n    \n    $lblServerIP = New-Object System.Windows.Forms.Label\n    $lblServerIP.Location = New-Object System.Drawing.Point(10, 25)\n    $lblServerIP.Size = New-Object System.Drawing.Size(120, 20)\n    $lblServerIP.Text = \"Sunucu IP:\"\n    $grpTest.Controls.Add($lblServerIP)\n    \n    $txtSettingsServerIP = New-Object System.Windows.Forms.TextBox\n    $txtSettingsServerIP.Location = New-Object System.Drawing.Point(140, 23)\n    $txtSettingsServerIP.Size = New-Object System.Drawing.Size(400, 20)\n    $txtSettingsServerIP.Text = $script:config.ServerIP\n    $grpTest.Controls.Add($txtSettingsServerIP)\n    \n    $lblSharePath = New-Object System.Windows.Forms.Label\n    $lblSharePath.Location = New-Object System.Drawing.Point(10, 55)\n    $lblSharePath.Size = New-Object System.Drawing.Size(120, 20)\n    $lblSharePath.Text = \"Share Path:\"\n    $grpTest.Controls.Add($lblSharePath)\n    \n    $txtSettingsSharePath = New-Object System.Windows.Forms.TextBox\n    $txtSettingsSharePath.Location = New-Object System.Drawing.Point(140, 53)\n    $txtSettingsSharePath.Size = New-Object System.Drawing.Size(400, 20)\n    $txtSettingsSharePath.Text = $script:config.SharePath\n    $grpTest.Controls.Add($txtSettingsSharePath)\n    \n    $yPos += 120\n    \n    # Email Ayarlar\u0131\n    $grpEmail = New-Object System.Windows.Forms.GroupBox\n    $grpEmail.Location = New-Object System.Drawing.Point(10, $yPos)\n    $grpEmail.Size = New-Object System.Drawing.Size(560, 240)\n    $grpEmail.Text = \"Email Ayarlar\u0131\"\n    $settingsForm.Controls.Add($grpEmail)\n    \n    $chkEmailEnabled = New-Object System.Windows.Forms.CheckBox\n    $chkEmailEnabled.Location = New-Object System.Drawing.Point(10, 25)\n    $chkEmailEnabled.Size = New-Object System.Drawing.Size(200, 20)\n    $chkEmailEnabled.Text = \"Email G&ouml;nderimi Aktif\"\n    $chkEmailEnabled.Checked = $script:config.EmailEnabled\n    $grpEmail.Controls.Add($chkEmailEnabled)\n    \n    $lblSMTPServer = New-Object System.Windows.Forms.Label\n    $lblSMTPServer.Location = New-Object System.Drawing.Point(10, 55)\n    $lblSMTPServer.Size = New-Object System.Drawing.Size(120, 20)\n    $lblSMTPServer.Text = \"SMTP Server:\"\n    $grpEmail.Controls.Add($lblSMTPServer)\n    \n    $txtSMTPServer = New-Object System.Windows.Forms.TextBox\n    $txtSMTPServer.Location = New-Object System.Drawing.Point(140, 53)\n    $txtSMTPServer.Size = New-Object System.Drawing.Size(300, 20)\n    $txtSMTPServer.Text = $script:config.SMTPServer\n    $grpEmail.Controls.Add($txtSMTPServer)\n    \n    $lblSMTPPort = New-Object System.Windows.Forms.Label\n    $lblSMTPPort.Location = New-Object System.Drawing.Point(450, 55)\n    $lblSMTPPort.Size = New-Object System.Drawing.Size(40, 20)\n    $lblSMTPPort.Text = \"Port:\"\n    $grpEmail.Controls.Add($lblSMTPPort)\n    \n    $txtSMTPPort = New-Object System.Windows.Forms.TextBox\n    $txtSMTPPort.Location = New-Object System.Drawing.Point(490, 53)\n    $txtSMTPPort.Size = New-Object System.Drawing.Size(50, 20)\n    $txtSMTPPort.Text = $script:config.SMTPPort\n    $grpEmail.Controls.Add($txtSMTPPort)\n    \n    $lblSMTPUsername = New-Object System.Windows.Forms.Label\n    $lblSMTPUsername.Location = New-Object System.Drawing.Point(10, 85)\n    $lblSMTPUsername.Size = New-Object System.Drawing.Size(120, 20)\n    $lblSMTPUsername.Text = \"Kullan\u0131c\u0131 Ad\u0131:\"\n    $grpEmail.Controls.Add($lblSMTPUsername)\n    \n    $txtSMTPUsername = New-Object System.Windows.Forms.TextBox\n    $txtSMTPUsername.Location = New-Object System.Drawing.Point(140, 83)\n    $txtSMTPUsername.Size = New-Object System.Drawing.Size(400, 20)\n    $txtSMTPUsername.Text = $script:config.SMTPUsername\n    $grpEmail.Controls.Add($txtSMTPUsername)\n    \n    $lblSMTPPassword = New-Object System.Windows.Forms.Label\n    $lblSMTPPassword.Location = New-Object System.Drawing.Point(10, 115)\n    $lblSMTPPassword.Size = New-Object System.Drawing.Size(120, 20)\n    $lblSMTPPassword.Text = \"\u015eifre:\"\n    $grpEmail.Controls.Add($lblSMTPPassword)\n    \n    $txtSMTPPassword = New-Object System.Windows.Forms.TextBox\n    $txtSMTPPassword.Location = New-Object System.Drawing.Point(140, 113)\n    $txtSMTPPassword.Size = New-Object System.Drawing.Size(400, 20)\n    $txtSMTPPassword.Text = $script:config.SMTPPassword\n    $txtSMTPPassword.PasswordChar = '*'\n    $grpEmail.Controls.Add($txtSMTPPassword)\n    \n    $lblSMTPFrom = New-Object System.Windows.Forms.Label\n    $lblSMTPFrom.Location = New-Object System.Drawing.Point(10, 145)\n    $lblSMTPFrom.Size = New-Object System.Drawing.Size(120, 20)\n    $lblSMTPFrom.Text = \"G&ouml;nderen Email:\"\n    $grpEmail.Controls.Add($lblSMTPFrom)\n    \n    $txtSMTPFrom = New-Object System.Windows.Forms.TextBox\n    $txtSMTPFrom.Location = New-Object System.Drawing.Point(140, 143)\n    $txtSMTPFrom.Size = New-Object System.Drawing.Size(400, 20)\n    $txtSMTPFrom.Text = $script:config.SMTPFrom\n    $grpEmail.Controls.Add($txtSMTPFrom)\n    \n    $lblSMTPTo = New-Object System.Windows.Forms.Label\n    $lblSMTPTo.Location = New-Object System.Drawing.Point(10, 175)\n    $lblSMTPTo.Size = New-Object System.Drawing.Size(120, 20)\n    $lblSMTPTo.Text = \"Al\u0131c\u0131 Email:\"\n    $grpEmail.Controls.Add($lblSMTPTo)\n    \n    $txtSMTPTo = New-Object System.Windows.Forms.TextBox\n    $txtSMTPTo.Location = New-Object System.Drawing.Point(140, 173)\n    $txtSMTPTo.Size = New-Object System.Drawing.Size(400, 20)\n    $txtSMTPTo.Text = $script:config.SMTPTo\n    $grpEmail.Controls.Add($txtSMTPTo)\n    \n    $chkSMTPUseSSL = New-Object System.Windows.Forms.CheckBox\n    $chkSMTPUseSSL.Location = New-Object System.Drawing.Point(10, 205)\n    $chkSMTPUseSSL.Size = New-Object System.Drawing.Size(200, 20)\n    $chkSMTPUseSSL.Text = \"SSL Kullan\"\n    $chkSMTPUseSSL.Checked = $script:config.SMTPUseSSL\n    $grpEmail.Controls.Add($chkSMTPUseSSL)\n    \n    $yPos += 260\n    \n    # Zamanlay\u0131c\u0131 Ayarlar\u0131\n    $grpSchedule = New-Object System.Windows.Forms.GroupBox\n    $grpSchedule.Location = New-Object System.Drawing.Point(10, $yPos)\n    $grpSchedule.Size = New-Object System.Drawing.Size(560, 100)\n    $grpSchedule.Text = \"Otomatik G&ouml;rev Zamanlay\u0131c\u0131\"\n    $settingsForm.Controls.Add($grpSchedule)\n    \n    $chkScheduleEnabled = New-Object System.Windows.Forms.CheckBox\n    $chkScheduleEnabled.Location = New-Object System.Drawing.Point(10, 25)\n    $chkScheduleEnabled.Size = New-Object System.Drawing.Size(200, 20)\n    $chkScheduleEnabled.Text = \"Otomatik Test Aktif\"\n    $chkScheduleEnabled.Checked = $script:config.ScheduleEnabled\n    $grpSchedule.Controls.Add($chkScheduleEnabled)\n    \n    $lblInterval = New-Object System.Windows.Forms.Label\n    $lblInterval.Location = New-Object System.Drawing.Point(10, 55)\n    $lblInterval.Size = New-Object System.Drawing.Size(120, 20)\n    $lblInterval.Text = \"Test Aral\u0131\u011f\u0131 (dk):\"\n    $grpSchedule.Controls.Add($lblInterval)\n    \n    $txtInterval = New-Object System.Windows.Forms.NumericUpDown\n    $txtInterval.Location = New-Object System.Drawing.Point(140, 53)\n    $txtInterval.Size = New-Object System.Drawing.Size(100, 20)\n    $txtInterval.Minimum = 5\n    $txtInterval.Maximum = 1440\n    $txtInterval.Value = $script:config.ScheduleInterval\n    $grpSchedule.Controls.Add($txtInterval)\n    \n    $lblIntervalInfo = New-Object System.Windows.Forms.Label\n    $lblIntervalInfo.Location = New-Object System.Drawing.Point(250, 55)\n    $lblIntervalInfo.Size = New-Object System.Drawing.Size(290, 20)\n    $lblIntervalInfo.Text = \"(5-1440 dakika aras\u0131, &ouml;nerilen: 60)\"\n    $lblIntervalInfo.ForeColor = [System.Drawing.Color]::Gray\n    $grpSchedule.Controls.Add($lblIntervalInfo)\n    \n    $yPos += 120\n    \n    # Butonlar\n    $btnSave = New-Object System.Windows.Forms.Button\n    $btnSave.Location = New-Object System.Drawing.Point(350, $yPos)\n    $btnSave.Size = New-Object System.Drawing.Size(100, 30)\n    $btnSave.Text = \"Kaydet\"\n    $btnSave.BackColor = [System.Drawing.Color]::LightGreen\n    $btnSave.DialogResult = [System.Windows.Forms.DialogResult]::OK\n    $settingsForm.Controls.Add($btnSave)\n    \n    $btnCancel = New-Object System.Windows.Forms.Button\n    $btnCancel.Location = New-Object System.Drawing.Point(460, $yPos)\n    $btnCancel.Size = New-Object System.Drawing.Size(100, 30)\n    $btnCancel.Text = \"\u0130ptal\"\n    $btnCancel.BackColor = [System.Drawing.Color]::LightCoral\n    $btnCancel.DialogResult = [System.Windows.Forms.DialogResult]::Cancel\n    $settingsForm.Controls.Add($btnCancel)\n    \n    $btnSave.Add_Click({\n        # Ayarlar\u0131 kaydet\n        $script:config.ServerIP = $txtSettingsServerIP.Text.Trim()\n        $script:config.SharePath = $txtSettingsSharePath.Text.Trim()\n        $script:config.EmailEnabled = $chkEmailEnabled.Checked\n        $script:config.SMTPServer = $txtSMTPServer.Text.Trim()\n        $script:config.SMTPPort = [int]$txtSMTPPort.Text\n        $script:config.SMTPUsername = $txtSMTPUsername.Text.Trim()\n        $script:config.SMTPPassword = $txtSMTPPassword.Text\n        $script:config.SMTPFrom = $txtSMTPFrom.Text.Trim()\n        $script:config.SMTPTo = $txtSMTPTo.Text.Trim()\n        $script:config.SMTPUseSSL = $chkSMTPUseSSL.Checked\n        \n        $oldScheduleEnabled = $script:config.ScheduleEnabled\n        $script:config.ScheduleEnabled = $chkScheduleEnabled.Checked\n        $script:config.ScheduleInterval = [int]$txtInterval.Value\n        \n        if (Save-Config) {\n            # Zamanlay\u0131c\u0131 ayarlar\u0131n\u0131 uygula\n            if ($script:config.ScheduleEnabled -and -not $oldScheduleEnabled) {\n                Register-ScheduledTask -IntervalMinutes $script:config.ScheduleInterval\n            } elseif (-not $script:config.ScheduleEnabled -and $oldScheduleEnabled) {\n                Unregister-ScheduledTask\n            } elseif ($script:config.ScheduleEnabled) {\n                Register-ScheduledTask -IntervalMinutes $script:config.ScheduleInterval\n            }\n            \n            # Ana formdaki textbox'lar\u0131 g&uuml;ncelle\n            $txtServerIP.Text = $script:config.ServerIP\n            $txtSharePath.Text = $script:config.SharePath\n            \n            [System.Windows.Forms.MessageBox]::Show(\"Ayarlar ba\u015far\u0131yla kaydedildi!\", \"Bilgi\", [System.Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Information)\n        }\n    })\n    \n    $settingsForm.AcceptButton = $btnSave\n    $settingsForm.CancelButton = $btnCancel\n    \n    [void]$settingsForm.ShowDialog()\n}\n#endregion\n\n#region Main GUI\n# Load configuration\nLoad-Config\n\nif ($AutoRun) {\n    # Otomatik &ccedil;al\u0131\u015ft\u0131rma modu - GUI olmadan\n    Write-Host \"Otomatik test ba\u015flat\u0131l\u0131yor...\" -ForegroundColor Green\n    \n    $timestamp = Get-Date -Format \"yyyyMMdd_HHmmss\"\n    $script:reportFile = Join-Path $script:OutputPath \"${timestamp}_OtomatikTest.txt\"\n    \n    $utf8BOM = New-Object System.Text.UTF8Encoding $true\n    $header = \"Test: OTOMAT\u0130K TEST`r`nTarih: $(Get-Date)`r`nSunucu: $env:COMPUTERNAME`r`n================================================================`r`n`r`n\"\n    [System.IO.File]::WriteAllText($script:reportFile, $header, $utf8BOM)\n    \n    # Testleri &ccedil;al\u0131\u015ft\u0131r\n    if ($script:config.ScheduleTests -contains \"Network\") {\n        Write-Host \"A\u011f Gecikme Testi...\" -ForegroundColor Yellow\n        Test-NetworkLatency\n    }\n    \n    if ($script:config.ScheduleTests -contains \"Bandwidth\") {\n        Write-Host \"Bant Geni\u015fli\u011fi Testi...\" -ForegroundColor Yellow\n        Test-Bandwidth\n    }\n    \n    if ($script:config.ScheduleTests -contains \"SMB\") {\n        Write-Host \"SMB Testi...\" -ForegroundColor Yellow\n        Test-SMBPerformance\n    }\n    \n    if ($script:config.ScheduleTests -contains \"IOPS\") {\n        Write-Host \"IOPS Testi...\" -ForegroundColor Yellow\n        Test-IOPS\n    }\n    \n    # Email g&ouml;nder\n    if ($script:config.EmailEnabled) {\n        Send-EmailReport -ReportFile $script:reportFile\n    }\n    \n    Write-Host \"Otomatik test tamamland\u0131!\" -ForegroundColor Green\n    exit 0\n}\n\n# GUI Mode\n$form = New-Object System.Windows.Forms.Form\n$form.Text = \"File Server Performance Test Tool v2.0\"\n$form.Size = New-Object System.Drawing.Size(900, 750)\n$form.StartPosition = \"CenterScreen\"\n$form.FormBorderStyle = \"FixedDialog\"\n$form.MaximizeBox = $false\n\n# Title Label\n$lblTitle = New-Object System.Windows.Forms.Label\n$lblTitle.Location = New-Object System.Drawing.Point(10, 10)\n$lblTitle.Size = New-Object System.Drawing.Size(860, 30)\n$lblTitle.Text = \"FILE SERVER PERFORMANCE TEST TOOL v2.0 - Advanced Edition\"\n$lblTitle.Font = New-Object System.Drawing.Font(\"Arial\", 12, [System.Drawing.FontStyle]::Bold)\n$lblTitle.ForeColor = [System.Drawing.Color]::DarkBlue\n$lblTitle.TextAlign = \"MiddleCenter\"\n$form.Controls.Add($lblTitle)\n\n# Input Group\n$groupInput = New-Object System.Windows.Forms.GroupBox\n$groupInput.Location = New-Object System.Drawing.Point(10, 50)\n$groupInput.Size = New-Object System.Drawing.Size(860, 80)\n$groupInput.Text = \"Test Parametreleri\"\n$form.Controls.Add($groupInput)\n\n# Server IP Label\n$lblServerIP = New-Object System.Windows.Forms.Label\n$lblServerIP.Location = New-Object System.Drawing.Point(10, 25)\n$lblServerIP.Size = New-Object System.Drawing.Size(100, 20)\n$lblServerIP.Text = \"Sunucu IP:\"\n$groupInput.Controls.Add($lblServerIP)\n\n# Server IP TextBox\n$txtServerIP = New-Object System.Windows.Forms.TextBox\n$txtServerIP.Location = New-Object System.Drawing.Point(120, 23)\n$txtServerIP.Size = New-Object System.Drawing.Size(300, 20)\n$txtServerIP.Text = $script:config.ServerIP\n$groupInput.Controls.Add($txtServerIP)\n\n# Share Path Label\n$lblSharePath = New-Object System.Windows.Forms.Label\n$lblSharePath.Location = New-Object System.Drawing.Point(10, 50)\n$lblSharePath.Size = New-Object System.Drawing.Size(100, 20)\n$lblSharePath.Text = \"Share Path:\"\n$groupInput.Controls.Add($lblSharePath)\n\n# Share Path TextBox\n$txtSharePath = New-Object System.Windows.Forms.TextBox\n$txtSharePath.Location = New-Object System.Drawing.Point(120, 48)\n$txtSharePath.Size = New-Object System.Drawing.Size(300, 20)\n$txtSharePath.Text = $script:config.SharePath\n$groupInput.Controls.Add($txtSharePath)\n\n# Settings Button\n$btnSettings = New-Object System.Windows.Forms.Button\n$btnSettings.Location = New-Object System.Drawing.Point(440, 23)\n$btnSettings.Size = New-Object System.Drawing.Size(130, 45)\n$btnSettings.Text = \"\u2699 Ayarlar\"\n$btnSettings.BackColor = [System.Drawing.Color]::LightSteelBlue\n$btnSettings.Font = New-Object System.Drawing.Font(\"Arial\", 10, [System.Drawing.FontStyle]::Bold)\n$groupInput.Controls.Add($btnSettings)\n\n# Status Label\n$lblStatus = New-Object System.Windows.Forms.Label\n$lblStatus.Location = New-Object System.Drawing.Point(590, 25)\n$lblStatus.Size = New-Object System.Drawing.Size(250, 45)\n$lblStatus.Text = \"Email: \" + $(if ($script:config.EmailEnabled) { \"Aktif \u2713\" } else { \"Pasif \u2717\" }) + \"`nZamanlay\u0131c\u0131: \" + $(if ($script:config.ScheduleEnabled) { \"Aktif \u2713\" } else { \"Pasif \u2717\" })\n$lblStatus.ForeColor = [System.Drawing.Color]::DarkGreen\n$groupInput.Controls.Add($lblStatus)\n\n# Test Buttons Group\n$groupTests = New-Object System.Windows.Forms.GroupBox\n$groupTests.Location = New-Object System.Drawing.Point(10, 140)\n$groupTests.Size = New-Object System.Drawing.Size(860, 100)\n$groupTests.Text = \"Test \u0130\u015flemleri\"\n$form.Controls.Add($groupTests)\n\n# Network Test Button\n$btnNetworkTest = New-Object System.Windows.Forms.Button\n$btnNetworkTest.Location = New-Object System.Drawing.Point(10, 25)\n$btnNetworkTest.Size = New-Object System.Drawing.Size(130, 30)\n$btnNetworkTest.Text = \"A\u011f Gecikme Testi\"\n$btnNetworkTest.BackColor = [System.Drawing.Color]::LightBlue\n$groupTests.Controls.Add($btnNetworkTest)\n\n# Bandwidth Test Button\n$btnBandwidthTest = New-Object System.Windows.Forms.Button\n$btnBandwidthTest.Location = New-Object System.Drawing.Point(150, 25)\n$btnBandwidthTest.Size = New-Object System.Drawing.Size(130, 30)\n$btnBandwidthTest.Text = \"Bant Geni\u015fli\u011fi Testi\"\n$btnBandwidthTest.BackColor = [System.Drawing.Color]::LightBlue\n$groupTests.Controls.Add($btnBandwidthTest)\n\n# SMB Test Button\n$btnSMBTest = New-Object System.Windows.Forms.Button\n$btnSMBTest.Location = New-Object System.Drawing.Point(290, 25)\n$btnSMBTest.Size = New-Object System.Drawing.Size(130, 30)\n$btnSMBTest.Text = \"SMB H\u0131z Testi\"\n$btnSMBTest.BackColor = [System.Drawing.Color]::LightBlue\n$groupTests.Controls.Add($btnSMBTest)\n\n# IOPS Test Button\n$btnIOPSTest = New-Object System.Windows.Forms.Button\n$btnIOPSTest.Location = New-Object System.Drawing.Point(430, 25)\n$btnIOPSTest.Size = New-Object System.Drawing.Size(130, 30)\n$btnIOPSTest.Text = \"IOPS Testi\"\n$btnIOPSTest.BackColor = [System.Drawing.Color]::LightBlue\n$groupTests.Controls.Add($btnIOPSTest)\n\n# Full Test Button\n$btnFullTest = New-Object System.Windows.Forms.Button\n$btnFullTest.Location = New-Object System.Drawing.Point(570, 25)\n$btnFullTest.Size = New-Object System.Drawing.Size(130, 30)\n$btnFullTest.Text = \"T&Uuml;M TESTLER\"\n$btnFullTest.BackColor = [System.Drawing.Color]::LightGreen\n$btnFullTest.Font = New-Object System.Drawing.Font(\"Arial\", 9, [System.Drawing.FontStyle]::Bold)\n$groupTests.Controls.Add($btnFullTest)\n\n# System Info Button\n$btnSystemInfo = New-Object System.Windows.Forms.Button\n$btnSystemInfo.Location = New-Object System.Drawing.Point(710, 25)\n$btnSystemInfo.Size = New-Object System.Drawing.Size(130, 30)\n$btnSystemInfo.Text = \"Sistem Bilgileri\"\n$btnSystemInfo.BackColor = [System.Drawing.Color]::LightYellow\n$groupTests.Controls.Add($btnSystemInfo)\n\n# Clear Log Button\n$btnClearLog = New-Object System.Windows.Forms.Button\n$btnClearLog.Location = New-Object System.Drawing.Point(10, 60)\n$btnClearLog.Size = New-Object System.Drawing.Size(130, 30)\n$btnClearLog.Text = \"Logu Temizle\"\n$btnClearLog.BackColor = [System.Drawing.Color]::LightGray\n$groupTests.Controls.Add($btnClearLog)\n\n# Save Report Button\n$btnSaveReport = New-Object System.Windows.Forms.Button\n$btnSaveReport.Location = New-Object System.Drawing.Point(150, 60)\n$btnSaveReport.Size = New-Object System.Drawing.Size(130, 30)\n$btnSaveReport.Text = \"Raporu A&ccedil;\"\n$btnSaveReport.BackColor = [System.Drawing.Color]::LightCoral\n$groupTests.Controls.Add($btnSaveReport)\n\n# Progress Bar\n$progressBar = New-Object System.Windows.Forms.ProgressBar\n$progressBar.Location = New-Object System.Drawing.Point(290, 65)\n$progressBar.Size = New-Object System.Drawing.Size(550, 20)\n$progressBar.Style = \"Marquee\"\n$progressBar.MarqueeAnimationSpeed = 30\n$progressBar.Visible = $false\n$groupTests.Controls.Add($progressBar)\n\n# Output TextBox\n$textBox = New-Object System.Windows.Forms.RichTextBox\n$textBox.Location = New-Object System.Drawing.Point(10, 250)\n$textBox.Size = New-Object System.Drawing.Size(860, 440)\n$textBox.Multiline = $true\n$textBox.ScrollBars = \"Vertical\"\n$textBox.Font = New-Object System.Drawing.Font(\"Consolas\", 9)\n$textBox.ReadOnly = $true\n$textBox.BackColor = [System.Drawing.Color]::White\n$form.Controls.Add($textBox)\n\nWrite-Log \"FILE SERVER PERFORMANCE TEST TOOL v2.0 - Advanced Edition\" \"Green\"\nWrite-Log \"========================================================`n\" \"Green\"\nWrite-Log \"Ho\u015fgeldiniz! L&uuml;tfen test parametrelerini girin ve test butonlar\u0131na t\u0131klay\u0131n.`n\"\nWrite-Log \"Ayarlar butonundan email ve zamanlay\u0131c\u0131 ayarlar\u0131n\u0131 yapabilirsiniz.`n\" \"Yellow\"\nWrite-Log \"Raporlar: $($script:OutputPath)`n\" \"Cyan\"\n\n#region Event Handlers\n$btnSettings.Add_Click({\n    Show-SettingsForm\n    # Status label'\u0131 g&uuml;ncelle\n    $lblStatus.Text = \"Email: \" + $(if ($script:config.EmailEnabled) { \"Aktif \u2713\" } else { \"Pasif \u2717\" }) + \"`nZamanlay\u0131c\u0131: \" + $(if ($script:config.ScheduleEnabled) { \"Aktif \u2713\" } else { \"Pasif \u2717\" })\n})\n\n$btnNetworkTest.Add_Click({\n    if (-not $script:isRunning) {\n        Disable-Controls\n        $progressBar.Visible = $true\n        Test-NetworkLatency\n        if ($script:config.EmailEnabled -and -not [string]::IsNullOrEmpty($script:reportFile) -and (Test-Path $script:reportFile)) {\n            Send-EmailReport -ReportFile $script:reportFile\n        }\n        $progressBar.Visible = $false\n        Enable-Controls\n    }\n})\n\n$btnBandwidthTest.Add_Click({\n    if (-not $script:isRunning) {\n        Disable-Controls\n        $progressBar.Visible = $true\n        Test-Bandwidth\n        if ($script:config.EmailEnabled -and -not [string]::IsNullOrEmpty($script:reportFile) -and (Test-Path $script:reportFile)) {\n            Send-EmailReport -ReportFile $script:reportFile\n        }\n        $progressBar.Visible = $false\n        Enable-Controls\n    }\n})\n\n$btnSMBTest.Add_Click({\n    if (-not $script:isRunning) {\n        Disable-Controls\n        $progressBar.Visible = $true\n        Test-SMBPerformance\n        if ($script:config.EmailEnabled -and -not [string]::IsNullOrEmpty($script:reportFile) -and (Test-Path $script:reportFile)) {\n            Send-EmailReport -ReportFile $script:reportFile\n        }\n        $progressBar.Visible = $false\n        Enable-Controls\n    }\n})\n\n$btnIOPSTest.Add_Click({\n    if (-not $script:isRunning) {\n        Disable-Controls\n        $progressBar.Visible = $true\n        Test-IOPS\n        if ($script:config.EmailEnabled -and -not [string]::IsNullOrEmpty($script:reportFile) -and (Test-Path $script:reportFile)) {\n            Send-EmailReport -ReportFile $script:reportFile\n        }\n        $progressBar.Visible = $false\n        Enable-Controls\n    }\n})\n\n$btnFullTest.Add_Click({\n    if (-not $script:isRunning) {\n        Disable-Controls\n        $progressBar.Visible = $true\n        \n        # T&uuml;m testler i&ccedil;in tek bir dosya olu\u015ftur - UTF-8 BOM ile\n        $timestamp = Get-Date -Format \"yyyyMMdd_HHmmss\"\n        $script:reportFile = Join-Path $script:OutputPath \"${timestamp}_TumTestler.txt\"\n        \n        $utf8BOM = New-Object System.Text.UTF8Encoding $true\n        $header = \"Test: T&Uuml;M TESTLER`r`nTarih: $(Get-Date)`r`nSunucu: $env:COMPUTERNAME`r`n================================================================`r`n`r`n\"\n        [System.IO.File]::WriteAllText($script:reportFile, $header, $utf8BOM)\n        \n        Get-SystemInfo\n        Test-NetworkLatency\n        Test-Bandwidth\n        Test-SMBPerformance\n        Test-IOPS\n        Write-Log \"`n[OK] T&uuml;m testler tamamland\u0131!\" \"Green\"\n        Write-Log \"Rapor: $script:reportFile\" \"Cyan\"\n        \n        if ($script:config.EmailEnabled -and -not [string]::IsNullOrEmpty($script:reportFile) -and (Test-Path $script:reportFile)) {\n            Send-EmailReport -ReportFile $script:reportFile\n        }\n        \n        $progressBar.Visible = $false\n        Enable-Controls\n    }\n})\n\n$btnSystemInfo.Add_Click({\n    if (-not $script:isRunning) {\n        Disable-Controls\n        Get-SystemInfo\n        Enable-Controls\n    }\n})\n\n$btnClearLog.Add_Click({\n    $textBox.Clear()\n    Write-Log \"Log temizlendi.`n\" \"Yellow\"\n})\n\n$btnSaveReport.Add_Click({\n    if (-not [string]::IsNullOrEmpty($script:reportFile) -and (Test-Path $script:reportFile)) {\n        Start-Process notepad $script:reportFile\n    } else {\n        # Son olu\u015fturulan raporu bul\n        $latestReport = Get-ChildItem -Path $script:OutputPath -Filter \"*.txt\" -ErrorAction SilentlyContinue | Sort-Object LastWriteTime -Descending | Select-Object -First 1\n        if ($latestReport) {\n            Start-Process notepad $latestReport.FullName\n        } else {\n            [System.Windows.Forms.MessageBox]::Show(\"Hen&uuml;z bir rapor olu\u015fturulmad\u0131!\", \"Bilgi\", [System.Windows.Forms.MessageBoxButtons]::OK, [System.Windows.Forms.MessageBoxIcon]::Information)\n        }\n    }\n})\n\n$form.Add_FormClosing({\n    $result = [System.Windows.Forms.MessageBox]::Show(\"Programdan &ccedil;\u0131kmak istedi\u011finize emin misiniz?\", \"&Ccedil;\u0131k\u0131\u015f\", [System.Windows.Forms.MessageBoxButtons]::YesNo, [System.Windows.Forms.MessageBoxIcon]::Question)\n    if ($result -eq [System.Windows.Forms.DialogResult]::No) {\n        $_.Cancel = $true\n    }\n})\n#endregion\n\n# Show Form\n[void]$form.ShowDialog()\n<\/code><\/pre>","excerpt":"\u00a0File Server Performance Test Tool v2.0 ile sunucunuzun performans\u0131n\u0131 test edin","created_at":"2026-01-13 15:46:08","updated_at":"2026-09-07 01:15:46","category_id":9,"view_count":521,"reading_time":27,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2026-01-14 16:51:41","featured_image":"\/uploads\/images\/2026\/01\/6967c9993826c_1768409497.png","slug":"file-server-performance-test-tool-v2-0","category_name":"Yaz\u0131l\u0131m","category_slug":"yazilim","category_color":"#ef4444"},{"id":367,"title":"Network Shares Denetimini Hafife Almay\u0131n","content":"<p>Kurumsal a\u011flarda g&uuml;venlik a&ccedil;\u0131klar\u0131 denildi\u011finde akla genellikle&nbsp;<strong>zararl\u0131 yaz\u0131l\u0131mlar, zay\u0131f parolalar veya g&uuml;ncel olmayan sistemler<\/strong> gelir.<br>Ancak pratikte en s\u0131k kar\u015f\u0131la\u015f\u0131lan &mdash; ve en &ccedil;ok g&ouml;zden ka&ccedil;an &mdash; risklerden biri <strong>a&ccedil;\u0131k unutulmu\u015f network payla\u015f\u0131mlar\u0131d\u0131r<\/strong>.<\/p>\n<p><iframe style=\"width: 674px; height: 379px;\" src=\"https:\/\/www.youtube.com\/embed\/uFDepQ-aC4M\" width=\"674\" height=\"379\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\n<p>Bir dosya transferi i&ccedil;in ge&ccedil;ici olarak a&ccedil;\u0131lan bir klas&ouml;r,<br>bir departmana &ldquo;\u015fimdilik&rdquo; verilen eri\u015fim,<br>ya da test ama&ccedil;l\u0131 payla\u015f\u0131ma a&ccedil;\u0131lan bir dizin&hellip;<\/p>\n<p>Bunlar\u0131n her biri, fark edilmeden <strong>aylarca hatta y\u0131llarca sessiz bir a&ccedil;\u0131k kap\u0131<\/strong> h&acirc;line gelebilir.<\/p>\n<p>Bir IT y&ouml;neticisi i&ccedil;in sorulmas\u0131 gereken kritik soru \u015fudur:<\/p>\n<blockquote>\n<p><strong>&ldquo;A\u011f\u0131mda \u015fu anda kim, neyi, neden payla\u015f\u0131yor?&rdquo;<\/strong><\/p>\n<\/blockquote>\n<p>Bu soruya net ve h\u0131zl\u0131 bir cevap veremiyorsan\u0131z,<br>orada <strong>y&ouml;netilmeyen bir risk<\/strong> vard\u0131r.<\/p>\n<p>Kurumsal siber g&uuml;venlik stratejilerinde a\u011f payla\u015f\u0131mlar\u0131 (network shares), genellikle zararl\u0131 yaz\u0131l\u0131mlar veya zay\u0131f parolalar kadar dikkat &ccedil;ekmese de asl\u0131nda <strong>en s\u0131k kar\u015f\u0131la\u015f\u0131lan ve en &ccedil;ok g&ouml;zden ka&ccedil;an<\/strong> risk alanlar\u0131ndan biridir. Bir dosya transferi i&ccedil;in ge&ccedil;ici a&ccedil;\u0131lan klas&ouml;rler veya test ama&ccedil;l\u0131 payla\u015f\u0131lan dizinler, aylar hatta y\u0131llar boyunca <strong>\"sessiz bir a&ccedil;\u0131k kap\u0131\"<\/strong> olarak kalabilmektedir.<\/p>\n<p>A\u011f payla\u015f\u0131mlar\u0131n\u0131n kurumsal g&uuml;venlikteki kritik &ouml;nemi ve bar\u0131nd\u0131rd\u0131\u011f\u0131 temel riskler \u015fu \u015fekilde detayland\u0131r\u0131labilir:<\/p>\n<h3>Kritik &Ouml;nemi ve Y&ouml;netim Gereklili\u011fi<\/h3>\n<p>A\u011f payla\u015f\u0131mlar\u0131 do\u011frudan <strong>veriye eri\u015fim<\/strong> anlam\u0131na geldi\u011fi i&ccedil;in kurumsal stratejinin merkezinde yer almal\u0131d\u0131r. Ger&ccedil;ek g&uuml;venlik, sadece tehditleri engellemek de\u011fil, <strong>kurumun neye sahip oldu\u011funu ve bu verilere kimlerin eri\u015fti\u011fini bilmesidir<\/strong>. E\u011fer bir IT y&ouml;neticisi a\u011fda \"\u015fu anda kimin, neyi, neden payla\u015ft\u0131\u011f\u0131n\u0131\" net bir \u015fekilde a&ccedil;\u0131klayam\u0131yorsa, orada <strong>y&ouml;netilmeyen bir risk<\/strong> mevcuttur.<\/p>\n<h3>Temel Riskler<\/h3>\n<p>Yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f veya a&ccedil;\u0131k unutulmu\u015f a\u011f payla\u015f\u0131mlar\u0131 \u015fu ciddi sorunlara yol a&ccedil;abilir:<\/p>\n<ul>\n<li><strong>Yatay Yay\u0131lma (Lateral Movement):<\/strong> Fidye yaz\u0131l\u0131mlar\u0131n\u0131n (ransomware) a\u011f i&ccedil;erisinde makineler aras\u0131nda kolayca yay\u0131lmas\u0131na zemin haz\u0131rlar.<\/li>\n<li><strong>Yetkisiz Eri\u015fim ve Veri S\u0131z\u0131nt\u0131s\u0131:<\/strong> Hassas dosyalara yetkisiz kullan\u0131c\u0131lar\u0131n ula\u015fmas\u0131na veya i&ccedil; tehditlerin fark edilmeden veri s\u0131zd\u0131rmas\u0131na neden olur.<\/li>\n<li><strong>Loglarda Sessiz Kalma:<\/strong> Bu risklerin &ccedil;o\u011fu sistem loglar\u0131nda alarm &uuml;retmez veya \"ba\u011f\u0131rmaz\"; sadece orada sessizce beklerler.<\/li>\n<li><strong>Uyum Sorunlar\u0131:<\/strong> KVKK ve ISO 27001 gibi yasal denetim ve uyumluluk s&uuml;re&ccedil;lerinde ciddi eksiklikler yarat\u0131r.<\/li>\n<\/ul>\n<h3>En Tehlikeli Payla\u015f\u0131m T&uuml;rleri<\/h3>\n<p>Kaynaklara g&ouml;re en tehlikeli payla\u015f\u0131mlar, <strong>\"kimsenin hat\u0131rlamad\u0131\u011f\u0131 ama herkesin eri\u015febildi\u011fi\"<\/strong> payla\u015f\u0131mlard\u0131r. &Ouml;zellikle \u015funlar y&uuml;ksek risk ta\u015f\u0131r:<\/p>\n<ul>\n<li><strong>\"Everyone\"<\/strong> veya &ccedil;ok geni\u015f gruplara a&ccedil;\u0131k olan dizinler.<\/li>\n<li>Eski projelere ait, i\u015fi bitmi\u015f ancak kapat\u0131lmam\u0131\u015f klas&ouml;rler.<\/li>\n<li>Backup (yedekleme) veya log klas&ouml;rlerinin yanl\u0131\u015fl\u0131kla payla\u015f\u0131ma a&ccedil;\u0131lmas\u0131.<\/li>\n<li>Kullan\u0131c\u0131lar\u0131n kendi profil dizinleri alt\u0131nda manuel olarak a&ccedil;t\u0131\u011f\u0131 payla\u015f\u0131mlar,.<\/li>\n<\/ul>\n<h3>Stratejik Yakla\u015f\u0131m ve Denetim<\/h3>\n<p>A\u011f payla\u015f\u0131mlar\u0131n\u0131n denetimi, \"bir kez yap\u0131ld\u0131 ve bitti\" denilecek bir i\u015f de\u011fildir; bu s&uuml;recin <strong>periyodik, raporlanabilir ve standartla\u015ft\u0131r\u0131lm\u0131\u015f<\/strong> olmas\u0131 gerekir. Tek bir makine &uuml;zerinde <code>net share<\/code> komutuyla yerel g&ouml;r&uuml;n&uuml;rl&uuml;k sa\u011flanabilse de, kurumsal a\u011flarda as\u0131l de\u011fer <strong>Active Directory (domain) seviyesinde g&ouml;r&uuml;n&uuml;rl&uuml;k<\/strong> elde etmektir,. PowerShell gibi ara&ccedil;lar kullan\u0131larak domain genelindeki t&uuml;m a&ccedil;\u0131k SMB payla\u015f\u0131mlar\u0131n\u0131n d&uuml;zenli olarak taranmas\u0131, \"bilmiyordum\" l&uuml;ks&uuml;n&uuml; ortadan kald\u0131rarak g&uuml;venli\u011fi art\u0131r\u0131r,.<\/p>\n<p>A\u011f payla\u015f\u0131mlar\u0131n\u0131n y&ouml;netimi, binan\u0131n giri\u015fine en geli\u015fmi\u015f &ccedil;elik kap\u0131y\u0131 (firewall\/antivir&uuml;s) tak\u0131p, arka taraftaki pencerelerden birini (a&ccedil;\u0131k unutulmu\u015f klas&ouml;r) sonuna kadar a&ccedil;\u0131k b\u0131rakmaya benzer; kap\u0131 ne kadar sa\u011flam olursa olsun, pencereyi bilen biri i&ccedil;eri s\u0131zabilir.<\/p>\n<p>Yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f veya a&ccedil;\u0131k unutulmu\u015f a\u011f payla\u015f\u0131mlar\u0131, kurumsal a\u011flarda genellikle zararl\u0131 yaz\u0131l\u0131mlar veya zay\u0131f parolalar kadar dikkat &ccedil;ekmese de en s\u0131k kar\u015f\u0131la\u015f\u0131lan ve en &ccedil;ok g&ouml;zden ka&ccedil;an g&uuml;venlik risklerinden biridir. Bu payla\u015f\u0131mlar, fark edilmeden aylar hatta y\u0131llar boyunca <strong>\"sessiz bir a&ccedil;\u0131k kap\u0131\"<\/strong> olarak kalabilmektedir.<\/p>\n<p>Kaynaklara g&ouml;re, yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f a\u011f payla\u015f\u0131mlar\u0131n\u0131n neden olabilece\u011fi temel siber riskler \u015funlard\u0131r:<\/p>\n<ul>\n<li><strong>Yetkisiz Veri Eri\u015fimi:<\/strong> Hassas dosyalar\u0131n yetkisi olmayan kullan\u0131c\u0131lar taraf\u0131ndan g&ouml;r&uuml;nt&uuml;lenmesine veya de\u011fi\u015ftirilmesine yol a&ccedil;ar.<\/li>\n<li><strong>Yatay Yay\u0131lma (Lateral Movement):<\/strong> &Ouml;zellikle <strong>fidye yaz\u0131l\u0131mlar\u0131n\u0131n (ransomware)<\/strong> a\u011f i&ccedil;erisinde makineler aras\u0131nda kolayca yay\u0131lmas\u0131na zemin haz\u0131rlar.<\/li>\n<li><strong>\u0130&ccedil; Tehditler:<\/strong> K&ouml;t&uuml; niyetli veya dikkatsiz &ccedil;al\u0131\u015fanlar\u0131n (i&ccedil; tehditlerin), fark edilmeden veri s\u0131zd\u0131rmas\u0131na olanak tan\u0131r.<\/li>\n<li><strong>Denetim ve Uyumluluk Sorunlar\u0131:<\/strong> <strong>KVKK ve ISO 27001<\/strong> gibi yasal d&uuml;zenlemeler ve standartlara uyum konusunda ciddi a&ccedil;\u0131klar yaratarak yasal riskler olu\u015fturur.<\/li>\n<li><strong>G&ouml;r&uuml;nmezlik ve Log Sessizli\u011fi:<\/strong> Bu t&uuml;r risklerin en tehlikeli y&ouml;nlerinden biri, <strong>loglarda \"ba\u011f\u0131rmamas\u0131\"<\/strong> veya sistemlerde otomatik bir alarm &uuml;retmemesidir; risk orada sessizce bekler.<\/li>\n<li><strong>Y&ouml;netilemeyen Risk:<\/strong> E\u011fer bir IT y&ouml;neticisi a\u011fda \"kimin, neyi, neden payla\u015ft\u0131\u011f\u0131n\u0131\" net olarak g&ouml;remiyorsa, bu durum do\u011frudan y&ouml;netilemeyen bir riskin varl\u0131\u011f\u0131na i\u015farettir.<\/li>\n<\/ul>\n<p>&Ouml;zellikle <strong>\"Everyone\"<\/strong> veya &ccedil;ok geni\u015f gruplara a&ccedil;\u0131k dizinler, eski projelere ait unutulmu\u015f klas&ouml;rler, kullan\u0131c\u0131lar\u0131n manuel olarak a&ccedil;t\u0131\u011f\u0131 payla\u015f\u0131mlar ve yanl\u0131\u015fl\u0131kla payla\u015f\u0131lan <strong>yedekleme (backup) veya log klas&ouml;rleri<\/strong> en y&uuml;ksek risk grubunda yer almaktad\u0131r.<\/p>\n<p>Bu durumu bir binan\u0131n g&uuml;venli\u011fine benzetebiliriz: Binan\u0131n giri\u015fine en geli\u015fmi\u015f &ccedil;elik kap\u0131y\u0131 ve g&uuml;venlik kameralar\u0131n\u0131 (firewall ve antivir&uuml;s) yerle\u015ftirseniz bile, arka tarafta kimsenin hat\u0131rlamad\u0131\u011f\u0131 a&ccedil;\u0131k bir pencere (hatal\u0131 a\u011f payla\u015f\u0131m\u0131) b\u0131rakt\u0131\u011f\u0131n\u0131zda, t&uuml;m g&uuml;venlik &ouml;nlemleri i\u015flevsiz kalabilir.<\/p>\n<hr>\n<h2>Neden Network Payla\u015f\u0131mlar\u0131 Tehlikelidir?<\/h2>\n<p>Network payla\u015f\u0131mlar\u0131 do\u011frudan <strong>veriye eri\u015fim<\/strong> anlam\u0131na gelir.<br>Yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f bir payla\u015f\u0131m;<\/p>\n<ul>\n<li>\n<p>Yetkisiz kullan\u0131c\u0131lar\u0131n hassas dosyalara ula\u015fmas\u0131na<\/p>\n<\/li>\n<li>\n<p>Fidye yaz\u0131l\u0131mlar\u0131n\u0131n yatay olarak yay\u0131lmas\u0131na<\/p>\n<\/li>\n<li>\n<p>\u0130&ccedil; tehditlerin fark edilmeden veri s\u0131zd\u0131rmas\u0131na<\/p>\n<\/li>\n<li>\n<p>Denetim ve uyumluluk (KVKK, ISO 27001 vb.) sorunlar\u0131na<\/p>\n<\/li>\n<\/ul>\n<p>neden olabilir.<\/p>\n<p>&Uuml;stelik bu risklerin &ccedil;o\u011fu <strong>loglarda ba\u011f\u0131rmaz<\/strong>, alarm &uuml;retmez.<br>Sadece oradad\u0131r&hellip; sessizce.<\/p>\n<hr>\n<h2>Yakla\u015f\u0131m 1: Lokal G&ouml;r&uuml;n&uuml;rl&uuml;k (Tek Makine Kontrol&uuml;)<\/h2>\n<p>Basit ama etkili bir ilk ad\u0131m olarak, \u015f&uuml;pheli herhangi bir Windows makinesinde a\u015fa\u011f\u0131daki komut yeterlidir.<\/p>\n<p><strong>CMD (Run as Administrator):<\/strong><\/p>\n<pre><code class=\"language-cmd\">net share\n<\/code><\/pre>\n<p>Bu komut tek ekranda \u015funlar\u0131 g&ouml;sterir:<\/p>\n<ul>\n<li>\n<p>A&ccedil;\u0131k kullan\u0131c\u0131 payla\u015f\u0131mlar\u0131<\/p>\n<\/li>\n<li>\n<p>Gizli y&ouml;netici payla\u015f\u0131mlar\u0131 (C$, ADMIN$)<\/p>\n<\/li>\n<li>\n<p>Beklenmeyen veya unutulmu\u015f klas&ouml;rler<\/p>\n<\/li>\n<\/ul>\n<p>&Ouml;zellikle <strong>kullan\u0131c\u0131 taraf\u0131ndan manuel a&ccedil;\u0131lm\u0131\u015f<\/strong> payla\u015f\u0131mlar burada h\u0131zl\u0131ca fark edilir.<\/p>\n<p>Bu kontrol, bireysel makineler i&ccedil;in iyi bir ba\u015flang\u0131&ccedil;t\u0131r;<br>ancak kurumsal a\u011flar i&ccedil;in <strong>yeterli de\u011fildir<\/strong>.<\/p>\n<hr>\n<h2>Yakla\u015f\u0131m 2: Domain Genelinde G&ouml;r&uuml;n&uuml;rl&uuml;k (Ger&ccedil;ek Denetim)<\/h2>\n<p>Active Directory ortamlar\u0131nda as\u0131l de\u011fer,<br>lokal de\u011fil <strong>domain seviyesinde g&ouml;r&uuml;n&uuml;rl&uuml;k<\/strong> sa\u011flamakt\u0131r.<\/p>\n<p>Domain Admin yetkileriyle &ccedil;al\u0131\u015ft\u0131r\u0131labilecek &ouml;rnek bir PowerShell yakla\u015f\u0131m\u0131:<\/p>\n<pre><code class=\"language-powershell\">Get-ADComputer -Filter * | ForEach-Object {\n    try {\n        $shares = Get-SmbShare -CimSession $_.Name -ErrorAction SilentlyContinue\n        if ($shares) {\n            [PSCustomObject]@{\n                ComputerName = $_.Name\n                ShareName    = $shares.Name -join ', '\n                Path         = $shares.Path -join ' | '\n            }\n        }\n    } catch {}\n} | Format-Table -AutoSize\n<\/code><\/pre>\n<p>Bu script sayesinde:<\/p>\n<ul>\n<li>\n<p>Domain&rsquo;e ba\u011fl\u0131 t&uuml;m makineler taran\u0131r<\/p>\n<\/li>\n<li>\n<p>A&ccedil;\u0131k SMB payla\u015f\u0131mlar\u0131 listelenir<\/p>\n<\/li>\n<li>\n<p>Hangi makinede, hangi klas&ouml;r&uuml;n payla\u015f\u0131ld\u0131\u011f\u0131 netle\u015fir<\/p>\n<\/li>\n<\/ul>\n<p>Bu noktadan sonra art\u0131k <strong>&ldquo;bilmiyordum&rdquo;<\/strong> deme l&uuml;ks&uuml; yoktur.<\/p>\n<hr>\n<h2>Teknik Not<\/h2>\n<p>Bu komutun &ccedil;al\u0131\u015fabilmesi i&ccedil;in:<\/p>\n<ul>\n<li>\n<p><strong>Active Directory PowerShell mod&uuml;l&uuml; (RSAT)<\/strong> y&uuml;kl&uuml; olmal\u0131d\u0131r<\/p>\n<\/li>\n<li>\n<p>Aksi h&acirc;lde <code>Get-ADComputer<\/code> hatas\u0131 al\u0131n\u0131r<\/p>\n<\/li>\n<\/ul>\n<p>Kurumsal ortamlarda bu mod&uuml;l genellikle Domain Controller veya y&ouml;netim makinelerinde haz\u0131r bulunur.<\/p>\n<hr>\n<h2>En Tehlikeli Payla\u015f\u0131mlar Hangileridir?<\/h2>\n<blockquote>\n<p><strong>&ldquo;En tehlikeli payla\u015f\u0131mlar,<br>kimsenin hat\u0131rlamad\u0131\u011f\u0131 ama herkesin eri\u015febildi\u011fi payla\u015f\u0131mlard\u0131r.&rdquo;<\/strong><\/p>\n<\/blockquote>\n<p>&Ouml;zellikle dikkat edilmesi gerekenler:<\/p>\n<ul>\n<li>\n<p><code>Everyone<\/code> veya geni\u015f gruplara a&ccedil;\u0131k dizinler<\/p>\n<\/li>\n<li>\n<p>Eski projelere ait unutulmu\u015f klas&ouml;rler<\/p>\n<\/li>\n<li>\n<p>Kullan\u0131c\u0131 profil dizinleri alt\u0131ndaki payla\u015f\u0131mlar<\/p>\n<\/li>\n<li>\n<p>Backup veya log klas&ouml;rlerinin yanl\u0131\u015fl\u0131kla payla\u015f\u0131lmas\u0131<\/p>\n<\/li>\n<\/ul>\n<hr>\n<h2>Denetim Tek Seferlik Olmamal\u0131<\/h2>\n<p>Network share kontrolleri;<\/p>\n<ul>\n<li>\n<p>Tek seferlik yap\u0131lan bir i\u015f de\u011fil<\/p>\n<\/li>\n<li>\n<p>&ldquo;Bug&uuml;n bakt\u0131k, tamam&rdquo; denilecek bir konu de\u011fil<\/p>\n<\/li>\n<\/ul>\n<p>Bu s&uuml;re&ccedil;:<\/p>\n<ul>\n<li>\n<p><strong>Periyodik<\/strong><\/p>\n<\/li>\n<li>\n<p><strong>Raporlanabilir<\/strong><\/p>\n<\/li>\n<li>\n<p><strong>Standartla\u015ft\u0131r\u0131lm\u0131\u015f<\/strong><\/p>\n<\/li>\n<\/ul>\n<p>olmal\u0131d\u0131r.<\/p>\n<p>Aksi h&acirc;lde en iyi firewall, en g&uuml;ncel antivir&uuml;s bile<br>i&ccedil;erideki bu <strong>sessiz a&ccedil;\u0131k kap\u0131y\u0131<\/strong> kapatamaz.<\/p>\n<hr>\n<p>Network payla\u015f\u0131mlar\u0131 k&uuml;&ccedil;&uuml;k gibi g&ouml;r&uuml;nen ama etkisi b&uuml;y&uuml;k risklerdir.<br>Ger&ccedil;ek g&uuml;venlik, sadece tehditleri engellemek de\u011fil,<br><strong>neye sahip oldu\u011funuzu ve kimin eri\u015fti\u011fini bilmektir.<\/strong><\/p>\n<p>Bug&uuml;n kendinize \u015fu soruyu sorun:<\/p>\n<blockquote>\n<p><strong>&ldquo;\u015eu anda a\u011f\u0131mda ka&ccedil; payla\u015f\u0131m var ve ben bunlar\u0131n ka&ccedil;\u0131n\u0131 ger&ccedil;ekten biliyorum?&rdquo;<\/strong><\/p>\n<\/blockquote>\n<p>Cevap net de\u011filse,<br>ilk risk zaten ortaya &ccedil;\u0131km\u0131\u015f demektir.<\/p>","excerpt":"Kurumsal a\u011flarda g\u00fcvenlik a\u00e7\u0131klar\u0131 denildi\u011finde akla genellikle\u00a0zararl\u0131 yaz\u0131l\u0131mlar, zay\u0131f parolalar veya g\u00fcncel olmayan sistemler gelir.\nAncak pratikte en s\u0131k kar\u015f\u0131la\u015f\u0131lan \u2014 ve en \u00e7ok g\u00f6zden ka\u00e7an \u2014 risklerden biri a\u00e7\u0131k unutulmu\u015f network payla\u015f\u0131mlar\u0131d\u0131r.","created_at":"2025-12-21 08:55:44","updated_at":"2026-09-08 01:33:45","category_id":7,"view_count":574,"reading_time":9,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-12-21 05:55:44","featured_image":"\/uploads\/images\/2025\/12\/69478bd4b8286_1766296532.png","slug":"network-shares-denetimini-hafife-almayin","category_name":"Cyber Security","category_slug":"cyber-security","category_color":"#10b981"},{"id":349,"title":"Windows GPO Tabanl\u0131 Uygulama Engelleme: Kullan\u0131c\u0131 Ba\u011flam\u0131nda G\u00fcvenlik Sertle\u015ftirmesi","content":"<p>Bu yap\u0131land\u0131rma,&nbsp;<strong>Kullan\u0131c\u0131 Ba\u011flam\u0131nda Uygulama Engelleme<\/strong> stratejisi ile LOLBins ve bilinen k&ouml;t&uuml; ama&ccedil;l\u0131 yaz\u0131l\u0131mlar\u0131n &ccedil;al\u0131\u015ft\u0131r\u0131lmas\u0131n\u0131 engelleyerek sald\u0131r\u0131 y&uuml;zeyini minimize eder.<\/p>\n<h2>Temel GPO Yap\u0131land\u0131rmas\u0131<\/h2>\n<h3>1. Yeni GPO Olu\u015fturma<\/h3>\n<pre><code class=\"language-powershell\"># PowerShell ile GPO olu\u015fturma\nNew-GPO -Name \"W11-User-Application-Blocking\" -Comment \"LOLBins ve malware engellemesi\"\n\n# OU'ya ba\u011flama\nNew-GPLink -Name \"W11-User-Application-Blocking\" `\n           -Target \"OU=Users,DC=contoso,DC=local\" `\n           -LinkEnabled Yes `\n           -Order 1\n<\/code><\/pre>\n<h3>2. Loopback Processing Yap\u0131land\u0131rmas\u0131<\/h3>\n<pre><code>Computer Configuration &rarr; Policies &rarr; Administrative Templates &rarr; System &rarr; Group Policy\n&rarr; \"Configure user Group Policy loopback processing mode\" = Enabled (Merge mode)\n<\/code><\/pre>\n<h2>&nbsp;Security Filtering Yap\u0131land\u0131rmas\u0131<\/h2>\n<h3>PowerShell ile G&uuml;venlik Filtreleme<\/h3>\n<pre><code class=\"language-powershell\"># GPO Security Filtering ayarlama\n$GPO = Get-GPO -Name \"W11-User-Application-Blocking\"\n\n# Varsay\u0131lan \"Authenticated Users\" kald\u0131r\nSet-GPPermission -Name $GPO.DisplayName `\n                  -TargetName \"Authenticated Users\" `\n                  -TargetType Group `\n                  -PermissionLevel None\n\n# Standart kullan\u0131c\u0131lar\u0131 ekle\nSet-GPPermission -Name $GPO.DisplayName `\n                  -TargetName \"Domain Users\" `\n                  -TargetType Group `\n                  -PermissionLevel GpoApply\n\n# Local Users ekle (SID kullanarak)\nSet-GPPermission -Name $GPO.DisplayName `\n                  -TargetName \"S-1-5-32-545\" `\n                  -TargetType Group `\n                  -PermissionLevel GpoApply\n\n# Hari&ccedil; tutulacak gruplar (Read only izni)\n$ExcludedGroups = @(\n    \"Domain Admins\",\n    \"Enterprise Admins\",\n    \"IT-Helpdesk\",\n    \"Security-Admins\"\n)\n\nforeach ($group in $ExcludedGroups) {\n    Set-GPPermission -Name $GPO.DisplayName `\n                      -TargetName $group `\n                      -TargetType Group `\n                      -PermissionLevel GpoRead\n}\n<\/code><\/pre>\n<h2>Engellenecek Uygulamalar Listesi<\/h2>\n<h3>Kategorize Edilmi\u015f Engelleme Listesi<\/h3>\n<pre><code class=\"language-powershell\"># Tam engelleme listesi\n$BlockedApplications = @{\n    # Script Motorlar\u0131 ve Shell'ler\n    \"ScriptEngines\" = @(\n        \"powershell.exe\",\n        \"pwsh.exe\",\n        \"powershell_ise.exe\",\n        \"wscript.exe\",\n        \"cscript.exe\",\n        \"mshta.exe\",\n        \"cmd.exe\",\n        \"bash.exe\",\n        \"wsl.exe\"\n    )\n    \n    # \u0130ndirme\/C2 LOLBins\n    \"DownloadC2\" = @(\n        \"bitsadmin.exe\",\n        \"certutil.exe\",\n        \"curl.exe\",\n        \"ftp.exe\",\n        \"tftp.exe\",\n        \"xwizard.exe\"\n    )\n    \n    # Kurulum\/Proxy-Execution\n    \"ProxyExecution\" = @(\n        \"msiexec.exe\",\n        \"installutil.exe\",\n        \"regsvr32.exe\",\n        \"rundll32.exe\"\n    )\n    \n    # Persistence\/Lateral Movement\n    \"PersistenceLateral\" = @(\n        \"schtasks.exe\",\n        \"wmic.exe\",\n        \"winrs.exe\",\n        \"cmdkey.exe\",\n        \"reg.exe\"\n    )\n    \n    # Bilinen Malware\/Ara&ccedil;lar\n    \"KnownMalware\" = @(\n        \"agenttesla.exe\",\n        \"darkcomet.exe\",\n        \"havoc.exe\",\n        \"masscan.exe\",\n        \"meterpreter.exe\",\n        \"mimikatz.exe\",\n        \"mimilib.dll\",\n        \"msfvenom.exe\",\n        \"mythic.exe\",\n        \"nanocore.exe\",\n        \"ncat.exe\",\n        \"netcat.exe\",\n        \"nmap.exe\",\n        \"nping.exe\",\n        \"pathping.exe\",\n        \"pcalua.exe\",\n        \"pubprn.vbs\",\n        \"remcos.exe\",\n        \"revenge_rat.exe\",\n        \"sekurlsa.exe\",\n        \"sliver.exe\",\n        \"teamserver.exe\",\n        \"token.exe\",\n        \"vbc.exe\",\n        \"wevtutil.exe\",\n        \"winexe.exe\",\n        \"wusa.exe\",\n        \"xwizard.exe\",\n        \"wlrmdr.exe\",\n        \"zmap.exe\"\n    )\n}\n<\/code><\/pre>\n<h2>GPO Registry Ayarlar\u0131<\/h2>\n<h3>Registry.pol Dosyas\u0131 Olu\u015fturma<\/h3>\n<pre><code class=\"language-powershell\">function Create-AppBlockingRegistry {\n    param(\n        [string]$GPOName = \"W11-User-Application-Blocking\"\n    )\n    \n    $regPath = \"HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\"\n    \n    # Komut sat\u0131r\u0131 eri\u015fimini engelle\n    Set-GPRegistryValue -Name $GPOName `\n        -Key $regPath `\n        -ValueName \"DisableCMD\" `\n        -Type DWORD `\n        -Value 2\n    \n    # Registry edit&ouml;rlerini engelle\n    Set-GPRegistryValue -Name $GPOName `\n        -Key $regPath `\n        -ValueName \"DisableRegistryTools\" `\n        -Type DWORD `\n        -Value 1\n    \n    # Run men&uuml;s&uuml;n&uuml; devre d\u0131\u015f\u0131 b\u0131rak\n    Set-GPRegistryValue -Name $GPOName `\n        -Key $regPath `\n        -ValueName \"NoRun\" `\n        -Type DWORD `\n        -Value 1\n}\n<\/code><\/pre>\n<h2>Software Restriction Policies (SRP) Yap\u0131land\u0131rmas\u0131<\/h2>\n<h3>PowerShell ile SRP Olu\u015fturma<\/h3>\n<pre><code class=\"language-powershell\">function Configure-SoftwareRestrictionPolicies {\n    param(\n        [string]$GPOName = \"W11-User-Application-Blocking\"\n    )\n    \n    # SRP i&ccedil;in temel path\n    $srpPath = \"HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\Safer\\CodeIdentifiers\"\n    \n    # Varsay\u0131lan g&uuml;venlik seviyesi (Unrestricted)\n    Set-GPRegistryValue -Name $GPOName `\n        -Key $srpPath `\n        -ValueName \"DefaultLevel\" `\n        -Type DWORD `\n        -Value 262144\n    \n    # Her bir engellenecek uygulama i&ccedil;in hash rule olu\u015ftur\n    $ruleGuid = 0\n    foreach ($category in $BlockedApplications.Keys) {\n        foreach ($app in $BlockedApplications[$category]) {\n            $ruleGuid++\n            $guidString = \"{\" + [guid]::NewGuid().ToString().ToUpper() + \"}\"\n            \n            # Path rule olu\u015ftur\n            $rulePath = \"$srpPath\\0\\Paths\\$guidString\"\n            \n            Set-GPRegistryValue -Name $GPOName `\n                -Key $rulePath `\n                -ValueName \"ItemData\" `\n                -Type String `\n                -Value \"*\\$app\"\n            \n            Set-GPRegistryValue -Name $GPOName `\n                -Key $rulePath `\n                -ValueName \"SaferFlags\" `\n                -Type DWORD `\n                -Value 0\n        }\n    }\n}\n<\/code><\/pre>\n<h2>ADMX Template Olu\u015fturma<\/h2>\n<h3>Custom ADMX Template<\/h3>\n<pre><code class=\"language-xml\">&lt;?xml version=\"1.0\" encoding=\"utf-8\"?&gt;\n&lt;policyDefinitions xmlns:xsd=\"http:\/\/www.w3.org\/2001\/XMLSchema\"\n                   xmlns:xsi=\"http:\/\/www.w3.org\/2001\/XMLSchema-instance\"\n                   revision=\"1.0\"\n                   schemaVersion=\"1.0\"\n                   xmlns=\"http:\/\/schemas.microsoft.com\/GroupPolicy\/2006\/07\/PolicyDefinitions\"&gt;\n  \n  &lt;policyNamespaces&gt;\n    &lt;target prefix=\"w11block\" namespace=\"Microsoft.Policies.W11ApplicationBlocking\" \/&gt;\n  &lt;\/policyNamespaces&gt;\n  \n  &lt;resources minRequiredRevision=\"1.0\" \/&gt;\n  \n  &lt;categories&gt;\n    &lt;category name=\"W11_App_Blocking\" displayName=\"$(string.W11_App_Blocking)\"&gt;\n      &lt;parentCategory ref=\"windows:System\" \/&gt;\n    &lt;\/category&gt;\n  &lt;\/categories&gt;\n  \n  &lt;policies&gt;\n    &lt;policy name=\"BlockLOLBins\" \n            class=\"User\" \n            displayName=\"$(string.BlockLOLBins)\"\n            explainText=\"$(string.BlockLOLBins_Help)\"\n            key=\"Software\\Policies\\W11Block\"\n            valueName=\"BlockLOLBins\"&gt;\n      &lt;parentCategory ref=\"W11_App_Blocking\" \/&gt;\n      &lt;supportedOn ref=\"windows:SUPPORTED_Windows_10_0\" \/&gt;\n      &lt;enabledValue&gt;\n        &lt;decimal value=\"1\" \/&gt;\n      &lt;\/enabledValue&gt;\n      &lt;disabledValue&gt;\n        &lt;decimal value=\"0\" \/&gt;\n      &lt;\/disabledValue&gt;\n    &lt;\/policy&gt;\n  &lt;\/policies&gt;\n&lt;\/policyDefinitions&gt;\n<\/code><\/pre>\n<h2>Test ve Do\u011frulama<\/h2>\n<h3>Test Script'i<\/h3>\n<pre><code class=\"language-powershell\">function Test-ApplicationBlocking {\n    [CmdletBinding()]\n    param(\n        [string]$TestUser = \"testuser@domain.local\"\n    )\n    \n    # Test edilecek uygulamalar\n    $testApps = @(\n        @{Name=\"PowerShell\"; Path=\"powershell.exe\"; Command=\"-NoProfile -Command Write-Host 'Test'\"},\n        @{Name=\"CMD\"; Path=\"cmd.exe\"; Command=\"\/c echo Test\"},\n        @{Name=\"CertUtil\"; Path=\"certutil.exe\"; Command=\"-?\"}\n    )\n    \n    Write-Host \"Testing Application Blocking for: $TestUser\" -ForegroundColor Cyan\n    Write-Host \"=\" * 50\n    \n    foreach ($app in $testApps) {\n        try {\n            # RunAs ile test\n            $credential = Get-Credential -UserName $TestUser\n            $process = Start-Process -FilePath $app.Path `\n                                    -ArgumentList $app.Command `\n                                    -Credential $credential `\n                                    -PassThru `\n                                    -Wait `\n                                    -ErrorAction Stop\n            \n            if ($process.ExitCode -eq 0) {\n                Write-Host \"\u274c $($app.Name): NOT BLOCKED\" -ForegroundColor Red\n            } else {\n                Write-Host \"\u2705 $($app.Name): BLOCKED\" -ForegroundColor Green\n            }\n        }\n        catch {\n            Write-Host \"\u2705 $($app.Name): BLOCKED (Exception)\" -ForegroundColor Green\n        }\n    }\n}\n<\/code><\/pre>\n<h2>Rollback Plan\u0131<\/h2>\n<h3>Acil Durum Geri Alma<\/h3>\n<pre><code class=\"language-powershell\">function Emergency-Rollback {\n    param(\n        [string]$GPOName = \"W11-User-Application-Blocking\"\n    )\n    \n    # GPO'yu devre d\u0131\u015f\u0131 b\u0131rak\n    $GPO = Get-GPO -Name $GPOName\n    $GPO.GpoStatus = \"AllSettingsDisabled\"\n    \n    # GPO linklerini kald\u0131r\n    Get-GPOReport -Name $GPOName -ReportType Xml | \n        Select-Xml -XPath \"\/\/LinksTo\/SOMPath\" | \n        ForEach-Object {\n            Remove-GPLink -Name $GPOName -Target $_.Node.InnerText -Confirm:$false\n        }\n    \n    # Kullan\u0131c\u0131larda zorla g&uuml;ncelleme\n    Invoke-Command -ComputerName (Get-ADComputer -Filter *).Name -ScriptBlock {\n        gpupdate \/force\n    }\n    \n    Write-Host \"Emergency rollback completed!\" -ForegroundColor Yellow\n}\n<\/code><\/pre>\n<h2>Monitoring ve Raporlama<\/h2>\n<h3>Event Log \u0130zleme<\/h3>\n<pre><code class=\"language-powershell\"># AppLocker\/SRP event monitoring\nfunction Get-BlockedApplicationEvents {\n    param(\n        [int]$Hours = 24\n    )\n    \n    $startTime = (Get-Date).AddHours(-$Hours)\n    \n    # Event ID'ler\n    # 865: SRP blocked\n    # 866: SRP warning\n    # 8003: AppLocker blocked\n    \n    Get-WinEvent -FilterHashtable @{\n        LogName = 'Application'\n        ID = 865, 866, 8003\n        StartTime = $startTime\n    } | Select-Object TimeCreated, Id, Message, UserId |\n        Export-Csv \"BlockedApps_$(Get-Date -Format 'yyyyMMdd').csv\"\n}\n<\/code><\/pre>\n<h2>&Ouml;nemli Uyar\u0131lar<\/h2>\n<h3>Kritik Dikkat Edilmesi Gerekenler<\/h3>\n<ol>\n<li>\n<p><strong>rundll32.exe Engelleme<\/strong><\/p>\n<ul>\n<li>Bir&ccedil;ok sistem fonksiyonu rundll32 kullan\u0131r<\/li>\n<li>Engellemeden &ouml;nce kapsaml\u0131 test yap\u0131n<\/li>\n<li>Alternatif: Yaln\u0131zca belirli DLL'lere izin verin<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><strong>msiexec.exe K\u0131s\u0131tlamas\u0131<\/strong><\/p>\n<ul>\n<li>Windows Update'ler etkilenebilir<\/li>\n<li>SCCM\/Intune da\u011f\u0131t\u0131mlar\u0131 bozulabilir<\/li>\n<li>&Ccedil;&ouml;z&uuml;m: Sistem hesaplar\u0131 i&ccedil;in istisna<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><strong>wevtutil.exe<\/strong><\/p>\n<ul>\n<li>Log toplama sistemleri etkilenebilir<\/li>\n<li>SIEM entegrasyonlar\u0131 kontrol edilmeli<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<h2>\u0130leri Seviye Yap\u0131land\u0131rmalar<\/h2>\n<h3>AppLocker ile Entegrasyon<\/h3>\n<pre><code class=\"language-xml\">&lt;AppLockerPolicy Version=\"1\"&gt;\n  &lt;RuleCollection Type=\"Exe\" EnforcementMode=\"Enabled\"&gt;\n    &lt;FilePublisherRule Id=\"a61c8b3c-a27f-4c8b-8e8a-8b4e62d8565f\" \n                       Name=\"MICROSOFT WINDOWS OPERATING SYSTEM\" \n                       Description=\"\" \n                       UserOrGroupSid=\"S-1-1-0\" \n                       Action=\"Allow\"&gt;\n      &lt;Conditions&gt;\n        &lt;FilePublisherCondition PublisherName=\"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\" \n                                ProductName=\"MICROSOFT&reg; WINDOWS&reg; OPERATING SYSTEM\" \n                                BinaryName=\"*\"&gt;\n          &lt;BinaryVersionRange LowSection=\"*\" HighSection=\"*\"\/&gt;\n        &lt;\/FilePublisherCondition&gt;\n      &lt;\/Conditions&gt;\n      &lt;Exceptions&gt;\n        &lt;!-- LOLBins exception listesi --&gt;\n        &lt;FilePathCondition Path=\"%SYSTEM32%\\certutil.exe\"\/&gt;\n        &lt;FilePathCondition Path=\"%SYSTEM32%\\bitsadmin.exe\"\/&gt;\n      &lt;\/Exceptions&gt;\n    &lt;\/FilePublisherRule&gt;\n  &lt;\/RuleCollection&gt;\n&lt;\/AppLockerPolicy&gt;\n<\/code><\/pre>\n<h2>Sonu&ccedil; ve &Ouml;neriler<\/h2>\n<p>Bu GPO tabanl\u0131 uygulama engelleme stratejisi:<\/p>\n<ul>\n<li>\u2705 Kullan\u0131c\u0131 seviyesinde g&uuml;&ccedil;l&uuml; kontrol sa\u011flar<\/li>\n<li>\u2705 LOLBins sald\u0131r\u0131 vekt&ouml;rlerini minimize eder<\/li>\n<li>\u2705 MITRE ATT&amp;CK T1218 tekniklerini engeller<\/li>\n<li>\u2705 Zero Trust prensipleriyle uyumludur<\/li>\n<\/ul>\n<p><strong>Kritik Ba\u015far\u0131 Fakt&ouml;rleri:<\/strong><\/p>\n<ol>\n<li>Test ortam\u0131nda kapsaml\u0131 validasyon<\/li>\n<li>Kademeli da\u011f\u0131t\u0131m stratejisi<\/li>\n<li>\u0130stisna y&ouml;netimi prosed&uuml;rleri<\/li>\n<li>S&uuml;rekli monitoring ve iyile\u015ftirme<\/li>\n<\/ol>\n<p>v<\/p>","excerpt":"Bu yap\u0131land\u0131rma,\u00a0Kullan\u0131c\u0131 Ba\u011flam\u0131nda Uygulama Engelleme stratejisi ile LOLBins ve bilinen k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n \u00e7al\u0131\u015ft\u0131r\u0131lmas\u0131n\u0131 engelleyerek sald\u0131r\u0131 y\u00fczeyini minimize eder.","created_at":"2025-11-26 17:47:33","updated_at":"2026-09-08 00:39:21","category_id":6,"view_count":747,"reading_time":6,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-11-26 14:47:33","featured_image":"resimyok.jpg","slug":"windows-gpo-tabanli-uygulama-engelleme-kullanici-baglaminda-guvenlik-sertlestirmesi","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":339,"title":"Windows i\u00e7in Geli\u015fmi\u015f A\u011f Trafi\u011fi \u0130zleme Arac\u0131 \u2013 Network Traffic Monitor","content":"<h1><strong>Windows i&ccedil;in Geli\u015fmi\u015f A\u011f Trafi\u011fi \u0130zleme Arac\u0131 &ndash; Network Traffic Monitor<\/strong><\/h1>\n<p>Windows &uuml;zerinde &ccedil;al\u0131\u015fan uygulamalar\u0131n internete hangi ba\u011flant\u0131lar\u0131 yapt\u0131\u011f\u0131n\u0131 merak ettin mi? Hangi process ne kadar trafik &uuml;retiyor, hangi IP&rsquo;ye ba\u011flan\u0131yor, gizli arka plan ba\u011flant\u0131lar\u0131 var m\u0131, anl\u0131k bant geni\u015fli\u011fini ne t&uuml;ketiyor, firewall &uuml;zerinden bir portu t\u0131k diye engellemek m&uuml;mk&uuml;n m&uuml;?<\/p>\n<p>\u0130\u015fte t&uuml;m bu ihtiya&ccedil;lar i&ccedil;in geli\u015ftirdi\u011fim <strong>Network Traffic Monitor<\/strong>, Windows 7\/10\/11\/Server versiyonlar\u0131nda &ccedil;al\u0131\u015fan g&uuml;&ccedil;l&uuml;, modern ve ger&ccedil;ek zamanl\u0131 bir a\u011f trafi\u011fi analiz uygulamas\u0131.<\/p>\n<p>Geli\u015ftiriciler, sistem y&ouml;neticileri, g&uuml;venlik merakl\u0131lar\u0131 ve a\u011f trafi\u011fini kontrol alt\u0131nda tutmak isteyen herkes i&ccedil;in tasarland\u0131.<\/p>\n<hr>\n<h2>\ud83c\udfa5 <strong>Tan\u0131t\u0131m &amp; &Ouml;nizleme<\/strong><\/h2>\n<p>A\u015fa\u011f\u0131daki ekran g&ouml;r&uuml;nt&uuml;leri, uygulaman\u0131n modern ve i\u015flevsel aray&uuml;z&uuml;n&uuml; g&ouml;steriyor:<\/p>\n<p>&nbsp;<\/p>\n<p><iframe src=\"https:\/\/www.youtube.com\/embed\/n0Cp9PXhuyA\" width=\"560\" height=\"314\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><img src=\"..\/..\/..\/uploads\/images\/2025\/12\/694795a5989ba_1766299045.png\"><\/p>\n<hr>\n<h2>\ud83d\udce5 <strong>\u0130ndir<\/strong><\/h2>\n<p><strong>Son S&uuml;r&uuml;m (Release):<\/strong><\/p>\n<p>\ud83d\udc49 <a href=\"https:\/\/drive.google.com\/file\/d\/14VLrIvpcfdVaA6WlEJ5MIJEZhJpMEEV_\/view?usp=sharing\">https:\/\/drive.google.com\/file\/d\/14VLrIvpcfdVaA6WlEJ5MIJEZhJpMEEV_\/view?usp=sharing<\/a><\/p>\n<hr>\n<h1>\ud83d\ude80 <strong>Network Traffic Monitor Nedir?<\/strong><\/h1>\n<p>Network Traffic Monitor, Windows &uuml;zerinde ger&ccedil;ekle\u015fen <strong>t&uuml;m inbound\/outbound ba\u011flant\u0131lar\u0131<\/strong> ger&ccedil;ek zamanl\u0131 olarak g&ouml;steren bir masa&uuml;st&uuml; uygulamas\u0131d\u0131r. Her ba\u011flant\u0131n\u0131n:<\/p>\n<ul>\n<li>\n<p>IP<\/p>\n<\/li>\n<li>\n<p>Port<\/p>\n<\/li>\n<li>\n<p>Protokol<\/p>\n<\/li>\n<li>\n<p>Process ad\u0131 \/ PID<\/p>\n<\/li>\n<li>\n<p>Trafik y&ouml;n&uuml;<\/p>\n<\/li>\n<li>\n<p>Aktif bayt ak\u0131\u015f\u0131<\/p>\n<\/li>\n<li>\n<p>TCP bayraklar\u0131<br>gibi detaylar\u0131n\u0131 alabilir ve istersen bu ba\u011flant\u0131ya <strong>tek t\u0131kla firewall engelleme<\/strong> uygulayabilirsin.<\/p>\n<\/li>\n<\/ul>\n<p>Ayr\u0131ca uygulamada trafik istatistikleri, process bazl\u0131 s\u0131ralamalar, log kayd\u0131, otomatik temizleme gibi geli\u015fmi\u015f &ouml;zellikler bulunur.<\/p>\n<hr>\n<h1>\u2728 <strong>&Ouml;ne &Ccedil;\u0131kan &Ouml;zellikler<\/strong><\/h1>\n<h3>\ud83d\udd0d Ger&ccedil;ek Zamanl\u0131 A\u011f Takibi<\/h3>\n<ul>\n<li>\n<p>TCP \/ UDP ba\u011flant\u0131lar\u0131n\u0131 anl\u0131k olarak izleme<\/p>\n<\/li>\n<li>\n<p>\u0130nternet kullanan process&rsquo;leri listeleme<\/p>\n<\/li>\n<li>\n<p>Hangi uygulama hangi IP\/porta ba\u011flan\u0131yor g&ouml;rebilme<\/p>\n<\/li>\n<\/ul>\n<h3>\ud83d\udd25 Geli\u015fmi\u015f G&uuml;venlik Ara&ccedil;lar\u0131<\/h3>\n<ul>\n<li>\n<p><strong>Ba\u011flant\u0131y\u0131 an\u0131nda engelle (Windows Firewall Block)<\/strong><\/p>\n<\/li>\n<li>\n<p>Port bazl\u0131 engelleme<\/p>\n<\/li>\n<li>\n<p>Sistem process&rsquo;leri i&ccedil;in koruma modu<\/p>\n<\/li>\n<li>\n<p>TCP Flag analizi (SYN, ACK, FIN, RST)<\/p>\n<\/li>\n<\/ul>\n<h3>\ud83d\udcca Profesyonel Trafik Analizi<\/h3>\n<ul>\n<li>\n<p>Canl\u0131 bant geni\u015fli\u011fi grafi\u011fi (LiveCharts)<\/p>\n<\/li>\n<li>\n<p>Top processes &amp; top IPs istatistikleri<\/p>\n<\/li>\n<li>\n<p>Anl\u0131k byte sayac\u0131 (global &amp; process bazl\u0131)<\/p>\n<\/li>\n<li>\n<p>Paket detay penceresi<\/p>\n<\/li>\n<\/ul>\n<h3>\ud83d\uddc4\ufe0f Loglama &amp; Database<\/h3>\n<ul>\n<li>\n<p>SQLite tabanl\u0131 g&uuml;&ccedil;l&uuml; log sistemi<\/p>\n<\/li>\n<li>\n<p>7 g&uuml;n sonra otomatik log temizleme<\/p>\n<\/li>\n<li>\n<p>Reverse DNS &ccedil;&ouml;z&uuml;mleme<\/p>\n<\/li>\n<li>\n<p>Arama ve geli\u015fmi\u015f filtreleme (process, IP, port, domain)<\/p>\n<\/li>\n<\/ul>\n<h3>\u2699\ufe0f Y&ouml;netim &amp; \u0130zleme<\/h3>\n<ul>\n<li>\n<p>Process sonland\u0131rma (Close \/ Force Kill)<\/p>\n<\/li>\n<li>\n<p>Inbound \/ Outbound ayr\u0131 listeler<\/p>\n<\/li>\n<li>\n<p>Protokol filtresi (TCP\/UDP)<\/p>\n<\/li>\n<li>\n<p>Port a&ccedil;\u0131klamalar\u0131 ve protokol tan\u0131ma<\/p>\n<\/li>\n<li>\n<p>Debug konsolu<\/p>\n<\/li>\n<\/ul>\n<hr>\n<h1>\ud83d\udda5\ufe0f <strong>Sistem Gereksinimleri<\/strong><\/h1>\n<table>\n<thead>\n<tr>\n<th>Gereksinim<\/th>\n<th>Detay<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u0130\u015fletim Sistemi<\/td>\n<td>Windows 7 \/ 10 \/ 11 \/ Server 2016 \/ 2019 \/ 2022<\/td>\n<\/tr>\n<tr>\n<td>Framework<\/td>\n<td>.NET 8.0<\/td>\n<\/tr>\n<tr>\n<td>Yetki<\/td>\n<td>Administrator (gereklidir)<\/td>\n<\/tr>\n<tr>\n<td>Donan\u0131m<\/td>\n<td>Min. 256 MB RAM<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<h1>\ud83d\ude80 <strong>Kurulum<\/strong><\/h1>\n<h3>1. Projeyi Derle<\/h3>\n<pre><code class=\"language-powershell\">cd NetworkTrafficMonitor\ndotnet restore\ndotnet build\n<\/code><\/pre>\n<h3>2. Y&ouml;netici Olarak &Ccedil;al\u0131\u015ft\u0131r<\/h3>\n<pre><code class=\"language-powershell\">Start-Process .\\NetworkTrafficMonitor.exe -Verb RunAs\n<\/code><\/pre>\n<hr>\n<h1>\ud83e\udded <strong>Nas\u0131l Kullan\u0131l\u0131r?<\/strong><\/h1>\n<ol>\n<li>\n<p>Uygulamay\u0131 y&ouml;netici olarak a&ccedil;<\/p>\n<\/li>\n<li>\n<p><strong>Start<\/strong> butonuna bas<\/p>\n<\/li>\n<li>\n<p>T&uuml;m ger&ccedil;ek zamanl\u0131 a\u011f ba\u011flant\u0131lar\u0131 listelenmeye ba\u015flar<\/p>\n<\/li>\n<li>\n<p>Process, IP, port, domain &uuml;zerinden an\u0131nda arama yapabilirsin<\/p>\n<\/li>\n<li>\n<p>Ba\u011flant\u0131ya sa\u011f t\u0131klay\u0131p:<\/p>\n<ul>\n<li>\n<p><strong>Block in Firewall<\/strong><\/p>\n<\/li>\n<li>\n<p><strong>Allow<\/strong><\/p>\n<\/li>\n<li>\n<p><strong>Kill Process<\/strong><\/p>\n<\/li>\n<li>\n<p><strong>Inspect Packet<\/strong><br>gibi i\u015flemler uygulayabilirsin<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<hr>\n<h1>\u2699\ufe0f <strong>Teknik Altyap\u0131<\/strong><\/h1>\n<p>Uygulama \u015fu servis mimarisiyle &ccedil;al\u0131\u015f\u0131r:<\/p>\n<table>\n<thead>\n<tr>\n<th>Servis<\/th>\n<th>G&ouml;rev<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>TrafficService<\/strong><\/td>\n<td>Windows API &uuml;zerinden ba\u011flant\u0131lar\u0131 okur<\/td>\n<\/tr>\n<tr>\n<td><strong>PacketCaptureService<\/strong><\/td>\n<td>1 saniyelik periyotlarla trafik toplar<\/td>\n<\/tr>\n<tr>\n<td><strong>DatabaseService<\/strong><\/td>\n<td>SQLite kay\u0131tlar\u0131n\u0131 y&ouml;netir<\/td>\n<\/tr>\n<tr>\n<td><strong>ProtocolExplainService<\/strong><\/td>\n<td>Port\/protokol a&ccedil;\u0131klamalar\u0131 verir<\/td>\n<\/tr>\n<tr>\n<td><strong>FirewallService<\/strong><\/td>\n<td>Windows Firewall ile ileti\u015fim kurar<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<h1>\ud83d\udee0\ufe0f <strong>Geli\u015ftirme Yol Haritas\u0131<\/strong><\/h1>\n<p>Planlanan &ouml;zellikler:<\/p>\n<ul>\n<li>\n<p>ETW (Event Tracing for Windows) entegrasyonu<\/p>\n<\/li>\n<li>\n<p>Paket seviyesi trafik yakalama<\/p>\n<\/li>\n<li>\n<p>Geli\u015fmi\u015f LiveCharts grafikleri<\/p>\n<\/li>\n<li>\n<p>JSON &amp; CSV export<\/p>\n<\/li>\n<li>\n<p>Threat Intelligence API entegrasyonu (VirusTotal, AbuseIPDB)<\/p>\n<\/li>\n<\/ul>\n<hr>\n<h1>\ud83d\udcc4 Lisans<\/h1>\n<p>Bu proje <strong>MIT License<\/strong> ile lisanslanm\u0131\u015ft\u0131r.<br>\u0130stedi\u011finiz gibi <strong>kullanabilir<\/strong>, <strong>de\u011fi\u015ftirebilir<\/strong>, <strong>da\u011f\u0131tabilirsiniz<\/strong>.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>","excerpt":"Windows i\u00e7in Geli\u015fmi\u015f A\u011f Trafi\u011fi \u0130zleme Arac\u0131 \u2013 Network Traffic Monitor","created_at":"2025-11-17 16:23:09","updated_at":"2026-09-07 23:03:28","category_id":9,"view_count":3449,"reading_time":4,"status":"published","editor_choice":0,"is_editor_choice":1,"published_at":"2025-11-17 13:23:00","featured_image":"579407097eafe6840e4ad0d3dcd721f9.jpeg","slug":"windows-icin-gelismis-ag-trafigi-izleme-araci-network-traffic-monitor","category_name":"Yaz\u0131l\u0131m","category_slug":"yazilim","category_color":"#ef4444"},{"id":315,"title":"AdminDroid PowerShell Scripts","content":"<h1>AdminDroid PowerShell Scripts: Microsoft 365 Y&ouml;netimi i&ccedil;in Kapsaml\u0131 Script Koleksiyonu<\/h1>\r\n<p>Microsoft 365 ortamlar\u0131n\u0131 y&ouml;netmek, raporlamak ve denetlemek i&ccedil;in tasarlanm\u0131\u015f <strong>100'den fazla<\/strong> haz\u0131r PowerShell scripti i&ccedil;eren kapsaml\u0131 bir GitHub repository'si ile tan\u0131\u015f\u0131n: <a href=\"https:\/\/github.com\/admindroid-community\/powershell-scripts\">admindroid-community\/powershell-scripts<\/a><\/p>\r\n<h2>\ud83c\udfaf Repository Nedir?<\/h2>\r\n<p>Bu koleksiyon, IT y&ouml;neticilerinin g&uuml;nl&uuml;k rutinlerini otomatikle\u015ftirmek, detayl\u0131 raporlar olu\u015fturmak ve Microsoft 365 tenant'lar\u0131nda uyumluluk sa\u011flamak i&ccedil;in ihtiya&ccedil; duydu\u011fu her \u015feyi i&ccedil;eriyor. Hem k&uuml;&ccedil;&uuml;k i\u015fletmeler hem de enterprise seviyedeki kurulu\u015flar i&ccedil;in ideal bir kaynak.<\/p>\r\n<h2>\u2728 &Ouml;ne &Ccedil;\u0131kan &Ouml;zellikler<\/h2>\r\n<h3>\ud83d\udcda Kapsaml\u0131 Script Koleksiyonu<\/h3>\r\n<ul>\r\n<li><strong>100+ haz\u0131r script<\/strong> farkl\u0131 y&ouml;netim g&ouml;revleri i&ccedil;in<\/li>\r\n<li>Her script kendi ba\u015f\u0131na &ccedil;al\u0131\u015fabilir (self-contained)<\/li>\r\n<li>Detayl\u0131 yorumlar ve kullan\u0131m &ouml;rnekleri i&ccedil;erir<\/li>\r\n<li>Her script i&ccedil;in ba\u011flant\u0131l\u0131 blog yaz\u0131lar\u0131 mevcut<\/li>\r\n<\/ul>\r\n<h3>\u2699\ufe0f Otomasyon ve Zaman Tasarrufu<\/h3>\r\n<ul>\r\n<li>Tekrarlayan y&ouml;netim g&ouml;revlerini otomatikle\u015ftirin<\/li>\r\n<li>Manuel i\u015flemlerden kaynaklanan hatalar\u0131 azalt\u0131n<\/li>\r\n<li>Zamanlama deste\u011fi ile periyodik raporlar olu\u015fturun<\/li>\r\n<li>Toplu i\u015flemleri tek komutla ger&ccedil;ekle\u015ftirin<\/li>\r\n<\/ul>\r\n<h3>\ud83d\udcca Raporlama Yetenekleri<\/h3>\r\n<ul>\r\n<li>Denetim ve uyumluluk ama&ccedil;l\u0131 detayl\u0131 raporlar<\/li>\r\n<li>CSV format\u0131nda d&uuml;zenli export imkan\u0131<\/li>\r\n<li>Kullan\u0131c\u0131lar, gruplar, lisanslar hakk\u0131nda kapsaml\u0131 bilgi<\/li>\r\n<li>Oturum a&ccedil;ma aktiviteleri ve g&uuml;venlik raporlar\u0131<\/li>\r\n<\/ul>\r\n<h3>\ud83d\udd0d \u0130zleme ve Denetim<\/h3>\r\n<ul>\r\n<li>M365 aktivitelerini s&uuml;rekli izleyin<\/li>\r\n<li>\u015e&uuml;pheli kullan\u0131c\u0131lar\u0131 tespit edin<\/li>\r\n<li>Yetkisiz eri\u015fimleri belirleyin<\/li>\r\n<li>MFA de\u011fi\u015fikliklerini takip edin<\/li>\r\n<\/ul>\r\n<h3>\ud83d\udee0\ufe0f &Ouml;zelle\u015ftirilebilir Yap\u0131<\/h3>\r\n<ul>\r\n<li>Her script kolayca &ouml;zelle\u015ftirilebilir<\/li>\r\n<li>Built-in parametreler ile gran&uuml;ler kontrol<\/li>\r\n<li>Switch parametreleri ile esnek kullan\u0131m<\/li>\r\n<li>Kendi ihtiya&ccedil;lar\u0131n\u0131za g&ouml;re modifiye edin<\/li>\r\n<\/ul>\r\n<h2>\ud83d\udcbc Kullan\u0131m Alanlar\u0131<\/h2>\r\n<h3>Kullan\u0131c\u0131 Y&ouml;netimi<\/h3>\r\n<pre><code class=\"language-powershell\"># Kullan\u0131c\u0131 raporlar\u0131\r\n- T&uuml;m kullan\u0131c\u0131lar\u0131n listesi ve detaylar\u0131\r\n- Lisansl\u0131\/lisanss\u0131z kullan\u0131c\u0131lar\r\n- Son oturum a&ccedil;ma aktiviteleri\r\n- \u015eifre de\u011fi\u015fiklik ge&ccedil;mi\u015fi\r\n<\/code><\/pre>\r\n<h3>Lisans Y&ouml;netimi<\/h3>\r\n<pre><code class=\"language-powershell\"># Lisans raporlar\u0131\r\n- Lisans atamalar\u0131 ve kullan\u0131m\u0131\r\n- Lisans s&uuml;re sonu bildirimleri\r\n- Kullan\u0131lmayan lisanslar\r\n- Lisans de\u011fi\u015fiklik loglar\u0131\r\n<\/code><\/pre>\r\n<h3>G&uuml;venlik ve Uyumluluk<\/h3>\r\n<pre><code class=\"language-powershell\"># G&uuml;venlik raporlar\u0131\r\n- MFA durumu ve de\u011fi\u015fiklikleri\r\n- Admin rol atamalar\u0131\r\n- \u015e&uuml;pheli oturum a&ccedil;ma denemeleri\r\n- G&uuml;venlik uyar\u0131lar\u0131\r\n<\/code><\/pre>\r\n<h3>Grup Y&ouml;netimi<\/h3>\r\n<pre><code class=\"language-powershell\"># Grup operasyonlar\u0131\r\n- Grup &uuml;yelikleri\r\n- G&uuml;venlik gruplar\u0131\r\n- Distribution listleri\r\n- Microsoft 365 Groups\r\n<\/code><\/pre>\r\n<h2>\ud83d\ude80 Neden Bu Repository?<\/h2>\r\n<h3>1. Zaman Tasarrufu<\/h3>\r\n<p>Manuel olarak saatlerce s&uuml;recek i\u015flemleri dakikalar i&ccedil;inde tamamlay\u0131n. Her script optimize edilmi\u015f ve production-ready durumda.<\/p>\r\n<h3>2. Best Practices<\/h3>\r\n<p>Microsoft 365 y&ouml;netimi i&ccedil;in en iyi uygulamalar bu scriptlere entegre edilmi\u015f. G&uuml;venli ve verimli kod yap\u0131s\u0131.<\/p>\r\n<h3>3. &Uuml;cretsiz ve A&ccedil;\u0131k Kaynak<\/h3>\r\n<p>T&uuml;m scriptler &uuml;cretsiz kullan\u0131ma a&ccedil;\u0131k. Community taraf\u0131ndan s&uuml;rekli g&uuml;ncelleniyor ve geli\u015ftiriliyor.<\/p>\r\n<h3>4. Kolay Ba\u015flang\u0131&ccedil;<\/h3>\r\n<p>Her script detayl\u0131 a&ccedil;\u0131klamalar ve &ouml;rneklerle birlikte geliyor. PowerShell konusunda orta seviye bilgi bile yeterli.<\/p>\r\n<h3>5. Zamanlama Deste\u011fi<\/h3>\r\n<p>&Ccedil;o\u011fu script periyodik raporlama i&ccedil;in zamanlama &ouml;zelli\u011fini destekliyor. Task Scheduler ile entegre &ccedil;al\u0131\u015fabilir.<\/p>\r\n<h2>\ud83d\udce6 AdminDroid Ekosistemi<\/h2>\r\n<p>Repository, AdminDroid'in &uuml;cretsiz Microsoft 365 raporlama arac\u0131n\u0131 tamaml\u0131yor:<\/p>\r\n<h3>&Uuml;cretsiz Ara&ccedil; &Ouml;zellikleri:<\/h3>\r\n<ul>\r\n<li><strong>120+ temel rapor<\/strong> ve dashboard<\/li>\r\n<li>Kullan\u0131c\u0131, grup, lisans raporlar\u0131<\/li>\r\n<li>Oturum a&ccedil;ma aktiviteleri<\/li>\r\n<li>MFA ve admin rol de\u011fi\u015fiklikleri<\/li>\r\n<li>Tamamen &uuml;cretsiz kullan\u0131m<\/li>\r\n<\/ul>\r\n<h3>Premium Ara&ccedil; &Ouml;zellikleri:<\/h3>\r\n<ul>\r\n<li><strong>1900+ &ouml;nceden haz\u0131r rapor<\/strong><\/li>\r\n<li><strong>30+ i&ccedil;g&ouml;r&uuml;l&uuml; dashboard<\/strong><\/li>\r\n<li><strong>75+ haz\u0131r uyar\u0131 \u015fablonu<\/strong><\/li>\r\n<li>Tam g&ouml;r&uuml;n&uuml;rl&uuml;k ve kontrol<\/li>\r\n<\/ul>\r\n<h2>\ud83c\udf93 Kimler Kullanmal\u0131?<\/h2>\r\n<h3>IT Y&ouml;neticileri<\/h3>\r\n<ul>\r\n<li>Microsoft 365 tenant y&ouml;netimi<\/li>\r\n<li>Kullan\u0131c\u0131 ve lisans operasyonlar\u0131<\/li>\r\n<li>G&uuml;venlik ve uyumluluk denetimleri<\/li>\r\n<\/ul>\r\n<h3>Sistem Y&ouml;neticileri<\/h3>\r\n<ul>\r\n<li>Rutin g&ouml;revlerin otomasyonu<\/li>\r\n<li>Toplu i\u015flemler ve migrations<\/li>\r\n<li>Raporlama ve dok&uuml;mantasyon<\/li>\r\n<\/ul>\r\n<h3>G&uuml;venlik Uzmanlar\u0131<\/h3>\r\n<ul>\r\n<li>G&uuml;venlik audit'leri<\/li>\r\n<li>\u015e&uuml;pheli aktivite tespiti<\/li>\r\n<li>Uyumluluk raporlamas\u0131<\/li>\r\n<\/ul>\r\n<h3>MSP'ler (Managed Service Providers)<\/h3>\r\n<ul>\r\n<li>Multi-tenant y&ouml;netimi<\/li>\r\n<li>M&uuml;\u015fteri raporlar\u0131<\/li>\r\n<li>SLA takibi<\/li>\r\n<\/ul>\r\n<h2>\ud83d\udca1 H\u0131zl\u0131 Ba\u015flang\u0131&ccedil;<\/h2>\r\n<h3>Ad\u0131m 1: Repository'yi Klonlay\u0131n<\/h3>\r\n<pre><code class=\"language-powershell\">git clone https:\/\/github.com\/admindroid-community\/powershell-scripts.git\r\ncd powershell-scripts\r\n<\/code><\/pre>\r\n<h3>Ad\u0131m 2: Gerekli Mod&uuml;lleri Y&uuml;kleyin<\/h3>\r\n<pre><code class=\"language-powershell\"># Microsoft Graph PowerShell\r\nInstall-Module Microsoft.Graph -Scope CurrentUser\r\n\r\n# Exchange Online Management\r\nInstall-Module ExchangeOnlineManagement -Scope CurrentUser\r\n\r\n# Azure AD (gerekirse)\r\nInstall-Module AzureAD -Scope CurrentUser\r\n<\/code><\/pre>\r\n<h3>Ad\u0131m 3: Script'i &Ccedil;al\u0131\u015ft\u0131r\u0131n<\/h3>\r\n<pre><code class=\"language-powershell\"># &Ouml;rnek kullan\u0131m\r\n.\\Get-UserLicenseReport.ps1\r\n\r\n# Parametrelerle kullan\u0131m\r\n.\\Get-UserLicenseReport.ps1 -OutputPath \"C:\\Reports\"\r\n\r\n# Yard\u0131m i&ccedil;in\r\nGet-Help .\\Get-UserLicenseReport.ps1 -Detailed\r\n<\/code><\/pre>\r\n<h2>\ud83d\udd27 &Ouml;rnek Senaryolar<\/h2>\r\n<h3>Senaryo 1: Lisans S&uuml;re Sonu Raporu<\/h3>\r\n<pre><code class=\"language-powershell\"># 30 g&uuml;n i&ccedil;inde s&uuml;resi dolacak lisanslar\u0131 listele\r\n.\\Get-ExpiringLicenses.ps1 -Days 30 -SendEmail\r\n\r\n# Otomasyonla g&uuml;nl&uuml;k kontrol\r\n# Task Scheduler ile her g&uuml;n 09:00'da &ccedil;al\u0131\u015ft\u0131r\r\n<\/code><\/pre>\r\n<h3>Senaryo 2: MFA Kullan\u0131m Raporu<\/h3>\r\n<pre><code class=\"language-powershell\"># MFA etkin olmayan kullan\u0131c\u0131lar\u0131 tespit et\r\n.\\Get-MFAStatus.ps1 -OnlyDisabled -Export\r\n\r\n# Y&ouml;netici bilgilendirme emaili g&ouml;nder\r\n.\\Get-MFAStatus.ps1 -OnlyDisabled -NotifyAdmins\r\n<\/code><\/pre>\r\n<h3>Senaryo 3: Inactive User Cleanup<\/h3>\r\n<pre><code class=\"language-powershell\"># 90 g&uuml;n oturum a&ccedil;mayan kullan\u0131c\u0131lar\u0131 listele\r\n.\\Get-InactiveUsers.ps1 -Days 90\r\n\r\n# Lisanslar\u0131 otomatik kald\u0131r\r\n.\\Get-InactiveUsers.ps1 -Days 90 -RemoveLicense -WhatIf\r\n<\/code><\/pre>\r\n<h2>\ud83d\udcc8 Best Practices<\/h2>\r\n<h3>1. Test Ortam\u0131nda Deneyin<\/h3>\r\n<p>&Ouml;nce test tenant'\u0131n\u0131zda scriptleri deneyin. <code>-WhatIf<\/code> parametresini kullanarak de\u011fi\u015fiklikleri &ouml;nizleyin.<\/p>\r\n<h3>2. Yedekleme Al\u0131n<\/h3>\r\n<p>Toplu de\u011fi\u015fikliklerden &ouml;nce mutlaka CSV export al\u0131n:<\/p>\r\n<pre><code class=\"language-powershell\">.\\Get-AllUsers.ps1 -Export -BackupPath \"C:\\Backups\"\r\n<\/code><\/pre>\r\n<h3>3. Loglama Aktif Edin<\/h3>\r\n<pre><code class=\"language-powershell\"># Detayl\u0131 log tutun\r\n.\\Script.ps1 -Verbose -LogPath \"C:\\Logs\"\r\n<\/code><\/pre>\r\n<h3>4. G&uuml;venli Credential Y&ouml;netimi<\/h3>\r\n<pre><code class=\"language-powershell\"># Credential'lar\u0131 g&uuml;venli saklay\u0131n\r\n$cred = Get-Credential\r\n$cred | Export-Clixml -Path \"C:\\Secure\\cred.xml\"\r\n\r\n# Kullan\u0131rken\r\n$cred = Import-Clixml -Path \"C:\\Secure\\cred.xml\"\r\n<\/code><\/pre>\r\n<h3>5. Periyodik Raporlama<\/h3>\r\n<p>Task Scheduler ile otomatikle\u015ftirin:<\/p>\r\n<pre><code class=\"language-powershell\"># Haftal\u0131k rapor i&ccedil;in\r\n$action = New-ScheduledTaskAction -Execute 'PowerShell.exe' `\r\n    -Argument '-File \"C:\\Scripts\\WeeklyReport.ps1\"'\r\n$trigger = New-ScheduledTaskTrigger -Weekly -At 9am -DaysOfWeek Monday\r\nRegister-ScheduledTask -TaskName \"M365WeeklyReport\" -Action $action -Trigger $trigger\r\n<\/code><\/pre>\r\n<h2>\ud83c\udf1f Community ve Destek<\/h2>\r\n<h3>GitHub Issues<\/h3>\r\n<p>Sorunlar\u0131n\u0131z\u0131 ve &ouml;nerilerinizi GitHub Issues b&ouml;l&uuml;m&uuml;nde payla\u015f\u0131n. Active bir community taraf\u0131ndan destekleniyor.<\/p>\r\n<h3>Contribution<\/h3>\r\n<ul>\r\n<li>Pull request g&ouml;nderin<\/li>\r\n<li>Yeni scriptler ekleyin<\/li>\r\n<li>Mevcut scriptleri geli\u015ftirin<\/li>\r\n<li>Dok&uuml;mantasyona katk\u0131da bulunun<\/li>\r\n<\/ul>\r\n<h3>Blog ve Dok&uuml;mantasyon<\/h3>\r\n<p>Her script i&ccedil;in detayl\u0131 blog yaz\u0131lar\u0131 mevcut. Ad\u0131m ad\u0131m kullan\u0131m k\u0131lavuzlar\u0131 ve real-world senaryolar.<\/p>\r\n<h2>\ud83c\udf81 Bonus: Demo ve Deneyim<\/h2>\r\n<p>AdminDroid'in t&uuml;m &ouml;zelliklerini deneyimlemek i&ccedil;in:<\/p>\r\n<ul>\r\n<li><strong>Demo:<\/strong> <a href=\"https:\/\/demo.admindroid.com\/\">https:\/\/demo.admindroid.com<\/a><\/li>\r\n<li><strong>Download:<\/strong> <a href=\"https:\/\/admindroid.com\/download?src=GitHub\">AdminDroid Microsoft 365 Tool<\/a><\/li>\r\n<\/ul>\r\n<h2>\ud83d\udd12 G&uuml;venlik Notlar\u0131<\/h2>\r\n<ul>\r\n<li>Scriptler read-only i\u015flemler i&ccedil;in g&uuml;venlidir<\/li>\r\n<li>Write i\u015flemlerinde <code>-WhatIf<\/code> kullan\u0131n<\/li>\r\n<li>Credential'lar\u0131 asla script i&ccedil;ine hardcode etmeyin<\/li>\r\n<li>Least privilege prensibini uygulay\u0131n<\/li>\r\n<li>Audit loglar\u0131n\u0131 d&uuml;zenli kontrol edin<\/li>\r\n<\/ul>\r\n<h2>\ud83d\udcca Sonu&ccedil;<\/h2>\r\n<p><strong>admindroid-community\/powershell-scripts<\/strong> repository'si, Microsoft 365 y&ouml;netimi i&ccedil;in vazge&ccedil;ilmez bir kaynak. 100'den fazla haz\u0131r script, detayl\u0131 dok&uuml;mantasyon ve active community deste\u011fi ile:<\/p>\r\n<p>\u2705 Zaman tasarrufu sa\u011flar \u2705 Hata oran\u0131n\u0131 azalt\u0131r \u2705 Uyumlulu\u011fu kolayla\u015ft\u0131r\u0131r \u2705 G&uuml;venli\u011fi art\u0131r\u0131r \u2705 Maliyetleri d&uuml;\u015f&uuml;r&uuml;r<\/p>\r\n<p>&Uuml;cretsiz, a&ccedil;\u0131k kaynak ve s&uuml;rekli g&uuml;ncellenen bu koleksiyon, her IT y&ouml;neticisinin toolbox'\u0131nda olmas\u0131 gereken bir ara&ccedil; seti.<\/p>\r\n<hr>\r\n<p><strong>Hemen Ba\u015flay\u0131n:<\/strong> <a href=\"https:\/\/github.com\/admindroid-community\/powershell-scripts\">GitHub Repository<\/a><\/p>\r\n<p><strong>Daha Fazla Bilgi:<\/strong> <a href=\"https:\/\/admindroid.com\/\">AdminDroid Website<\/a><\/p>\r\n<p><em>Microsoft 365 y&ouml;netimini bir sonraki seviyeye ta\u015f\u0131y\u0131n!<\/em> \ud83d\ude80<\/p>","excerpt":"Microsoft 365 ortamlar\u0131n\u0131 y\u00f6netmek, raporlamak ve denetlemek i\u00e7in tasarlanm\u0131\u015f 100'den fazla haz\u0131r PowerShell scripti i\u00e7eren kapsaml\u0131 bir GitHub repository'si ile tan\u0131\u015f\u0131n","created_at":"2025-09-29 23:13:10","updated_at":"2026-09-07 09:46:39","category_id":6,"view_count":583,"reading_time":6,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-09-29 23:13:10","featured_image":"resimyok.jpg","slug":"admindroid-powershell-scripts","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":18,"title":"\u0130\u015fletim sistemi se\u00e7im anahtar\u0131","content":"<p>Bilgisayarda hem Linux hem Windows kurulu olmas\u0131 (dual boot) ger&ccedil;ekten &ccedil;ok pratik - iki i\u015fletim sisteminin avantajlar\u0131ndan da yararlanabiliyorsunuz. Ama bu durumda beni s&uuml;rekli sinir eden bir \u015fey var.<\/p>\n<p>Linux'u a&ccedil;mak istedi\u011fimde i\u015fler &ccedil;ok basit: g&uuml;&ccedil; tu\u015funa bas\u0131yorum ve ba\u015fka hi&ccedil;bir \u015fey yapmama gerek yok, sistem otomatik olarak Linux'u a&ccedil;\u0131yor.<\/p>\n<p>Ama Windows'u a&ccedil;mak istedi\u011fimde tam bir dram ya\u015fan\u0131yor! GRUB men&uuml;s&uuml; ekranda sadece birka&ccedil; saniye g&ouml;r&uuml;n&uuml;yor ve ben de o k\u0131sa s&uuml;re i&ccedil;inde klavyeye tam zaman\u0131nda basmak zorunday\u0131m. Yoksa sistem otomatik olarak Linux'u a&ccedil;\u0131yor. Bu ger&ccedil;ekten can s\u0131k\u0131c\u0131 bir durum.\"<\/p>\n<p>Yani k\u0131sacas\u0131: Linux a&ccedil;mak kolay ve otomatik, Windows a&ccedil;mak i&ccedil;in ise h\u0131zl\u0131 reflekslere ihtiya&ccedil; var!<\/p>\n<p>Bu proje, Linux ve Windows dual-boot sistemlerinde hangi i\u015fletim sisteminin ba\u015flat\u0131laca\u011f\u0131n\u0131 se&ccedil;mek i&ccedil;in fiziksel bir anahtar kullanan &ccedil;ok yarat\u0131c\u0131 bir donan\u0131m &ccedil;&ouml;z&uuml;m&uuml;<\/p>\n<h2>&Ccedil;al\u0131\u015fma Prensibi<\/h2>\n<h3>1. <strong>USB Mass Storage Em&uuml;lasyonu<\/strong><\/h3>\n<ul>\n<li>STM32 mikrodenetleyici, bilgisayara USB bellek olarak g&ouml;r&uuml;n&uuml;yor<\/li>\n<li>Ger&ccedil;ek depolama alan\u0131 yok, sadece sanal dosya sistemi (FAT12)<\/li>\n<li>Anahtar\u0131n pozisyonunu i&ccedil;eren bir dosya (<code>switch_position<\/code>) dinamik olarak olu\u015fturuluyor<\/li>\n<\/ul>\n<p><img src=\"..\/..\/..\/wp-content\/uploads\/2025\/07\/1.png\" alt=\"\" width=\"671\" height=\"378\"> <img src=\"..\/..\/..\/wp-content\/uploads\/2025\/07\/2-1.png\" alt=\"\" width=\"662\" height=\"374\"><\/p>\n<h3><strong>GRUB Entegrasyonu<\/strong><\/h3>\n<p>GRUB boot loader'\u0131 \u015fu ad\u0131mlar\u0131 takip ediyor:<\/p>\n<pre data-enlighter-language=\"generic\"># Sabit filesystem ID ile cihaz\u0131 arar search --no-floppy --fs-uuid --set hdswitch 55AA-6922 # Bulunursa, dinamik config dosyas\u0131n\u0131 okur source ($hdswitch)\/switch_position_grub.cfg # Anahtar pozisyonuna g&ouml;re i\u015fletim sistemi se&ccedil;er if ; then set default=\"0\" # Linux elif ; then set default=\"2\" # Windows fi<\/pre>\n<h3><strong>Donan\u0131m<\/strong><\/h3>\n<ul>\n<li><strong>Mikrodenetleyici<\/strong>: STM32F103 \"Blue Pill\" (USB destekli)<\/li>\n<li><strong>Anahtar<\/strong>: Basit bir toggle switch<\/li>\n<li><strong>Ba\u011flant\u0131<\/strong>: GPIO pin'i anahtarla ground'a ba\u011flan\u0131yor<\/li>\n<li><strong>Pull-up<\/strong>: Internal pull-up kullan\u0131l\u0131yor<\/li>\n<\/ul>\n<h3><strong>Yaz\u0131l\u0131m Katmanlar\u0131<\/strong><\/h3>\n<ol>\n<li><strong>USB Descriptors<\/strong>: Mass storage class olarak tan\u0131mlan\u0131yor<\/li>\n<li><strong>SCSI Protokol&uuml;<\/strong>: libopencm3'&uuml;n built-in implementasyonu<\/li>\n<li><strong>FAT12 Filesystem<\/strong>: Sanal dosya sistemi olu\u015fturuluyor<\/li>\n<li><strong>GRUB Script<\/strong>: Boot se&ccedil;imi yap\u0131l\u0131yor<\/li>\n<\/ol>\n<h3><strong>Sanal Dosya Sistemi<\/strong><\/h3>\n<pre data-enlighter-language=\"generic\">struct VirtualFile { char* longName; struct FatDirEntry dir; void (*read) (uint8_t* output); }; static void readSwitch(uint8_t* output) { output = gpio_get(GPIOA, GPIO6) ? '1' : '0'; }<\/pre>\n<h2>Kurulum<\/h2>\n<h3>Donan\u0131m Kurulumu<\/h3>\n<ul>\n<li>STM32 board'\u0131n\u0131 USB'ye ba\u011fla<\/li>\n<li>Toggle switch'i GPIO pin'ine ba\u011fla<\/li>\n<li>Cihaz\u0131 masan\u0131n alt\u0131na monte et<\/li>\n<\/ul>\n<h3>Yaz\u0131l\u0131m Kurulumu<\/h3>\n<ol>\n<li>GitHub'dan kodu indir: <code>github.com\/stecman\/hw-boot-selection<\/code><\/li>\n<li>libopencm3 ile derle<\/li>\n<li>STM32'ye y&uuml;kle<\/li>\n<li><code>\/etc\/grub.d\/00_header<\/code> dosyas\u0131n\u0131 d&uuml;zenle<\/li>\n<li><code>update-grub<\/code> komutunu &ccedil;al\u0131\u015ft\u0131r<\/li>\n<\/ol>\n<p>Masa alt\u0131na monte edilen bu k&uuml;&ccedil;&uuml;k cihaz sayesinde, art\u0131k boot i\u015flemi tamamen otomatik. Hangi i\u015fletim sistemini kullanmak istiyorsa anahtar\u0131 o pozisyona getiriyor ve bilgisayar\u0131 a&ccedil;\u0131yor. GRUB men&uuml;s&uuml;yle u\u011fra\u015fmaya gerek kalm\u0131yor.<\/p>","excerpt":"Bilgisayarda hem Linux hem Windows kurulu olmas\u0131 (dual boot) ger\u00e7ekten \u00e7ok pratik - iki i\u015fletim sisteminin avantajlar\u0131ndan da...","created_at":"2025-07-25 21:53:12","updated_at":"2026-09-06 23:51:23","category_id":14,"view_count":798,"reading_time":3,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-07-25 21:53:12","featured_image":"resimyok.jpg","slug":"isletim-sistemi-secim-anahtari","category_name":"Film\/Kitap\/Hobi","category_slug":"film-kitap-hobi","category_color":"#ec4899"},{"id":38,"title":"Siber G\u00fcvenlik Analistleri i\u00e7in Vazge\u00e7ilmez Windows Komutlar\u0131","content":"<p>Siber g&uuml;venlik d&uuml;nyas\u0131nda, grafik aray&uuml;zlerin (GUI) rahatl\u0131\u011f\u0131na ra\u011fmen, komut sat\u0131r\u0131 hala bir analistin en g&uuml;&ccedil;l&uuml; silahlar\u0131ndan biridir. Windows komutlar\u0131, bir sistemin derinliklerine inmek, anormallikleri tespit etmek, a\u011f trafi\u011fini analiz etmek ve bir g&uuml;venlik olay\u0131na m&uuml;dahale etmek i&ccedil;in h\u0131zl\u0131, etkili ve vazge&ccedil;ilmez bir yol sunar. <a href=\"https:\/\/cmd-test.site\" target=\"_blank\" rel=\"noopener\">cmd-test.site<\/a> adresinde bu komutlar\u0131 simile edebilirsiniz. Bu kapsaml\u0131 rehber, bir g&uuml;venlik analistinin bilmesi gereken temel Windows komutlar\u0131n\u0131 kategorilere ay\u0131rarak sunmaktad\u0131r. \u0130ster yeni ba\u015fl\u0131yor olun, ister bilgilerinizi tazelemek isteyin, bu liste sizin i&ccedil;in bir ba\u015fvuru kayna\u011f\u0131 olacakt\u0131r.<\/p>\r\n<h2>1. Sistem Bilgileri ve Yap\u0131land\u0131rma<\/h2>\r\n<p><img src=\"..\/..\/..\/wp-content\/uploads\/2025\/06\/whoami.png\" alt=\"\" width=\"954\" height=\"350\"> Bir sistemi analiz etmeye ba\u015flarken ilk ad\u0131m, ne ile kar\u015f\u0131 kar\u015f\u0131ya oldu\u011funuzu anlamakt\u0131r. Bu komutlar, i\u015fletim sistemi, donan\u0131m ve temel yap\u0131land\u0131rma hakk\u0131nda kritik bilgiler sa\u011flar <strong><code>systeminfo<\/code><\/strong>: \u0130\u015fletim sistemi yap\u0131land\u0131rmas\u0131, donan\u0131m detaylar\u0131 ve y&uuml;kl&uuml; yamalar (hotfix'ler) hakk\u0131nda ayr\u0131nt\u0131l\u0131 bilgi g&ouml;r&uuml;nt&uuml;ler. H\u0131zl\u0131 bir &ouml;zet i&ccedil;in: <strong>systeminfo | findstr \/B \/C:\"OS Name\" \/C:\"OS Version\" \/C:\"System Type\"<\/strong> Uzak bir sistemi sorgulamak i&ccedil;in: <strong>systeminfo \/s <\/strong> <strong><code>whoami<\/code><\/strong>: Mevcut kullan\u0131c\u0131 ba\u011flam\u0131n\u0131 g&ouml;sterir. Kullan\u0131c\u0131n\u0131n grup &uuml;yeliklerini g&ouml;rmek i&ccedil;in: <strong>whoami \/groups<\/strong> Kullan\u0131c\u0131 ayr\u0131cal\u0131klar\u0131n\u0131 de\u011ferlendirmek i&ccedil;in (genellikle y&ouml;netici yetkisi gerekir): <strong><code>whoami \/priv<\/code><\/strong> Kullan\u0131c\u0131, gruplar ve ayr\u0131cal\u0131klar hakk\u0131nda t&uuml;m bilgileri bir arada g&ouml;rmek i&ccedil;in: <strong>whoami \/all<\/strong> <strong><code>hostname<\/code><\/strong>: Bilgisayar\u0131n ana bilgisayar ad\u0131n\u0131 g&ouml;r&uuml;nt&uuml;ler. <strong><code>ver \/ winver<\/code><\/strong>: Windows s&uuml;r&uuml;m&uuml;n&uuml; g&ouml;sterir. <strong><code>ver<\/code><\/strong> komut sat\u0131r\u0131 s&uuml;r&uuml;m&uuml;n&uuml; <code><strong>winver<\/strong> ise yap\u0131 numaras\u0131n\u0131 i&ccedil;eren bir grafik aray&uuml;z penceresi a&ccedil;ar<\/code> <strong><code>getmac<\/code><\/strong>: Cihaz\u0131n MAC adresini veya adreslerini listeler <strong><code>getmac \/v<\/code><\/strong> komutu, adapt&ouml;r ad\u0131yla birlikte daha ayr\u0131nt\u0131l\u0131 bilgi verir. <strong><code>bcdedit<\/code><\/strong>: &Ouml;ny&uuml;kleme Yap\u0131land\u0131rma Verilerini (Boot Configuration Data) y&ouml;netir. Ola\u011fand\u0131\u015f\u0131 &ouml;ny&uuml;kleme giri\u015flerini kontrol etmek i&ccedil;in <code><strong>bcdedit \/enum all<\/strong><\/code> kullan\u0131labilir (Y&ouml;netici Yetkisi Gerekir) <strong><code>driverquery<\/code><\/strong>: Y&uuml;kl&uuml; ayg\u0131t s&uuml;r&uuml;c&uuml;lerinin bir listesini sunar. \u0130mzal\u0131 s&uuml;r&uuml;c&uuml;leri g&ouml;rmek i&ccedil;in <code>\/si<\/code> , imza bilgileri gibi detaylar\u0131 g&ouml;rmek i&ccedil;in <code>\/v<\/code> parametresi kullan\u0131l\u0131r <code>msinfo32 \/report C:\\temp\\sysinfo.txt<\/code> komutu kullan\u0131labilir. <strong><code>wmic<\/code><\/strong>: Windows Y&ouml;netim Ara&ccedil;lar\u0131 Komut Sat\u0131r\u0131. Art\u0131k kullan\u0131mdan kalkmakta ve yerini PowerShell'in <code>Get-CimInstance<\/code> komutuna b\u0131rakmakta olsa da hala yayg\u0131n olarak kullan\u0131lmaktad\u0131r. \u0130\u015fletim sistemi bilgilerini almak i&ccedil;in: <strong>wmic os get Caption, Version, BuildNumber, OSArchitecture.<\/strong> Y&uuml;kl&uuml; yaz\u0131l\u0131mlar\u0131 listelemek i&ccedil;in: <strong>wmic product get name, version<\/strong> Y&uuml;kl&uuml; yamalar\u0131 (Quick Fix Engineering) listelemek i&ccedil;in <strong>wmic qfe list brief<\/strong> <strong><code>powercfg<\/code><\/strong>: G&uuml;&ccedil; ayarlar\u0131n\u0131 y&ouml;netir. Kullan\u0131labilir uyku durumlar\u0131n\u0131 g&ouml;sterir: <strong><code>powercfg \/a<\/code><\/strong> Sistemi en son neyin uyand\u0131rd\u0131\u011f\u0131n\u0131 g&ouml;sterir: <code>powercfg \/lastwake<\/code> <strong><code>set<\/code><\/strong>: Ortam de\u011fi\u015fkenlerini g&ouml;r&uuml;nt&uuml;ler, ayarlar veya kald\u0131r\u0131r &nbsp;<\/p>\r\n<h2>2. A\u011f Analizi<\/h2>\r\n<p><img src=\"..\/..\/..\/wp-content\/uploads\/2025\/06\/ipconfigall.png\" alt=\"\" width=\"973\" height=\"456\"> A\u011f ba\u011flant\u0131lar\u0131n\u0131, yap\u0131land\u0131rmalar\u0131 ve olas\u0131 sorunlar\u0131 anlamak, g&uuml;venlik analizinin temel ta\u015flar\u0131ndan biridir. ipconfig: IP yap\u0131land\u0131rmas\u0131n\u0131 g&ouml;r&uuml;nt&uuml;ler. Detayl\u0131 bilgi (MAC, DNS, DHCP dahil) i&ccedil;in: ipconfig \/all DNS &ccedil;&ouml;z&uuml;mleyici &ouml;nbelle\u011fini g&ouml;r&uuml;nt&uuml;lemek i&ccedil;in: <strong>ipconfig \/displaydns.<\/strong> DNS &ouml;nbelle\u011fini temizlemek i&ccedil;in (Y&ouml;netici Yetkisi Gerekir): <strong>ipconfig \/flushdns.<\/strong> <strong>ping<\/strong>: ICMP yank\u0131 istekleri kullanarak a\u011f ba\u011flant\u0131s\u0131n\u0131 test eder. <strong>ping -t<\/strong> komutu durdurulana kadar s&uuml;rekli ping atar. <strong>netstat<\/strong>: A\u011f ba\u011flant\u0131lar\u0131n\u0131, dinleme portlar\u0131n\u0131 ve istatistikleri g&ouml;sterir. En kullan\u0131\u015fl\u0131 parametrelerden biri: <strong>netstat -ano<\/strong> TCP\/UDP portlar\u0131n\u0131, IP adreslerini, dinleme durumlar\u0131n\u0131 ve ili\u015fkili i\u015flem kimli\u011fini (PID) g&ouml;sterir. \u0130\u015flem ad\u0131n\u0131 da g&ouml;rmek i&ccedil;in (Y&ouml;netici Yetkisi Gerekir): <strong>netstat -anob<\/strong> <img src=\"..\/..\/..\/wp-content\/uploads\/2025\/06\/netstat-anob.png\" alt=\"\" width=\"953\" height=\"225\"> Y&ouml;nlendirme tablosunu g&ouml;stermek i&ccedil;in: <strong>netstat -r<\/strong> <img src=\"..\/..\/..\/wp-content\/uploads\/2025\/06\/netstat-r.png\" alt=\"\" width=\"947\" height=\"177\"> <strong>tracert<\/strong>: Bir hedefe giden rota &uuml;zerindeki atlamalar\u0131 (hops) izler. <strong>pathping<\/strong>: ping ve tracert komutlar\u0131n\u0131 birle\u015ftirerek her atlamadaki gecikme ve paket kayb\u0131n\u0131 g&ouml;sterir. <strong>nslookup<\/strong>: DNS sunucular\u0131n\u0131 sorgulamak i&ccedil;in kullan\u0131l\u0131r. <strong>nslookup -type=mx google.com<\/strong> gibi komutlarla belirli kay\u0131t t&uuml;rleri (&ouml;rne\u011fin, Mail Exchange) sorgulanabilir. <strong>arp<\/strong>: Adres &Ccedil;&ouml;z&uuml;mleme Protokol&uuml; (ARP) &ouml;nbelle\u011fini (IP-MAC e\u015fle\u015ftirmesi) g&ouml;r&uuml;nt&uuml;ler ve de\u011fi\u015ftirir. Mevcut giri\u015fleri g&ouml;rmek i&ccedil;in <strong>arp -a<\/strong> kullan\u0131l\u0131r. <strong>netsh<\/strong>: G&uuml;&ccedil;l&uuml; bir a\u011f yap\u0131land\u0131rma arac\u0131d\u0131r. T&uuml;m g&uuml;venlik duvar\u0131 kurallar\u0131n\u0131 g&ouml;stermek i&ccedil;in: <strong>netsh advfirewall firewall show rule name=all.<\/strong> Kaydedilmi\u015f Wi-Fi profillerini listelemek i&ccedil;in: <strong>netsh wlan show profiles.<\/strong> Kaydedilmi\u015f bir Wi-Fi \u015fifresini g&ouml;rmek i&ccedil;in (Y&ouml;netici Yetkisi Gerekir): <strong>netsh wlan show profile name=\"ProfilAd\u0131\" key=clear.<\/strong> <strong>route<\/strong>: Yerel IP y&ouml;nlendirme tablosunu g&ouml;r&uuml;nt&uuml;ler ve de\u011fi\u015ftirir. <strong>route print<\/strong> ile tabloyu g&ouml;rebilirsiniz.<\/p>\r\n<h2>3. \u0130\u015flem ve Servis Y&ouml;netimi<\/h2>\r\n<p>Sistemde hangi i\u015flemlerin ve servislerin &ccedil;al\u0131\u015ft\u0131\u011f\u0131n\u0131 bilmek, zararl\u0131 yaz\u0131l\u0131m tespiti ve sistem analizi i&ccedil;in kritiktir. <strong>tasklist<\/strong>: &Ccedil;al\u0131\u015fan i\u015flemleri listeler. <img src=\"..\/..\/..\/wp-content\/uploads\/2025\/06\/tasklist.png\" alt=\"\" width=\"942\" height=\"224\"> Her i\u015flemde bar\u0131nd\u0131r\u0131lan servisleri g&ouml;rmek i&ccedil;in: <strong>tasklist \/svc<\/strong> <img src=\"..\/..\/..\/wp-content\/uploads\/2025\/06\/tasklistsvc.png\" alt=\"\" width=\"934\" height=\"210\"> Belirli bir DLL'i kullanan i\u015flemleri bulmak i&ccedil;in: <strong>tasklist \/m <\/strong> G&ouml;r&uuml;nt&uuml; ad\u0131na g&ouml;re filtrelemek i&ccedil;in: <strong>tasklist \/fi \"IMAGENAME eq chrome.exe\"<\/strong> <strong>taskkill<\/strong>: \u0130\u015flemleri sonland\u0131r\u0131r. G&ouml;r&uuml;nt&uuml; ad\u0131na g&ouml;re sonland\u0131rmak i&ccedil;in: <strong>taskkill \/IM notepad.exe<\/strong> \u0130\u015flem kimli\u011fine (PID) g&ouml;re sonland\u0131rmak i&ccedil;in: <strong>taskkill \/PID <\/strong> Bir i\u015flemi ve onun alt i\u015flemlerini zorla sonland\u0131rmak i&ccedil;in: <strong>taskkill \/T \/IM \/F<\/strong> <strong>schtasks<\/strong>: Komutlar\u0131 ve programlar\u0131 zamanlar (G&ouml;rev Zamanlay\u0131c\u0131). T&uuml;m g&ouml;revlerin ayr\u0131nt\u0131l\u0131 bir listesini <strong>schtasks \/query \/fo LIST \/v<\/strong> ile alabilirsiniz. <strong>sc<\/strong>: Windows servislerini y&ouml;neten Servis Kontrol arac\u0131d\u0131r. T&uuml;m servisleri listelemek i&ccedil;in: <strong>sc query state=all<\/strong> Bir servisin yap\u0131land\u0131rmas\u0131n\u0131 (ikili dosya yolu, ba\u011f\u0131ml\u0131l\u0131klar vb.) sorgulamak analistler i&ccedil;in &ccedil;ok &ouml;nemlidir: <strong>sc qc <\/strong> Bir servisin PID'sini &ouml;\u011frenmek i&ccedil;in: <strong>sc queryex <\/strong> <strong>net start \/ net stop<\/strong>: Servisleri ba\u015flatmak ve durdurmak i&ccedil;in sc komutuna g&ouml;re daha basit bir alternatiftir. &Ccedil;al\u0131\u015fan servisleri listelemek i&ccedil;in <strong>net start<\/strong> kullan\u0131labilir. 4. Dosya Sistemi ve Veri Y&ouml;netimi Dosya ve dizin i\u015flemleri, kan\u0131t toplama, zararl\u0131 dosyalar\u0131 izole etme ve sistem yap\u0131land\u0131rmalar\u0131n\u0131 inceleme s\u0131ras\u0131nda s\u0131k&ccedil;a kullan\u0131l\u0131r. <strong>dir<\/strong>: Dosya ve dizinleri listeler. Gizli ve sistem dosyalar\u0131n\u0131 g&ouml;rmek i&ccedil;in <strong>\/a<\/strong> , alt dizinleri de dahil etmek i&ccedil;in <strong>\/s<\/strong> kullan\u0131l\u0131r. <strong>cd<\/strong> veya <strong>chdir<\/strong>: Dizini de\u011fi\u015ftirir. <strong>type<\/strong>: Bir metin dosyas\u0131n\u0131n i&ccedil;eri\u011fini g&ouml;r&uuml;nt&uuml;ler. &Ouml;rne\u011fin, <strong>type C:\\Windows\\System32\\drivers\\etc\\hosts<\/strong> <strong>findstr<\/strong>: Dosyalarda metin dizeleri arar ve normal ifadeleri (regex) destekler. <strong>ipconfig \/all | findstr \/i \"DNS Servers\"<\/strong> gibi komutlarla bir komutun &ccedil;\u0131kt\u0131s\u0131n\u0131 filtreleyebilirsiniz. <strong>robocopy<\/strong>: xcopy'den daha g&uuml;&ccedil;l&uuml; ve tercih edilen, sa\u011flam bir dosya kopyalama arac\u0131d\u0131r. <strong>\/MIR<\/strong> anahtar\u0131 bir dizini aynalar, ancak dikkatli kullan\u0131lmal\u0131d\u0131r &ccedil;&uuml;nk&uuml; hedefte olup kaynakta olmayan dosyalar\u0131 siler. <strong>attrib<\/strong>: Dosya &ouml;zniteliklerini (gizli, salt okunur vb.) g&ouml;r&uuml;nt&uuml;ler veya de\u011fi\u015ftirir. Bir dosyay\u0131 gizlemek i&ccedil;in <strong>attrib +h <\/strong> kullan\u0131labilir. <strong>icacls<\/strong>: Dosya ve klas&ouml;rlerin Eri\u015fim Kontrol Listelerini (izinlerini) g&ouml;r&uuml;nt&uuml;ler veya de\u011fi\u015ftirir. \u0130zinleri g&ouml;r&uuml;nt&uuml;lemek i&ccedil;in <strong>icacls <\/strong> yeterlidir. <strong>takeown<\/strong>: Bir y&ouml;neticinin bir dosya veya klas&ouml;r&uuml;n sahipli\u011fini almas\u0131n\u0131 sa\u011flar (Y&ouml;netici Yetkisi Gerekir).<\/p>\r\n<h2>5. Kullan\u0131c\u0131, Grup ve \u0130lke Y&ouml;netimi<\/h2>\r\n<p>Kullan\u0131c\u0131 hesaplar\u0131n\u0131, grup &uuml;yeliklerini ve uygulanan grup ilkelerini analiz etmek, yetkisiz eri\u015fimi ve g&uuml;venlik yap\u0131land\u0131rma hatalar\u0131n\u0131 tespit etmede hayati &ouml;nem ta\u015f\u0131r. <strong>net user<\/strong>: Yerel veritaban\u0131ndaki veya etki alan\u0131ndaki kullan\u0131c\u0131 hesaplar\u0131n\u0131 y&ouml;netir. Yerel kullan\u0131c\u0131lar\u0131 listelemek i&ccedil;in <strong>net user<\/strong> , bir kullan\u0131c\u0131y\u0131 devre d\u0131\u015f\u0131 b\u0131rakmak i&ccedil;in <strong>net user \/active:no<\/strong> kullan\u0131l\u0131r (Y&ouml;netici Yetkisi Gerekir). <strong>net localgroup<\/strong>: Yerel gruplar\u0131 y&ouml;netir. Y&ouml;neticiler grubunun &uuml;yelerini listelemek i&ccedil;in <strong>net localgroup Administrators<\/strong> komutu kullan\u0131l\u0131r. <strong>gpupdate<\/strong>: Grup \u0130lkesi ayarlar\u0131n\u0131 g&uuml;nceller. T&uuml;m ilkelerin yeniden uygulanmas\u0131n\u0131 zorlamak i&ccedil;in <strong>gpupdate \/force<\/strong> kullan\u0131l\u0131r. <strong>gpresult<\/strong>: Uygulanan Grup \u0130lkesi sonu&ccedil;lar\u0131n\u0131 (Resultant Set of Policy - RSoP) g&ouml;sterir. <strong>gpresult \/r<\/strong> komutu, mevcut kullan\u0131c\u0131 ve bilgisayar i&ccedil;in &ouml;zet verileri sunar. <strong>runas<\/strong>: Bir program\u0131 farkl\u0131 bir kullan\u0131c\u0131 olarak &ccedil;al\u0131\u015ft\u0131r\u0131r.<\/p>\r\n<h2>6. Olay G&uuml;nl&uuml;\u011f&uuml; Y&ouml;netimi<\/h2>\r\n<p>Olay g&uuml;nl&uuml;kleri (Event Logs), bir sistemde olan biten her \u015feyin kayd\u0131n\u0131 tutar ve bir g&uuml;venlik olay\u0131 incelemesinin en zengin bilgi kaynaklar\u0131ndan biridir. <strong>wevtutil<\/strong>: Olay g&uuml;nl&uuml;klerini y&ouml;netmek i&ccedil;in kullan\u0131lan g&uuml;&ccedil;l&uuml; bir komut sat\u0131r\u0131 arac\u0131d\u0131r. T&uuml;m olay g&uuml;nl&uuml;klerini listelemek i&ccedil;in: <strong>wevtutil el<\/strong> G&uuml;venlik g&uuml;nl&uuml;\u011f&uuml;ndeki en yeni 10 olay\u0131 metin format\u0131nda sorgulamak i&ccedil;in: <strong>wevtutil qe Security \/c:10 \/rd:true \/f:text<\/strong> Bir g&uuml;nl&uuml;\u011f&uuml; yedeklemek i&ccedil;in: <strong>wevtutil epl Security C:\\Backup\\SecurityLog.evtx<\/strong> Bir g&uuml;nl&uuml;\u011f&uuml; temizlemek (D\u0130KKAT: Kan\u0131tlar\u0131 siler!): <strong>wevtutil cl Security<\/strong> <strong>eventvwr<\/strong>: Olay G&ouml;r&uuml;nt&uuml;leyicisi GUI'sini a&ccedil;ar<\/p>\r\n<h2>7. G&uuml;venlik Denetim Ara&ccedil;lar\u0131<\/h2>\r\n<p>Bu ara&ccedil;lar, sistem b&uuml;t&uuml;nl&uuml;\u011f&uuml;n&uuml; kontrol etmek, denetim ilkelerini y&ouml;netmek ve sald\u0131rganlar taraf\u0131ndan k&ouml;t&uuml;ye kullan\u0131labilecek servisleri izlemek i&ccedil;in kullan\u0131l\u0131r. <strong>sfc<\/strong>: Sistem Dosyas\u0131 Denetleyicisi. Korunan sistem dosyalar\u0131n\u0131 tarar ve onar\u0131r (Y&ouml;netici Yetkisi Gerekir). <strong>sfc \/scannow<\/strong> komutu tam bir tarama ve onar\u0131m yapar. <strong>auditpol<\/strong>: Denetim ilkelerini y&ouml;netir (Y&ouml;netici Yetkisi Gerekir). Mevcut ayarlar\u0131 g&ouml;rmek i&ccedil;in <strong>auditpol \/get \/category:*<\/strong> kullan\u0131l\u0131r. <strong>bitsadmin<\/strong>: Arka Plan Ak\u0131ll\u0131 Aktar\u0131m Hizmeti (BITS) i\u015flerini y&ouml;netir. Genellikle zararl\u0131 yaz\u0131l\u0131mlar taraf\u0131ndan k&ouml;t&uuml;ye kullan\u0131ld\u0131\u011f\u0131 i&ccedil;in <strong>bitsadmin \/list \/allusers<\/strong> komutuyla t&uuml;m kullan\u0131c\u0131lar\u0131n i\u015flerini listelemek &ouml;nemlidir. <strong>certutil<\/strong>: Sertifikalar\u0131 y&ouml;netir ancak sald\u0131rganlar taraf\u0131ndan dosya indirme veya kodlama gibi &ccedil;e\u015fitli ama&ccedil;larla da kullan\u0131l\u0131r. En kullan\u0131\u015fl\u0131 &ouml;zelliklerinden biri: Bir dosyan\u0131n hash de\u011ferini hesaplamak i&ccedil;in: certutil -hashfile SHA256. Sald\u0131rganlar taraf\u0131ndan dosya indirmek i&ccedil;in kullan\u0131labilir: <strong>certutil -urlcache -split -f &lt;&ccedil;\u0131kt\u0131_dosyas\u0131&gt;<\/strong> <strong>fltmc<\/strong>: Filtre s&uuml;r&uuml;c&uuml;s&uuml; y&ouml;neticisidir (Y&ouml;netici Yetkisi Gerekir). fltmc filters komutu, y&uuml;kl&uuml; olan ve potansiyel olarak \u015f&uuml;pheli olabilecek dosya sistemi filtre s&uuml;r&uuml;c&uuml;lerini listeler.<\/p>\r\n<h2>8. PowerShell: Modern Standart<\/h2>\r\n<p>PowerShell, komut sat\u0131r\u0131 kabu\u011fu ve betik dilini bir araya getiren g&uuml;&ccedil;l&uuml; bir otomasyon ve yap\u0131land\u0131rma y&ouml;netimi &ccedil;er&ccedil;evesidir. Modern Windows y&ouml;netimi ve g&uuml;venlik analizi i&ccedil;in vazge&ccedil;ilmezdir. \u0130\u015fte baz\u0131 temel cmdlet (komut-let) &ouml;rnekleri: &nbsp; \u0130\u015flem Y&ouml;netimi: <strong>Get-Process<\/strong> (tasklist gibi), Stop-Process -Id -Force (taskkill gibi) Servis Y&ouml;netimi: <strong>Get-Service, Start-Service , Stop-Service <\/strong> A\u011f Y&ouml;netimi: <strong>Get-NetIPConfiguration (ipconfig \/all gibi), Test-NetConnection -Port , Get-NetTCPConnection<\/strong> (netstat -ano gibi) Olay G&uuml;nl&uuml;\u011f&uuml;: <strong>Get-WinEvent -LogName Security -MaxEvents<\/strong> 10 Sistem Bilgisi: <strong>Get-ComputerInfo<\/strong>,<strong> Get-HotFix<\/strong> (yamalar). <strong>WMI\/CIM: Get-CimInstance -ClassName Win32_OperatingSystem<\/strong> (bir&ccedil;ok wmic kullan\u0131m\u0131n\u0131n modern alternatifi).<\/p>\r\n<h2>9. Yard\u0131mc\u0131 Komutlar ve GUI K\u0131sayollar\u0131<\/h2>\r\n<p>Analiz s&uuml;recini h\u0131zland\u0131ran baz\u0131 temel yard\u0131mc\u0131lar: <strong>clip<\/strong>: Bir komutun &ccedil;\u0131kt\u0131s\u0131n\u0131 do\u011frudan Windows panosuna kopyalar. &Ouml;rne\u011fin: <strong>ipconfig \/all | clip<\/strong> <strong>shutdown<\/strong>: Bilgisayar\u0131 kapat\u0131r veya yeniden ba\u015flat\u0131r. <strong>shutdown \/r \/t 0<\/strong> komutu hemen yeniden ba\u015flat\u0131r. GUI K\u0131sayollar\u0131: <strong>services.msc<\/strong>: Servisler y&ouml;netim konsolunu a&ccedil;ar. <strong>devmgmt.msc:<\/strong> Ayg\u0131t Y&ouml;neticisi'ni a&ccedil;ar. <strong>diskmgmt.msc<\/strong>: Disk Y&ouml;netimi'ni a&ccedil;ar. <strong>resmon<\/strong>: Kaynak \u0130zleyicisi'ni a&ccedil;ar. <strong>mstsc<\/strong>: Uzak Masa&uuml;st&uuml; Ba\u011flant\u0131s\u0131 istemcisini a&ccedil;ar.<\/p>\r\n<h2>10. Sysinternals Suite (\u015eiddetle Tavsiye Edilen Harici Ara&ccedil;lar)<\/h2>\r\n<p>Bunlar Windows'ta yerle\u015fik olarak gelmese de, derinlemesine analiz i&ccedil;in vazge&ccedil;ilmez kabul edilirler ve Microsoft'tan indirilebilirler. &nbsp; <strong>Autoruns\/Autorunsc<\/strong>: Kay\u0131t defteri, servisler, zamanlanm\u0131\u015f g&ouml;revler gibi t&uuml;m ba\u015flang\u0131&ccedil; konumlar\u0131n\u0131 g&ouml;sterir ve y&ouml;netir. <strong>Process Explorer (procexp.exe)<\/strong>: Geli\u015fmi\u015f bir G&ouml;rev Y&ouml;neticisi'dir. DLL'leri, i\u015flem a\u011fac\u0131n\u0131 g&ouml;sterir ve imzalar\u0131 do\u011frular. <strong>Process Monitor (procmon.exe)<\/strong>: Dosya sistemi, kay\u0131t defteri, i\u015flem ve a\u011f etkinli\u011fini ger&ccedil;ek zamanl\u0131 olarak izler. Davran\u0131\u015f analizi i&ccedil;in son derece g&uuml;&ccedil;l&uuml;d&uuml;r. <strong>Sigcheck (sigcheck.exe)<\/strong>: Dosya imzalar\u0131n\u0131, hash de\u011ferlerini kontrol eder ve VirusTotal entegrasyonu sunar. TCPView (tcpview.exe): netstat'\u0131n ger&ccedil;ek zamanl\u0131 ve grafik aray&uuml;zl&uuml; halidir. Bu komutlara hakim olmak, bir g&uuml;venlik analistinin verimlili\u011fini ve etkinli\u011fini b&uuml;y&uuml;k &ouml;l&ccedil;&uuml;de art\u0131r\u0131r. Komut sat\u0131r\u0131, bir sistemi anlamak ve korumak i&ccedil;in en do\u011frudan ve g&uuml;&ccedil;l&uuml; yollardan biri olmaya devam etmektedir.<\/p>","excerpt":"Siber g\u00fcvenlik d\u00fcnyas\u0131nda, grafik aray\u00fczlerin (GUI) rahatl\u0131\u011f\u0131na ra\u011fmen, komut sat\u0131r\u0131 hala bir analistin en g\u00fc\u00e7l\u00fc silahlar\u0131ndan biridir....","created_at":"2025-06-25 20:39:40","updated_at":"2026-09-06 11:26:06","category_id":6,"view_count":789,"reading_time":12,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-06-25 20:39:40","featured_image":"resimyok.jpg","slug":"siber-guvenlik-analistleri-icin-vazgecilmez-windows-komutlari","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":92,"title":"Her SOC Analistinin Bilmesi Gereken Windows Dizinleri","content":"Bir SOC (G\u00fcvenlik Operasyon Merkezi) analisti olarak, Windows'un kritik g\u00fcvenlik bilgilerini nerede depolad\u0131\u011f\u0131n\u0131 anlamak, bir s\u0131zma giri\u015fimini erken tespit etmek veya tamamen ka\u00e7\u0131rmak aras\u0131ndaki fark\u0131 yaratabilir. Her g\u00fcvenlik profesyonelinin radar\u0131nda olmas\u0131 gereken temel Windows dizinlerini inceleyelim. <h2>Kimlik Bilgileri ve Eri\u015fim Kay\u0131tlar\u0131<\/h2> Kullan\u0131c\u0131 kimlik bilgilerinin g\u00fcvenli\u011fi, her g\u00fcvenlik duru\u015funun temelini olu\u015fturur. Bu konumlar hassas kimlik do\u011frulama verilerini depolar: <ul> <li><strong>C:\\Windows\\System32\\config\\SAM<\/strong>: Windows'un yerel parola hash'lerini depolad\u0131\u011f\u0131 yerdir ve bu da onu kimlik bilgisi toplama sald\u0131r\u0131lar\u0131 i\u00e7in \u00f6ncelikli bir hedef haline getirir. Bu dosyaya eri\u015fen sald\u0131rganlar, \u00e7evrimd\u0131\u015f\u0131 k\u0131rma i\u015flemleri i\u00e7in parola hash'lerini \u00e7\u0131karabilir.<\/li> <li><strong>C:\\Windows\\repair\\SAM<\/strong>: Kullan\u0131c\u0131 kimlik bilgilerinin bir yede\u011fini i\u00e7erir ve sald\u0131rganlar kimlik bilgisi h\u0131rs\u0131zl\u0131\u011f\u0131 i\u00e7in alternatif bir yol olarak hedefleyebilir.<\/li> <li><strong>C:\\Windows\\System32\\config\\SECURITY<\/strong>: Sisteminizin g\u00fcvenlik s\u0131n\u0131rlar\u0131n\u0131 tan\u0131mlayan g\u00fcvenlik politikalar\u0131n\u0131 ve eri\u015fim kontrol\u00fc ayarlar\u0131n\u0131 bar\u0131nd\u0131r\u0131r.<\/li> <\/ul> <h2>Sistem ve Olay Kay\u0131tlar\u0131<\/h2> Etkili g\u00fcvenlik izleme, kapsaml\u0131 g\u00fcnl\u00fck tutmaya ba\u011fl\u0131d\u0131r. Bu dizinler kritik g\u00fcnl\u00fck verilerini i\u00e7erir: <ul> <li><strong>C:\\Windows\\System32\\winevt<\/strong>: Windows Olay G\u00fcnl\u00fcklerini depolar, bu da SIEM korelasyonu ve g\u00fcvenlik izleme i\u00e7in \u00e7ok \u00f6nemlidir. Bu, potansiyel g\u00fcvenlik olaylar\u0131n\u0131 ara\u015ft\u0131r\u0131rken genellikle ilk dura\u011f\u0131n\u0131zd\u0131r.<\/li> <li><strong>C:\\Windows\\System32\\config\\SYSTEM<\/strong>: Yetkisiz de\u011fi\u015fiklikleri g\u00f6sterebilecek sistem genelindeki de\u011fi\u015fiklikleri ve yap\u0131land\u0131rmalar\u0131 izler.<\/li> <li><strong>C:\\Windows\\System32\\config\\SOFTWARE<\/strong>: Y\u00fckl\u00fc yaz\u0131l\u0131mlar ve de\u011fi\u015fiklikler hakk\u0131nda ayr\u0131nt\u0131lar i\u00e7eren kay\u0131t defteri bilgilerini i\u00e7erir, yetkisiz yaz\u0131l\u0131m kurulumlar\u0131n\u0131 belirlemenize yard\u0131mc\u0131 olur.<\/li> <\/ul> <h2>K\u00f6t\u00fc Ama\u00e7l\u0131 Yaz\u0131l\u0131m ve Tehdit Avlama G\u00f6stergeleri<\/h2> Tehditleri ararken, bu konumlar genellikle de\u011ferli adli kan\u0131tlar sa\u011flar: <ul> <li><strong>C:\\Windows\\Prefetch<\/strong>: Son zamanlarda \u00e7al\u0131\u015ft\u0131r\u0131lan programlar\u0131 izler, bu da bir soru\u015fturma s\u0131ras\u0131nda adli zaman \u00e7izelgeleri olu\u015fturmak i\u00e7in paha bi\u00e7ilmezdir.<\/li> <li><strong>C:\\Windows\\AppCompat\\Programs\\Amcache.hve<\/strong>: \u00c7al\u0131\u015ft\u0131r\u0131lan uygulamalar\u0131n ayr\u0131nt\u0131lar\u0131n\u0131 kaydeder, sald\u0131rganlar a\u011f\u0131n\u0131zda gezinirken yanal hareketi tespit etmek i\u00e7in m\u00fckemmeldir.<\/li> <li><strong>C:\\Users*\\NTUSER.dat<\/strong>: K\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n kal\u0131c\u0131l\u0131k i\u00e7in s\u0131kl\u0131kla istismar etti\u011fi kullan\u0131c\u0131ya \u00f6zg\u00fc kay\u0131t defteri ayarlar\u0131n\u0131 i\u00e7erir.<\/li> <\/ul> <h2>Kal\u0131c\u0131l\u0131k ve Ba\u015flang\u0131\u00e7 Ara\u015ft\u0131rmalar\u0131<\/h2> K\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar genellikle sistem yeniden ba\u015flatmalar\u0131ndan sonra hayatta kalmak i\u00e7in kal\u0131c\u0131l\u0131k sa\u011flar. Bu konumlar s\u0131kl\u0131kla hedef al\u0131n\u0131r: <ul> <li><strong>C:\\Users*\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup<\/strong>: Belirli bir kullan\u0131c\u0131 oturum a\u00e7t\u0131\u011f\u0131nda programlar\u0131 ba\u015flatan kullan\u0131c\u0131ya \u00f6zg\u00fc kal\u0131c\u0131l\u0131k mekanizmalar\u0131.<\/li> <li><strong>C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup<\/strong>: T\u00fcm kullan\u0131c\u0131lar\u0131 etkileyen k\u00fcresel ba\u015flang\u0131\u00e7 klas\u00f6r\u00fc, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar taraf\u0131ndan yayg\u0131n olarak k\u00f6t\u00fcye kullan\u0131l\u0131r.<\/li> <\/ul> Bu kritik dizinleri d\u00fczenli olarak izleyerek, SOC analistleri yetkisiz eri\u015fimi, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m kurulumunu ve kal\u0131c\u0131 tehditleri daha etkili bir \u015fekilde tespit edebilir. \u0130zleme stratejinize bu konumlar\u0131 dahil etmek, g\u00fcvenlik duru\u015funuzu ve olay m\u00fcdahale yeteneklerinizi \u00f6nemli \u00f6l\u00e7\u00fcde geli\u015ftirecektir. Sald\u0131rganlar\u0131n da bu konumlar\u0131n fark\u0131nda oldu\u011funu unutmay\u0131n, bu nedenle bu dizinler i\u00e7in uygun eri\u015fim kontrollerini ve izleme \u00e7\u00f6z\u00fcmlerini uygulamak, her g\u00fcvenlik ekibi i\u00e7in bir \u00f6ncelik olmal\u0131d\u0131r. EN: <h2>Key Windows Directories Every SOC Analyst Should Monitor<\/h2> As a SOC (Security Operations Center) analyst, understanding where Windows stores critical security information can make the difference between detecting an intrusion early or missing it completely. Let's explore the essential Windows directories that should be on every security professional's radar. <h2>Credential &amp; Access Logs<\/h2> The security of user credentials forms the foundation of any security posture. These locations store sensitive authentication data: <ul> <li><strong>C:\\Windows\\System32\\config\\SAM<\/strong>: This is where Windows stores local password hashes, making it a prime target for credential dumping attacks. Attackers who gain access to this file can potentially extract password hashes for offline cracking.<\/li> <li><strong>C:\\Windows\\repair\\SAM<\/strong>: Contains a backup of user credentials that attackers may target as an alternative path to credential theft.<\/li> <li><strong>C:\\Windows\\System32\\config\\SECURITY<\/strong>: Houses security policies and access control settings that define your system's security boundaries.<\/li> <\/ul> <h2>System &amp; Event Logs<\/h2> Effective security monitoring depends on comprehensive logging. These directories contain critical log data: <ul> <li><strong>C:\\Windows\\System32\\winevt<\/strong>: Stores Windows Event Logs, which are crucial for SIEM correlation and security monitoring. This is often your first stop when investigating potential security incidents.<\/li> <li><strong>C:\\Windows\\System32\\config\\SYSTEM<\/strong>: Tracks system-wide changes and configurations that may indicate unauthorized modifications.<\/li> <li><strong>C:\\Windows\\System32\\config\\SOFTWARE<\/strong>: Contains the registry hive with details on installed software and changes, helping you identify unauthorized software installations.<\/li> <\/ul> <h2>Malware &amp; Threat Hunting Indicators<\/h2> When hunting for threats, these locations often provide valuable forensic evidence: <ul> <li><strong>C:\\Windows\\Prefetch<\/strong>: Tracks recently executed programs, which is invaluable for building forensic timelines during an investigation.<\/li> <li><strong>C:\\Windows\\AppCompat\\Programs\\Amcache.hve<\/strong>: Logs details of executed applications, making it excellent for detecting lateral movement as attackers navigate through your network.<\/li> <li><strong>C:\\Users*\\NTUSER.dat<\/strong>: Contains user-specific registry settings that malware often abuses for persistence.<\/li> <\/ul> <h2>Persistence &amp; Startup Investigations<\/h2> Malware often establishes persistence to survive system reboots. These locations are frequently targeted: <ul> <li><strong>C:\\Users*\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup<\/strong>: User-specific persistence mechanisms that launch programs when a specific user logs in.<\/li> <li><strong>C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup<\/strong>: Global startup folder affecting all users, commonly misused by malware.<\/li> <\/ul> By regularly monitoring these critical directories, SOC analysts can more effectively detect unauthorized access, malware installation, and persistent threats. Including these locations in your monitoring strategy will significantly enhance your security posture and incident response capabilities. Remember that attackers are well aware of these locations too, so implementing proper access controls and monitoring solutions for these directories should be a priority for any security team.","excerpt":"Bir SOC (G\u00fcvenlik Operasyon Merkezi) analisti olarak, Windows'un kritik g\u00fcvenlik bilgilerini nerede depolad\u0131\u011f\u0131n\u0131 anlamak, bir s\u0131zma...","created_at":"2025-04-21 11:06:28","updated_at":"2026-09-07 12:42:20","category_id":7,"view_count":684,"reading_time":6,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-04-21 11:06:28","featured_image":"resimyok.jpg","slug":"soc-analistinin-bilmesi-gereken-windows-dizinleri","category_name":"Cyber Security","category_slug":"cyber-security","category_color":"#10b981"},{"id":101,"title":"Windows Ki\u015fiselle\u015ftirme Ara\u00e7lar\u0131: En \u0130yi \u00dccretsiz ve A\u00e7\u0131k Kaynak Se\u00e7enekler","content":"<p>Windows i\u015fletim sisteminizi ki\u015fiselle\u015ftirmek i&ccedil;in bir&ccedil;ok harika ara&ccedil; bulunuyor. \u0130\u015fte en kullan\u0131\u015fl\u0131 &uuml;cretsiz ve a&ccedil;\u0131k kaynakl\u0131 se&ccedil;enekler: ## **\ud83c\udfa8 Canl\u0131 Duvar Ka\u011f\u0131tlar\u0131 ve G&ouml;rsel Efektler** ### **1. Lively Wallpaper** \u2705 A&ccedil;\u0131k Kaynak | &Uuml;cretsiz - Video, web sayfas\u0131 ve uygulamalar\u0131 duvar ka\u011f\u0131d\u0131 yap\u0131n - D&uuml;\u015f&uuml;k sistem kayna\u011f\u0131 kullan\u0131m\u0131 - (https:\/\/github.com\/rocksdanister\/lively) ### **2. WinDynamicDesktop** \u2705 A&ccedil;\u0131k Kaynak | &Uuml;cretsiz - macOS'taki gibi g&uuml;n&uuml;n saatine g&ouml;re de\u011fi\u015fen duvar ka\u011f\u0131tlar\u0131 - (https:\/\/github.com\/t1m0thyj\/WinDynamicDesktop) ### **3. SpaceEye** \u2705 A&ccedil;\u0131k Kaynak | &Uuml;cretsiz - NASA ve NOAA'dan ger&ccedil;ek zamanl\u0131 uydu g&ouml;r&uuml;nt&uuml;leri - (https:\/\/github.com\/them1k\/SpaceEye) ## **\ud83d\udda5\ufe0f G&ouml;rev &Ccedil;ubu\u011fu ve Ba\u015flat Men&uuml;s&uuml; Ki\u015fiselle\u015ftirme** ### **4. TranslucentTB** \u2705 A&ccedil;\u0131k Kaynak | &Uuml;cretsiz - G&ouml;rev &ccedil;ubu\u011funu \u015feffaf veya bulan\u0131k yap\u0131n - (https:\/\/www.microsoft.com\/store\/productId\/9PF4KZ2VN4W9) ### **5. ExplorerPatcher** \u2705 A&ccedil;\u0131k Kaynak | &Uuml;cretsiz - Windows 11'de klasik ba\u015flat men&uuml;s&uuml; ve g&ouml;rev &ccedil;ubu\u011fu - (https:\/\/github.com\/valinet\/ExplorerPatcher) ### **6. Open-Shell** \u2705 A&ccedil;\u0131k Kaynak | &Uuml;cretsiz - Windows 7 tarz\u0131 ba\u015flat men&uuml;s&uuml; - (https:\/\/github.com\/Open-Shell\/Open-Shell-Menu) ## **\ud83c\udfae E\u011flenceli ve Yarat\u0131c\u0131 Ara&ccedil;lar** ### **7. eSheep** \u2705 A&ccedil;\u0131k Kaynak | &Uuml;cretsiz - Masa&uuml;st&uuml;n&uuml;zde dola\u015fan sevimli koyunlar - (https:\/\/github.com\/Adrianotiger\/desktopPet) ### **8. RunCat_for_windows** \u2705 A&ccedil;\u0131k Kaynak | &Uuml;cretsiz - G&ouml;rev &ccedil;ubu\u011funda ko\u015fan kedi animasyonu (CPU kullan\u0131m\u0131n\u0131 g&ouml;sterir) - (https:\/\/github.com\/Kyome22\/RunCat_for_windows) ## **\ud83c\udf08 Renk ve Tema Y&ouml;netimi** ### **9. AutoDarkMode** \u2705 A&ccedil;\u0131k Kaynak | &Uuml;cretsiz - Otomatik koyu\/a&ccedil;\u0131k tema ge&ccedil;i\u015fi - (https:\/\/github.com\/AutoDarkMode\/Windows-Auto-Night-Mode) ### **10. MicaForEveryone** \u2705 A&ccedil;\u0131k Kaynak | &Uuml;cretsiz - Windows 11'in Mica efektini t&uuml;m pencerelerde etkinle\u015ftirir - (https:\/\/github.com\/MicaForEveryone\/MicaForEveryone) ## **\ud83d\udcca Kar\u015f\u0131la\u015ft\u0131rma Tablosu** | Ara&ccedil; | T&uuml;r | &Ouml;ne &Ccedil;\u0131kan &Ouml;zellik | |------|-----|------------------| | Lively Wallpaper | Duvar Ka\u011f\u0131d\u0131 | Video\/web duvar ka\u011f\u0131tlar\u0131 | | WinDynamicDesktop | Duvar Ka\u011f\u0131d\u0131 | Dinamik g&uuml;n \u0131\u015f\u0131\u011f\u0131 de\u011fi\u015fimi | | TranslucentTB | G&ouml;rev &Ccedil;ubu\u011fu | \u015eeffaf g&ouml;rev &ccedil;ubu\u011fu | | ExplorerPatcher | Sistem | Windows 10\/11 kar\u0131\u015f\u0131m\u0131 aray&uuml;z | | eSheep | E\u011flence | Masa&uuml;st&uuml; evcil hayvan\u0131 | | AutoDarkMode | Tema | Otomatik koyu mod | Bu ara&ccedil;lar sayesinde Windows deneyiminizi tamamen ki\u015fiselle\u015ftirebilir, hem g&ouml;rsel olarak &ccedil;ekici hem de i\u015flevsel bir masa&uuml;st&uuml; ortam\u0131 olu\u015fturabilirsiniz. En g&uuml;zeli, hepsi &uuml;cretsiz ve a&ccedil;\u0131k kaynakl\u0131! **Hangi ara&ccedil;lar\u0131 kullan\u0131yorsunuz?** Yorumlarda favori ki\u015fiselle\u015ftirme ara&ccedil;lar\u0131n\u0131z\u0131 payla\u015f\u0131n! \ud83d\udcbb\u2728<\/p>","excerpt":"Windows i\u015fletim sisteminizi ki\u015fiselle\u015ftirmek i\u00e7in bir\u00e7ok harika ara\u00e7 bulunuyor. \u0130\u015fte en kullan\u0131\u015fl\u0131 \u00fccretsiz ve a\u00e7\u0131k kaynakl\u0131...","created_at":"2025-04-19 19:58:03","updated_at":"2026-09-08 02:35:04","category_id":6,"view_count":811,"reading_time":2,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-04-19 19:58:03","featured_image":"resimyok.jpg","slug":"windows-kisisellestirme-araclari-en-iyi-ucretsiz-ve-acik-kaynak-secenekler","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":106,"title":"\u26a0\ufe0fWindows 11 24H2 G\u00fcncellemesinde Can S\u0131k\u0131c\u0131 Bir Hata!","content":"Microsoft\u2019un yeni Windows 11 24H2 g\u00fcncellemesi, kullan\u0131c\u0131lar\u0131na bir\u00e7ok yeni \u00f6zellik ve iyile\u015ftirme sunarken, beklenmeyen bir hata da beraberinde geldi. Kullan\u0131c\u0131lar, bu g\u00fcncellemeyi y\u00fckledikten sonra baz\u0131 uygulamalar\u0131n aniden kapanmas\u0131 veya ba\u015flat\u0131lamamas\u0131 gibi sorunlarla kar\u015f\u0131la\u015f\u0131yor. SECURE_KERNEL_ERROR krizi hem ev hem de kurumsal kullan\u0131c\u0131lar\u0131 kesintiye u\u011fratt\u0131, baz\u0131lar\u0131 tekrarlanan \u00e7\u00f6kmeler bildirdi ve di\u011ferleri sistemlerini hi\u00e7 ba\u015flatamad\u0131. Olay, \u015firket h\u0131zl\u0131 g\u00fcvenlik yamas\u0131n\u0131 sistem kararl\u0131l\u0131\u011f\u0131yla dengelemeye devam ederken, Windows g\u00fcncellemelerinin g\u00fcvenilirli\u011fi konusundaki endi\u015feleri yeniden alevlendirdi. Microsoft ayr\u0131ca Windows Hello hatalar\u0131 gibi ilgili sorunlar\u0131 da kabul etti ve yakla\u015fan May\u0131s 2025 g\u00fcncellemesinde ek d\u00fczeltmeler s\u00f6z\u00fc verdi. Sorunun Detaylar\u0131 Yap\u0131lan incelemelere g\u00f6re, bu hata \u00f6zellikle \"mscorlib.ni.dll\" adl\u0131 sistem dosyas\u0131yla ili\u015fkili g\u00f6r\u00fcn\u00fcyor. Hata nedeniyle baz\u0131 .NET tabanl\u0131 uygulamalar \u00e7al\u0131\u015fmay\u0131 reddediyor veya beklenmedik \u015fekilde kapan\u0131yor. Kullan\u0131c\u0131lar, \u00f6zellikle i\u015f ve g\u00fcvenlik yaz\u0131l\u0131mlar\u0131nda bu sorunla kar\u015f\u0131la\u015ft\u0131klar\u0131n\u0131 belirtiyor. <img  src=\"https:\/\/ondernet.net\/wp-content\/uploads\/2025\/04\/bug2.jpg\" alt=\"\" width=\"716\" height=\"297\" \/> <strong>Microsoft\u2019tan Ge\u00e7ici \u00c7\u00f6z\u00fcm<\/strong> Microsoft \u015fu an bu hatay\u0131 ara\u015ft\u0131rd\u0131\u011f\u0131n\u0131 ve resmi bir d\u00fczeltme yamas\u0131 \u00fczerinde \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 a\u00e7\u0131klad\u0131. Ancak, etkilenen kullan\u0131c\u0131lar i\u00e7in ge\u00e7ici bir \u00e7\u00f6z\u00fcm olarak a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 \u00f6neriyor: 1. Sistem Geri Y\u00fckleme \u2013 Sorunlu g\u00fcncelleme sonras\u0131 sisteminizde sorun ya\u015f\u0131yorsan\u0131z, bir \u00f6nceki kararl\u0131 s\u00fcr\u00fcme geri d\u00f6nebilirsiniz. 2. Windows Update Manuel Kontrol \u2013 Microsoft\u2019un yay\u0131nlayaca\u011f\u0131 acil bir g\u00fcncellemeyi bekleyebilir ve g\u00fcncellemeleri manuel olarak kontrol edebilirsiniz. 3. Uygulamalar\u0131 G\u00fcncelleme \u2013 Etkilenen yaz\u0131l\u0131mlar\u0131n en son s\u00fcr\u00fcmlerini y\u00fcklemek sorunu \u00e7\u00f6zebilir. <strong>Kullan\u0131c\u0131lar Ne Yapmal\u0131:<\/strong> <ul > <li>Bilgisayar\u0131n\u0131z\u0131 birka\u00e7 kez yeniden ba\u015flat\u0131n ve KIR d\u00fczeltmesini daha h\u0131zl\u0131 almak i\u00e7in g\u00fcncellemeleri kontrol edin.<\/li> <li>Y\u00f6netilen cihazlar i\u00e7in BT y\u00f6neticileri KIR Grup \u0130lkesi'ni da\u011f\u0131tmal\u0131 ve etkilenen sistemleri yeniden ba\u015flatmal\u0131d\u0131r.<\/li> <li>Kal\u0131c\u0131 bir d\u00fczeltme geli\u015ftirilmekte oldu\u011fu i\u00e7in Microsoft'tan daha fazla g\u00fcncelle\u015ftirme bekleyin.<\/li> <\/ul> Sonu\u00e7 Windows 11 24H2 g\u00fcncellemesi, performans ve g\u00fcvenlik iyile\u015ftirmeleriyle b\u00fcy\u00fck beklentiler yaratsa da, bu t\u00fcr hatalar kullan\u0131c\u0131 deneyimini olumsuz etkileyebiliyor. Microsoft\u2019un en k\u0131sa s\u00fcrede bir yama yay\u0131nlamas\u0131 bekleniyor. Siz de bu hatayla kar\u015f\u0131la\u015ft\u0131n\u0131z m\u0131? Yorumlar\u0131n\u0131z\u0131 bekliyoruz! #Windows11 #Microsoft #Teknoloji #Bilgisayar #Yaz\u0131l\u0131mHatalar\u0131","excerpt":"Microsoft\u2019un yeni Windows 11 24H2 g\u00fcncellemesi, kullan\u0131c\u0131lar\u0131na bir\u00e7ok yeni \u00f6zellik ve iyile\u015ftirme sunarken, beklenmeyen bir hata da...","created_at":"2025-04-17 15:21:20","updated_at":"2026-09-07 23:23:05","category_id":6,"view_count":872,"reading_time":3,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-04-17 15:21:20","featured_image":"resimyok.jpg","slug":"windows-11-24h2-guncellemesinde-can-sikici-bir-hata","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":111,"title":"Windows 11 Kurulumunda Microsoft Hesab\u0131 Gereksinimi Nas\u0131l Atlan\u0131r","content":"Windows 11'in piyasaya s\u00fcr\u00fclmesiyle birlikte, Microsoft kurulum s\u00fcrecinde kullan\u0131c\u0131lar\u0131 \u00e7evrimi\u00e7i hesap olu\u015fturmaya y\u00f6nlendiren politikas\u0131n\u0131 daha da s\u0131k\u0131la\u015ft\u0131rd\u0131. \u00d6zellikle Home s\u00fcr\u00fcm\u00fcnde internet ba\u011flant\u0131s\u0131 varsa, kurulum s\u0131ras\u0131nda bir Microsoft hesab\u0131yla oturum a\u00e7man\u0131z bekleniyor. Ancak baz\u0131 kullan\u0131c\u0131lar bu gereklili\u011fi atlay\u0131p yerel hesapla devam etmek isteyebilir. Neden Yerel Hesap Tercih Edilir? Gizlilik endi\u015feleri: Microsoft hesab\u0131 kullan\u0131m\u0131, belirli kullan\u0131c\u0131 verilerinin Microsoft sunucular\u0131nda saklanmas\u0131 anlam\u0131na gelir \u0130nternet ba\u011flant\u0131s\u0131 olmayan ortamlar: S\u00fcrekli \u00e7evrimi\u00e7i olamayan kullan\u0131c\u0131lar i\u00e7in yerel hesap daha pratiktir Kurumsal gereksinimler: Baz\u0131 i\u015f ortamlar\u0131nda yerel hesaplar g\u00fcvenlik politikalar\u0131 gere\u011fi tercih edilir Ki\u015fisel tercih: Baz\u0131 kullan\u0131c\u0131lar sadece eski al\u0131\u015fkanl\u0131klar\u0131n\u0131 s\u00fcrd\u00fcrmek ister. <h2  >Windows 11'de Microsoft Hesab\u0131 gereksinimini atlay\u0131n<\/h2> Windows 11 kurulumu s\u0131ras\u0131nda Microsoft hesab\u0131n\u0131z\u0131 ba\u011flamak yerine yerel bir hesap kullanmak i\u00e7in a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 izleyin: <ol > <li>Bilgisayar\u0131 Windows 11 kurulum ISO g\u00f6r\u00fcnt\u00fcs\u00fcnden \u00f6ny\u00fckleyin<\/li> <li><em>B\u00f6lge ayarlar\u0131na<\/em>\u00a0girdikten sonra,\u00a0<em>Komut \u0130stemi'ni<\/em>\u00a0a\u00e7mak i\u00e7in\u00a0<strong>Shift + F10<\/strong>\u00a0tu\u015flar\u0131na bas\u0131n<img  src=\"https:\/\/ondernet.net\/wp-content\/uploads\/2025\/04\/Bypass-Microsoft-Account-Requirement-on-Windows-11-Installation-011.png\" alt=\"\" width=\"755\" height=\"566\" \/><\/li> <li><em>Komut \u0130stemi'ne<\/em>\u00a0<strong>start ms-cxh:localonly<\/strong>\u00a0komutunu yaz\u0131n<\/li> <li><strong>Enter tu\u015funa<\/strong>\u00a0bas\u0131n<\/li> <\/ol> <img  src=\"https:\/\/ondernet.net\/wp-content\/uploads\/2025\/04\/Bypass-Microsoft-Account-Requirement-on-Windows-11-Installation-021.png\" alt=\"\" width=\"795\" height=\"596\" \/> <ol  start=\"5\"> <li><strong>Kullan\u0131c\u0131 ad\u0131n\u0131<\/strong>\u00a0ve\u00a0<strong>parolay\u0131<\/strong>\u00a0doldurabilece\u011finiz yerel kullan\u0131c\u0131 hesab\u0131 penceresi g\u00f6r\u00fcnt\u00fclenir<\/li> <li><strong>Sonrakine<\/strong>\u00a0t\u0131kla<\/li> <\/ol> <pre  data-enlighter-language=\"generic\">Not: Bir kullan\u0131c\u0131 ad\u0131 girebilir ve \u015fifre alanlar\u0131n\u0131 bo\u015f b\u0131rakabilirsiniz, ancak bu g\u00fcvenlik nedeniyle \u00f6nerilmez.<\/pre> <img  src=\"https:\/\/ondernet.net\/wp-content\/uploads\/2025\/04\/Bypass-Microsoft-Account-Requirement-on-Windows-11-Installation-031.png\" alt=\"\" width=\"799\" height=\"599\" \/> <ol  start=\"7\"> <li>Windows 11 kurulumu, kurulumla daha da ilerleyecektir<\/li> <\/ol> <img  src=\"https:\/\/ondernet.net\/wp-content\/uploads\/2025\/04\/Bypass-Microsoft-Account-Requirement-on-Windows-11-Installation-041.png\" alt=\"\" width=\"800\" height=\"600\" \/> Windows 11 kurulumunda Microsoft hesab\u0131 gereksinimini nas\u0131l atlayaca\u011f\u0131n\u0131z\u0131 \u00f6\u011frendiniz. \u00c7\u00f6z\u00fcm, kurulumda \u00fclke veya b\u00f6lge penceresini g\u00f6rd\u00fc\u011f\u00fcn\u00fczde, Komut \u0130stemi'ni ba\u015flatman\u0131z ve iyi bilinen yerel kullan\u0131c\u0131 olu\u015fturma penceresini ba\u015flatmak i\u00e7in komutu \u00e7al\u0131\u015ft\u0131rman\u0131z gerekti\u011fidir. Ard\u0131ndan, istedi\u011finiz kullan\u0131c\u0131 ad\u0131n\u0131 girin ve Windows 11 kurulumuna devam edebilirsiniz.","excerpt":"Windows 11'in piyasaya s\u00fcr\u00fclmesiyle birlikte, Microsoft kurulum s\u00fcrecinde kullan\u0131c\u0131lar\u0131 \u00e7evrimi\u00e7i hesap olu\u015fturmaya y\u00f6nlendiren...","created_at":"2025-04-16 10:59:44","updated_at":"2026-09-08 00:28:02","category_id":6,"view_count":702,"reading_time":2,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-04-16 10:59:44","featured_image":"bypass-microsoft-account-requirement-on-windows-11-installation-011.png","slug":"windows-11-kurulumunda-microsoft-hesabi-gereksinimi-nasil-atlanir","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":120,"title":"Windows y\u00f6netici (administrator) \u015fifresini s\u0131f\u0131rlamak veya resetleme","content":"Windows y\u00f6netici (administrator) \u015fifresini s\u0131f\u0131rlamak veya resetlemek i\u00e7in birka\u00e7 farkl\u0131 y\u00f6ntem bulunmaktad\u0131r. \u0130\u015fte ad\u0131m ad\u0131m en etkili y\u00f6ntemler: 1. Windows Kurulum Medyas\u0131 ile Resetleme (En Etkili Y\u00f6ntem) Gerekenler: Windows kurulum USB'si\/DVD'si BIOS'tan boot ayarlar\u0131n\u0131 de\u011fi\u015ftirme yetkisi Ad\u0131mlar: 1. Windows kurulum medyas\u0131n\u0131 bilgisayara tak\u0131n ve kurulum ekran\u0131na gelin 2. \"\u015eimdi Y\u00fckle\" yerine \"Bilgisayar\u0131n\u0131z\u0131 onar\u0131n\" se\u00e7ene\u011fini t\u0131klay\u0131n 3. Sorun Giderme &gt; Geli\u015fmi\u015f Se\u00e7enekler &gt; Komut \u0130stemi'ni se\u00e7in 4. A\u015fa\u011f\u0131daki komutlar\u0131 s\u0131rayla girin: cmd copy c:\\windows\\system32\\utilman.exe c:\\ copy \/y c:\\windows\\system32\\cmd.exe c:\\windows\\system32\\utilman.exe wpeutil reboot 5. Bilgisayar yeniden ba\u015flad\u0131\u011f\u0131nda, oturum a\u00e7ma ekran\u0131nda \"Eri\u015fim Kolayl\u0131\u011f\u0131\" simgesine t\u0131klay\u0131n 6. A\u00e7\u0131lan komut istemine: cmd net user administrator 7. Yeni \u015fifreyi girin ve onaylay\u0131n 2. Offline NT Password &amp; Registry Editor ile Resetleme Gerekenler: USB flash bellek Ba\u015fka bir bilgisayar Ad\u0131mlar: 1. Ba\u015fka bir bilgisayarda https:\/\/pogostick.net\/~pnh\/ntpasswd\/ adresinden bootable USB olu\u015fturun 2. USB'yi tak\u0131p bilgisayar\u0131 buradan ba\u015flat\u0131n 3. SAM dosyas\u0131n\u0131n yolunu se\u00e7in (genellikle C:\\Windows\\System32\\config) 4. \"Password reset\" se\u00e7ene\u011fini se\u00e7in 5. Resetlemek istedi\u011finiz kullan\u0131c\u0131y\u0131 se\u00e7in 6. \u015eifreyi temizlemek i\u00e7in \"Clear (blank) user password\" se\u00e7in 7. De\u011fi\u015fiklikleri kaydedip bilgisayar\u0131 yeniden ba\u015flat\u0131n 3. Yerle\u015fik Y\u00f6netici Hesab\u0131n\u0131 Etkinle\u015ftirme Komut istemi a\u00e7abildi\u011finiz durumlar i\u00e7in: 1. Win+X &gt; Komut \u0130stemi (Y\u00f6netici) 2. \u015eu komutlar\u0131 girin: cmd net user administrator \/active:yes net user administrator 4. Microsoft Hesab\u0131 \u015eifresini S\u0131f\u0131rlama E\u011fer Microsoft hesab\u0131yla oturum a\u00e7\u0131yorsan\u0131z: 1. Ba\u015fka bir cihazdan https:\/\/account.live.com\/password\/reset adresini ziyaret edin 2. \u015eifre s\u0131f\u0131rlama i\u015flemini tamamlay\u0131n 3. Yeni \u015fifreyle bilgisayarda oturum a\u00e7\u0131n \u00d6nemli Uyar\u0131lar: Bu i\u015flemler yasal olarak sadece kendi bilgisayar\u0131n\u0131zda yap\u0131lmal\u0131d\u0131r \u0130\u015flem \u00f6ncesi \u00f6nemli verilerinizi yedekleyin Baz\u0131 y\u00f6ntemler Windows s\u00fcr\u00fcm\u00fcne g\u00f6re de\u011fi\u015fiklik g\u00f6sterebilir Alternatif \u00c7\u00f6z\u00fcmler: PC'nizdeki di\u011fer y\u00f6netici hesaplar\u0131n\u0131 deneyin Sistem geri y\u00fckleme noktas\u0131na d\u00f6nmeyi deneyin Windows'un \"\u015eifremi Unuttum\" se\u00e7ene\u011fini kullan\u0131n Hangi y\u00f6ntemi denerseniz deneyin, i\u015flem sonras\u0131nda g\u00fcvenli bir \u015fifre belirledi\u011finizden emin olun ve m\u00fcmk\u00fcnse bir \u015fifre y\u00f6neticisi kullan\u0131n.","excerpt":"Windows y\u00f6netici (administrator) \u015fifresini s\u0131f\u0131rlamak veya resetlemek i\u00e7in birka\u00e7 farkl\u0131 y\u00f6ntem bulunmaktad\u0131r. \u0130\u015fte ad\u0131m ad\u0131m en etkili...","created_at":"2025-04-14 01:19:27","updated_at":"2026-09-06 18:51:01","category_id":6,"view_count":758,"reading_time":3,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-04-14 01:19:27","featured_image":"resimyok.jpg","slug":"windows-yonetici-administrator-sifresini-sifirlamak-veya-resetleme","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":121,"title":"Terminal Server (Remote Desktop Server) oturumu ba\u015flatt\u0131\u011f\u0131nda bu duvar ka\u011f\u0131d\u0131n\u0131n uygulanmamas\u0131","content":"Bu senaryoda hedefin, kullan\u0131c\u0131 kendi bilgisayar\u0131nda Active Directory (AD) \u00fczerinden uygulanan bir duvar ka\u011f\u0131d\u0131n\u0131 g\u00f6rmeye devam etmesi, ancak ayn\u0131 kullan\u0131c\u0131 bir <strong>Terminal Server (Remote Desktop Server)<\/strong> oturumu ba\u015flatt\u0131\u011f\u0131nda bu duvar ka\u011f\u0131d\u0131n\u0131n <strong>uygulanmamas\u0131<\/strong>. Bunu sa\u011flamak i\u00e7in a\u015fa\u011f\u0131daki y\u00f6ntemleri kullanabilirsin: <hr \/> <h2>\u2705 1. GPO'yu OU (Organizational Unit) Bazl\u0131 Hedeflemek<\/h2> <strong>Y\u00f6ntem:<\/strong> Kullan\u0131c\u0131lar i\u00e7in uygulanan GPO\u2019yu sadece <strong>kendi bilgisayarlar\u0131n\u0131n bulundu\u011fu OU\u2019ya<\/strong> hedefleyerek, Terminal Server\u2019a uygulanmas\u0131n\u0131 engelle. <strong>Ad\u0131mlar:<\/strong> <ol> <li>Kullan\u0131c\u0131lara duvar ka\u011f\u0131d\u0131 uygulayan mevcut GPO\u2019yu bul.<\/li> <li>Bu GPO'nun <code>Scope<\/code> k\u0131sm\u0131nda sadece kullan\u0131c\u0131lar\u0131n <strong>bilgisayarlar\u0131n\u0131n bulundu\u011fu OU<\/strong> hedeflendi\u011finden emin ol.<\/li> <li>E\u011fer kullan\u0131c\u0131 Terminal Server\u2019da oturum a\u00e7\u0131yorsa ve bu GPO terminal server\u2019a da uygulan\u0131yorsa, bu GPO\u2019yu Terminal Server\u2019dan <strong>hari\u00e7 tut<\/strong>.<\/li> <\/ol> <hr \/> <h2>\u2705 2. GPO'da WMI Filter Kullanarak Bilgisayar T\u00fcr\u00fcne G\u00f6re Ay\u0131rma<\/h2> <strong>Y\u00f6ntem:<\/strong> GPO'ya bir <strong>WMI filter<\/strong> ekleyerek sadece belirli makinelerde uygulanmas\u0131n\u0131 sa\u011flayabilirsin. \u00d6rnek: Sadece Windows 10\/11 client makinelerde \u00e7al\u0131\u015fs\u0131n, serverlarda \u00e7al\u0131\u015fmas\u0131n. <h3>\u00d6rnek WMI Filter:<\/h3> <pre><code >SELECT * FROM Win32_OperatingSystem WHERE ProductType = \"1\" <\/code><\/pre> <strong>A\u00e7\u0131klama:<\/strong> <ul> <li><code>ProductType = 1<\/code> \u279c Client i\u015fletim sistemleri (Windows 10, 11 vb.)<\/li> <li><code>ProductType = 2 veya 3<\/code> \u279c Server i\u015fletim sistemleri (Terminal Server dahil)<\/li> <\/ul> <strong>Nas\u0131l uygulan\u0131r:<\/strong> <ol> <li>Group Policy Management Console\u2019da (GPMC) WMI Filter sekmesine git.<\/li> <li>Yeni bir WMI Filter olu\u015ftur ve yukar\u0131daki sorguyu kullan.<\/li> <li>Duvar ka\u011f\u0131d\u0131 GPO\u2019suna bu filtreyi ba\u011fla.<\/li> <\/ol> <hr \/> <h2>\u2705 3. Terminal Server i\u00e7in Ayr\u0131 GPO Ayar\u0131yla Duvar Ka\u011f\u0131d\u0131n\u0131 Kald\u0131rma<\/h2> <strong>Y\u00f6ntem:<\/strong> Terminal Server\u2019a \u00f6zel bir GPO olu\u015fturarak, duvar ka\u011f\u0131d\u0131n\u0131 <strong>engelle veya \u00fczerine yaz<\/strong>. <strong>Ad\u0131mlar:<\/strong> <ol> <li>Terminal Server\u2019\u0131n bulundu\u011fu OU\u2019ya \u00f6zel bir GPO olu\u015ftur.<\/li> <li>\u015eu ayarlar\u0131 yap\u0131land\u0131r:<\/li> <\/ol> <pre><code>User Configuration \u2192 Administrative Templates \u2192 Desktop \u2192 Desktop \u2192 Desktop Wallpaper \u2192 Enabled, Path bo\u015f b\u0131rak\u0131labilir <\/code><\/pre> Veya: <pre><code>User Configuration \u2192 Administrative Templates \u2192 Control Panel \u2192 Personalization \u2192 Prevent changing desktop background \u2192 Enabled <\/code><\/pre> Gerekirse: <pre><code>Computer Configuration \u2192 Administrative Templates \u2192 System \u2192 Group Policy \u2192 Loopback Processing Mode \u2192 Enabled (Merge veya Replace olarak ayarla) <\/code><\/pre> <hr \/> <h2>\u2733\ufe0f Not: Loopback Mode Kullan\u0131m\u0131<\/h2> E\u011fer kullan\u0131c\u0131 ayn\u0131 kullan\u0131c\u0131ysa ama farkl\u0131 bilgisayarlara oturum a\u00e7\u0131yorsa (\u00f6rne\u011fin bir client ve bir Terminal Server), <code>Loopback Policy Processing<\/code> kullanmak faydal\u0131 olabilir. <strong>Yeri:<\/strong> <pre><code>Computer Configuration \u2192 Administrative Templates \u2192 System \u2192 Group Policy \u2192 User Group Policy loopback processing mode \u2192 Enable <\/code><\/pre> <ul> <li><strong>Merge:<\/strong> Hem kullan\u0131c\u0131 hem bilgisayar ayarlar\u0131 birle\u015ftirilir, \u00e7ak\u0131\u015fmalarda bilgisayar ayarlar\u0131 bask\u0131n olabilir.<\/li> <li><strong>Replace:<\/strong> Kullan\u0131c\u0131ya, ba\u011fland\u0131\u011f\u0131 bilgisayar\u0131n GPO\u2019su uygulan\u0131r (kendi kullan\u0131c\u0131 GPO\u2019su de\u011fil).<\/li> <\/ul> <hr \/> <h2>\u00d6zet:<\/h2> <table> <thead> <tr> <th>Y\u00f6ntem<\/th> <th>A\u00e7\u0131klama<\/th> <\/tr> <\/thead> <tbody> <tr> <td>OU bazl\u0131 hedefleme<\/td> <td>GPO sadece kullan\u0131c\u0131 bilgisayarlar\u0131n\u0131n oldu\u011fu OU\u2019ya uygulan\u0131r<\/td> <\/tr> <tr> <td>WMI Filter<\/td> <td>GPO sadece client sistemlerde (ProductType=1) \u00e7al\u0131\u015f\u0131r<\/td> <\/tr> <tr> <td>Terminal Server i\u00e7in GPO<\/td> <td>Server \u00fczerinde duvar ka\u011f\u0131d\u0131 uygulanmaz veya \u00fczerine yaz\u0131l\u0131r<\/td> <\/tr> <tr> <td>Loopback Processing<\/td> <td>Kullan\u0131c\u0131 oturum a\u00e7t\u0131\u011f\u0131 bilgisayara g\u00f6re GPO al\u0131r<\/td> <\/tr> <\/tbody> <\/table> <hr \/> &nbsp;","excerpt":"Bu senaryoda hedefin, kullan\u0131c\u0131 kendi bilgisayar\u0131nda Active Directory (AD) \u00fczerinden uygulanan bir duvar ka\u011f\u0131d\u0131n\u0131 g\u00f6rmeye devam etmesi,...","created_at":"2025-04-14 00:40:17","updated_at":"2026-09-07 12:23:13","category_id":6,"view_count":674,"reading_time":3,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-04-14 00:40:17","featured_image":"resimyok.jpg","slug":"terminal-server-remote-desktop-server-oturumu-baslattiginda-bu-duvar-kagidinin-uygulanmamasi","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":149,"title":"PECmd ile Windows Prefetch Dosyalar\u0131n\u0131n Adli Bili\u015fim Analizi","content":"Windows i\u015fletim sisteminde, programlar\u0131n daha h\u0131zl\u0131 ba\u015flat\u0131lmas\u0131na yard\u0131mc\u0131 olmak i\u00e7in tasarlanm\u0131\u015f \"Prefetch\" mekanizmas\u0131, adli bili\u015fim uzmanlar\u0131 i\u00e7in bir alt\u0131n madeni niteli\u011findedir. Prefetch klas\u00f6r\u00fcnde yer alan dosyalar, sistemde hangi uygulamalar\u0131n ne zaman ve ka\u00e7 kez \u00e7al\u0131\u015ft\u0131r\u0131ld\u0131\u011f\u0131 gibi kritik bilgileri i\u00e7erir. Bu blog yaz\u0131s\u0131nda, Eric Zimmerman taraf\u0131ndan geli\u015ftirilen PECmd arac\u0131n\u0131n kullan\u0131m\u0131n\u0131 detayl\u0131 bir \u015fekilde inceleyece\u011fiz. Windows Prefetch Dosyalar\u0131 Nedir? Windows i\u015fletim sistemi, s\u0131k kullan\u0131lan uygulamalar\u0131n ba\u015flat\u0131lmas\u0131 s\u0131ras\u0131nda gerekli olan dosyalar\u0131 \u00f6nbelle\u011fe alarak sistemin performans\u0131n\u0131 art\u0131rmak i\u00e7in Prefetch mekanizmas\u0131n\u0131 kullan\u0131r. Bu mekanizma, `C:\\Windows\\Prefetch` klas\u00f6r\u00fcnde `.pf` uzant\u0131l\u0131 dosyalar olu\u015fturur. Bu dosyalar \u015fu isimlendirme kural\u0131n\u0131 takip eder: UYGULAMA_ADI-HASH.pf \u00d6rne\u011fin: `NOTEPAD++.EXE-72ABB319.pf` Her Prefetch dosyas\u0131 \u015fu bilgileri i\u00e7erir: - Uygulaman\u0131n tam yolu - Uygulaman\u0131n son \u00e7al\u0131\u015ft\u0131r\u0131lma zaman\u0131 - Uygulama ka\u00e7 kez \u00e7al\u0131\u015ft\u0131r\u0131ld\u0131 - Uygulama \u00e7al\u0131\u015ft\u0131r\u0131ld\u0131\u011f\u0131nda hangi dosyalara eri\u015fildi - \u00c7e\u015fitli zaman damgalar\u0131 Eric Zimmerman'\u0131n PECmd Arac\u0131 Eric Zimmerman'\u0131n geli\u015ftirdi\u011fi PECmd, Windows Prefetch dosyalar\u0131n\u0131 analiz etmek i\u00e7in tasarlanm\u0131\u015f g\u00fc\u00e7l\u00fc bir komut sat\u0131r\u0131 arac\u0131d\u0131r. Bu ara\u00e7, Windows XP'den Windows 11'e kadar t\u00fcm Windows s\u00fcr\u00fcmleri i\u00e7in olu\u015fturulan Prefetch dosyalar\u0131n\u0131 analiz edebilir. PECmd'nin \u00d6zellikleri - Tek bir Prefetch dosyas\u0131n\u0131 veya bir klas\u00f6rdeki t\u00fcm Prefetch dosyalar\u0131n\u0131 analiz edebilir - CSV, JSON veya HTML format\u0131nda \u00e7\u0131kt\u0131 \u00fcretebilir - Belirli anahtar kelimeleri vurgulayabilir - Prefetch dosyas\u0131n\u0131n i\u00e7eri\u011fini ayr\u0131nt\u0131l\u0131 olarak g\u00f6sterebilir - Windows 10\/11'de kullan\u0131lan s\u0131k\u0131\u015ft\u0131r\u0131lm\u0131\u015f MAM format\u0131ndaki Prefetch dosyalar\u0131n\u0131 a\u00e7abilir - Volume Shadow Copy'lerden (VSS) Prefetch dosyalar\u0131n\u0131 inceleyebilir PECmd Kullan\u0131m \u00d6rnekleri Tek Bir Prefetch Dosyas\u0131n\u0131 Analiz Etme PECmd.exe -f \"C:\\Windows\\Prefetch\\NOTEPAD++.EXE-72ABB319.pf\" Bu komut, belirtilen Notepad++ Prefetch dosyas\u0131n\u0131 analiz eder ve sonu\u00e7lar\u0131 ekranda g\u00f6sterir. JSON Format\u0131nda \u00c7\u0131kt\u0131 Alma PECmd.exe -f \"C:\\Windows\\Prefetch\\NOTEPAD++.EXE-72ABB319.pf\" --json \"C:\\Forensics\\Output\" Bu komut, analiz sonu\u00e7lar\u0131n\u0131 JSON format\u0131nda belirtilen klas\u00f6re kaydeder. CSV Format\u0131nda \u00c7\u0131kt\u0131 Alma PECmd.exe -f \"C:\\Windows\\Prefetch\\NOTEPAD++.EXE-72ABB319.pf\" --csv \"C:\\Forensics\\Output\" Bu komut, analiz sonu\u00e7lar\u0131n\u0131 CSV format\u0131nda belirtilen klas\u00f6re kaydeder. \u00d6zel Dosya Ad\u0131yla \u00c7\u0131kt\u0131 Alma PECmd.exe -f \"C:\\Windows\\Prefetch\\NOTEPAD++.EXE-72ABB319.pf\" --csv \"C:\\Forensics\\Output\" --csvf \"notepad_analiz.csv\" Bu komut, CSV \u00e7\u0131kt\u0131s\u0131n\u0131 \u00f6zel bir dosya ad\u0131yla kaydeder. Belirli Anahtar Kelimeleri Vurgulama PECmd.exe -f \"C:\\Windows\\Prefetch\\NOTEPAD++.EXE-72ABB319.pf\" -k \"gizli,\u015fifreli,\u00f6nemli\" Bu komut, \u00e7\u0131kt\u0131da belirtilen anahtar kelimeleri vurgular. Varsay\u0131lan olarak \"temp\" ve \"tmp\" kelimeleri zaten vurgulan\u0131r. Prefetch Dosyas\u0131n\u0131 \u00c7\u0131karma PECmd.exe -f \"C:\\Windows\\Prefetch\\NOTEPAD++.EXE-72ABB319.pf\" -o \"C:\\Forensics\\Extracted\" Bu komut, Prefetch dosyas\u0131n\u0131n i\u00e7eri\u011fini belirtilen klas\u00f6re \u00e7\u0131kar\u0131r. \u00d6zellikle Windows 10\/11'de s\u0131k\u0131\u015ft\u0131r\u0131lm\u0131\u015f MAM format\u0131ndaki dosyalar\u0131 incelemek i\u00e7in faydal\u0131d\u0131r. T\u00fcm Prefetch Klas\u00f6r\u00fcn\u00fc Analiz Etme PECmd.exe -d \"C:\\Windows\\Prefetch\" Bu komut, Prefetch klas\u00f6r\u00fcndeki t\u00fcm dosyalar\u0131 analiz eder. Volume Shadow Copy'leri \u0130nceleme PECmd.exe -d \"C:\\Windows\\Prefetch\" --vss Bu komut, hem normal Prefetch klas\u00f6r\u00fcn\u00fc hem de Volume Shadow Copy'lerdeki Prefetch dosyalar\u0131n\u0131 analiz eder. PECmd \u00c7\u0131kt\u0131s\u0131nda Ne T\u00fcr Bilgiler Bulunur? PECmd \u00e7\u0131kt\u0131s\u0131 genellikle \u015fu bilgileri i\u00e7erir: 1. Dosya Bilgileri: - Dosya ad\u0131 ve yolu - Dosya boyutu - Dosya hash de\u011feri 2. Uygulama Bilgileri: - Uygulama tam yolu - \u00c7al\u0131\u015ft\u0131rma say\u0131s\u0131 - Son \u00e7al\u0131\u015ft\u0131rma zaman\u0131 3. Eri\u015filen Dosyalar: - Uygulama \u00e7al\u0131\u015ft\u0131r\u0131ld\u0131\u011f\u0131nda eri\u015filen t\u00fcm dosyalar\u0131n listesi - Bu dosyalar\u0131n tam yollar\u0131 4. Zaman Damgalar\u0131: - Olu\u015fturulma zaman\u0131 - Son de\u011fi\u015ftirilme zaman\u0131 - Son eri\u015fim zaman\u0131 Adli Bili\u015fim Soru\u015fturmalar\u0131nda PECmd Kullan\u0131m\u0131 Adli bili\u015fim soru\u015fturmalar\u0131nda PECmd arac\u0131 \u015fu durumlarda \u00f6zellikle faydal\u0131d\u0131r: 1. Kullan\u0131c\u0131 Aktivitelerinin Tespiti: Hangi programlar\u0131n ne zaman \u00e7al\u0131\u015ft\u0131r\u0131ld\u0131\u011f\u0131n\u0131 belirlemek i\u00e7in kullan\u0131labilir. 2. Anti-Forensics Tekniklerinin Tespiti: Prefetch dosyalar\u0131 silinmi\u015f olsa bile, VSS \u00fczerinden eri\u015filebilir. 3. Zararl\u0131 Yaz\u0131l\u0131m Analizi: \u015e\u00fcpheli bir uygulaman\u0131n \u00e7al\u0131\u015ft\u0131r\u0131lmas\u0131 s\u0131ras\u0131nda hangi dosyalara eri\u015fti\u011fini belirlemek i\u00e7in kullan\u0131labilir. 4. Sistem Kullan\u0131m Al\u0131\u015fkanl\u0131klar\u0131n\u0131n Tespiti: Kullan\u0131c\u0131n\u0131n hangi programlar\u0131 s\u0131k kulland\u0131\u011f\u0131n\u0131 belirlemek i\u00e7in kullan\u0131labilir. 5. Zaman \u00c7izelgesi Olu\u015fturma: Bir olay\u0131n tam zaman\u0131n\u0131 belirlemek i\u00e7in di\u011fer adli bili\u015fim verileriyle birlikte kullan\u0131labilir. Sonu\u00e7 Windows Prefetch dosyalar\u0131, adli bili\u015fim soru\u015fturmalar\u0131nda de\u011ferli bilgiler sa\u011flar. Eric Zimmerman'\u0131n PECmd arac\u0131, bu dosyalar\u0131 analiz etmek i\u00e7in g\u00fc\u00e7l\u00fc ve esnek bir \u00e7\u00f6z\u00fcm sunar. Do\u011fru komutlar\u0131 kullanarak, bir sistemde hangi uygulamalar\u0131n ne zaman ve nas\u0131l kullan\u0131ld\u0131\u011f\u0131 hakk\u0131nda kritik bilgiler elde edebilirsiniz. Bu blog yaz\u0131s\u0131nda PECmd arac\u0131n\u0131n temel kullan\u0131m\u0131n\u0131 ve \u00f6zelliklerini inceledik. Adli bili\u015fim analizi yaparken, bu arac\u0131 di\u011fer ara\u00e7larla birlikte kullanarak daha kapsaml\u0131 sonu\u00e7lar elde edebilirsiniz. --- Not: Bu yaz\u0131da yer alan komutlar\u0131 kendi sistemlerinizde denemeden \u00f6nce, uygun yetkilere sahip oldu\u011funuzdan ve analiz etti\u011finiz sistemlerin kan\u0131t b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc korudu\u011funuzdan emin olun.","excerpt":"Windows i\u015fletim sisteminde, programlar\u0131n daha h\u0131zl\u0131 ba\u015flat\u0131lmas\u0131na yard\u0131mc\u0131 olmak i\u00e7in tasarlanm\u0131\u015f \"Prefetch\" mekanizmas\u0131, adli bili\u015fim uzmanlar\u0131 i\u00e7in bir alt\u0131n madeni niteli\u011findedir. Prefetch klas\u00f6r\u00fcnde yer alan dosyalar, sistemde hangi uygulamalar\u0131n ne zaman ve ka\u00e7 kez \u00e7al\u0131\u015ft\u0131r\u0131ld\u0131\u011f\u0131 gibi kritik bilgileri i\u00e7erir. Bu blog yaz\u0131s\u0131nda, Eric Zimmerman taraf\u0131ndan geli\u015ftirilen PECmd arac\u0131n\u0131n kullan\u0131m\u0131n\u0131 detayl\u0131 bir \u015fekilde inceleyece\u011fiz.","created_at":"2025-02-25 20:21:42","updated_at":"2026-09-08 03:09:03","category_id":7,"view_count":999,"reading_time":5,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-02-25 20:21:42","featured_image":"resimyok.jpg","slug":"pecmd-ile-windows-prefetch-dosyalarinin-adli-bilisim-analizi","category_name":"Cyber Security","category_slug":"cyber-security","category_color":"#10b981"},{"id":185,"title":"Windows\u2019ta Sudo Komutu: Nedir ve Nas\u0131l Kullan\u0131l\u0131r?","content":"<p>Microsoft, Windows i\u015fletim sisteminde geli\u015ftiricilerin ve sistem y\u00f6neticilerinin i\u015flerini kolayla\u015ft\u0131rmak i\u00e7in s\u00fcrekli yeni \u00f6zellikler ekliyor. Bu \u00f6zelliklerden biri de **sudo** komutu. Peki, Windows\u2019ta sudo komutu nedir ve nas\u0131l kullan\u0131l\u0131r? Bu makalede, Windows\u2019ta sudo komutunun ne oldu\u011funu, nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 ve nas\u0131l kullanabilece\u011finizi detayl\u0131 bir \u015fekilde inceleyece\u011fiz.<\/p><p>### **Sudo Komutu Nedir?**<\/p><p>Sudo (Superuser Do), Unix ve Linux tabanl\u0131 sistemlerde yayg\u0131n olarak kullan\u0131lan bir komuttur. Bu komut, kullan\u0131c\u0131lar\u0131n belirli komutlar\u0131 y\u00f6netici (root) yetkileriyle \u00e7al\u0131\u015ft\u0131rmas\u0131na olanak tan\u0131r. Windows\u2019ta ise sudo komutu, benzer bir i\u015flevi yerine getirmek i\u00e7in tasarlanm\u0131\u015ft\u0131r. \u00d6zellikle geli\u015ftiriciler ve sistem y\u00f6neticileri, y\u00fcksek yetkiler gerektiren i\u015flemleri daha h\u0131zl\u0131 ve g\u00fcvenli bir \u015fekilde ger\u00e7ekle\u015ftirmek i\u00e7in bu komutu kullanabilir.<\/p><p>### **Windows\u2019ta Sudo Komutu Nas\u0131l \u00c7al\u0131\u015f\u0131r?**<\/p><p>24H2 g\u00fcncellemesi ile Windows da sudo kullan\u0131labilir.<br><br>Sudo \u00f6zelli\u011fini a\u00e7mak i\u00e7in ne gerekli ?<br>Windows 11, Minimum 24H2 s\u00fcr\u00fcm\u00fcne ge\u00e7irmek<br><br>Sudo \u00f6zelli\u011fi nas\u0131l a\u00e7\u0131l\u0131r ?<br>Ayarlar -&gt; Sistem -&gt; Geli\u015ftiriciler i\u00e7in -&gt; sudo'yu etkinle\u015ftir<\/p><p>Windows\u2019ta sudo komutu, bir komut istemcisi (terminal) \u00fczerinden \u00e7al\u0131\u015ft\u0131r\u0131l\u0131r. Bu komut, belirli bir komutu y\u00f6netici yetkileriyle \u00e7al\u0131\u015ft\u0131rmak i\u00e7in kullan\u0131l\u0131r. \u00d6rne\u011fin, bir dosyay\u0131 d\u00fczenlemek veya sistem ayarlar\u0131n\u0131 de\u011fi\u015ftirmek gibi i\u015flemler i\u00e7in sudo komutunu kullanabilirsiniz.<\/p><p>Sudo komutu, Windows\u2019ta **Windows Subsystem for Linux (WSL)** veya **PowerShell** gibi ortamlarda kullan\u0131labilir. Ancak, Microsoft\u2019un resmi dok\u00fcmantasyonuna g\u00f6re, sudo komutu \u00f6zellikle WSL ortam\u0131nda daha yayg\u0131n olarak kullan\u0131lmaktad\u0131r.<\/p><p>Windows i\u00e7in Sudo'nun mevcut runas komutundan fark\u0131 nedir?<\/p><p>sudo komutu, mevcut y\u00fckseltilmemi\u015f komut sat\u0131r\u0131 i\u00e7eri\u011finizden bir komutu h\u0131zl\u0131 bir \u015fekilde y\u00f6netici olarak y\u00fckseltmenin bir yolunu sunar ve di\u011fer i\u015fletim sistemlerinden gelen baz\u0131 kullan\u0131c\u0131lara tan\u0131d\u0131k gelir. runas komutu, e\u011fer isterseniz y\u00f6netici de dahil olmak \u00fczere programlar\u0131 herhangi bir kullan\u0131c\u0131 olarak \u00e7al\u0131\u015ft\u0131rman\u0131n bir yolunu sunar. Bu noktada Windows'taki sudo komutu, di\u011fer kullan\u0131c\u0131lar gibi program \u00e7al\u0131\u015ft\u0131rmay\u0131 desteklememektedir. sudo ve runas aras\u0131ndaki di\u011fer \u00f6nemli farklar \u015funlard\u0131r:<\/p><ul><li>runas, programlar\u0131 y\u00f6netici dahil ancak bununla s\u0131n\u0131rl\u0131 olmamak \u00fczere di\u011fer kullan\u0131c\u0131lar olarak \u00e7al\u0131\u015ft\u0131rman\u0131za olanak tan\u0131r. Bu i\u015flevsellik sudo komutunun yol haritas\u0131nda yer almaktad\u0131r ancak hen\u00fcz mevcut de\u011fildir.<\/li><li>sudo bir i\u015flemi h\u0131zla y\u00fckseltmenize olanak tan\u0131r (y\u00f6netici olarak):<\/li><li>runas komut sat\u0131r\u0131nda kullan\u0131c\u0131lardan parola isteyebilir.<\/li><li>sudo yaln\u0131zca i\u015fletim sistemini do\u011frulama istemi kullan\u0131larak yetkisiz de\u011fi\u015fikliklere kar\u015f\u0131 korumak \u00fczere tasarlanm\u0131\u015f Kullan\u0131c\u0131 Hesab\u0131 Denetimi (UAC) g\u00fcvenlik \u00f6zelli\u011fi arac\u0131l\u0131\u011f\u0131yla y\u00fckseltilebilir.<\/li><\/ul><p>### **Windows\u2019ta Sudo Komutu Nas\u0131l Kullan\u0131l\u0131r?**<\/p><p>Windows\u2019ta sudo komutunu kullanmak i\u00e7in a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 izleyebilirsiniz:<\/p><p>1. **WSL\u2019yi Etkinle\u015ftirin:**<br>&nbsp; - E\u011fer WSL hen\u00fcz y\u00fckl\u00fc de\u011filse, \u00f6ncelikle WSL\u2019yi etkinle\u015ftirmeniz gerekiyor. Bunun i\u00e7in PowerShell\u2019i y\u00f6netici olarak \u00e7al\u0131\u015ft\u0131r\u0131n ve a\u015fa\u011f\u0131daki komutu girin:<br>&nbsp; &nbsp; ```powershell<br>&nbsp; &nbsp; wsl --install<br>&nbsp; &nbsp; ```<br>&nbsp; - Bu komut, WSL\u2019yi ve varsay\u0131lan bir Linux da\u011f\u0131t\u0131m\u0131n\u0131 (genellikle Ubuntu) y\u00fckleyecektir.<\/p><p>2. **WSL\u2019yi Ba\u015flat\u0131n:**<br>&nbsp; - WSL y\u00fcklendikten sonra, ba\u015flat men\u00fcs\u00fcnden WSL\u2019yi a\u00e7\u0131n veya PowerShell\u2019de `wsl` komutunu \u00e7al\u0131\u015ft\u0131r\u0131n.<\/p><p>3. **Sudo Komutunu Kullan\u0131n:**<br>&nbsp; - WSL ortam\u0131nda, y\u00f6netici yetkileri gerektiren bir komutu \u00e7al\u0131\u015ft\u0131rmak i\u00e7in sudo komutunu kullanabilirsiniz. \u00d6rne\u011fin, bir paket y\u00fcklemek i\u00e7in:<br>&nbsp; &nbsp; ```bash<br>&nbsp; &nbsp; sudo apt-get install &lt;paket-ad\u0131&gt;<br>&nbsp; &nbsp; ```<br>&nbsp; - Bu komut, y\u00f6netici yetkileriyle belirtilen paketi y\u00fckleyecektir.<\/p><p>4. **PowerShell\u2019de Sudo Benzeri \u0130\u015flevsellik:**<br>&nbsp; - PowerShell\u2019de do\u011frudan sudo komutu bulunmaz, ancak benzer bir i\u015flevi `Start-Process` komutuyla ger\u00e7ekle\u015ftirebilirsiniz. \u00d6rne\u011fin:<br>&nbsp; &nbsp; ```powershell<br>&nbsp; &nbsp; Start-Process powershell -Verb runAs<br>&nbsp; &nbsp; ```<br>&nbsp; - Bu komut, yeni bir PowerShell penceresini y\u00f6netici olarak ba\u015flat\u0131r.<\/p><p>### **Sudo Komutunun Avantajlar\u0131**<\/p><p>- **H\u0131zl\u0131 Eri\u015fim:** Sudo komutu, y\u00f6netici yetkileri gerektiren i\u015flemleri h\u0131zl\u0131 bir \u015fekilde ger\u00e7ekle\u015ftirmenizi sa\u011flar.<br>- **G\u00fcvenlik:** Sudo komutu, yaln\u0131zca belirli komutlar\u0131 y\u00f6netici yetkileriyle \u00e7al\u0131\u015ft\u0131r\u0131r, bu da sistem g\u00fcvenli\u011fini art\u0131r\u0131r.<br>- **Esneklik:** Hem WSL hem de PowerShell gibi farkl\u0131 ortamlarda kullan\u0131labilir.<\/p><p>### **Sonu\u00e7**<\/p><p>Windows\u2019ta sudo komutu, \u00f6zellikle geli\u015ftiriciler ve sistem y\u00f6neticileri i\u00e7in b\u00fcy\u00fck bir kolayl\u0131k sa\u011flar. Unix ve Linux sistemlerindeki sudo komutuna benzer \u015fekilde, Windows\u2019ta da y\u00f6netici yetkileri gerektiren i\u015flemleri h\u0131zl\u0131 ve g\u00fcvenli bir \u015fekilde ger\u00e7ekle\u015ftirmenize olanak tan\u0131r. WSL ve PowerShell gibi ortamlarda kullan\u0131labilen bu komut, Windows kullan\u0131c\u0131lar\u0131 i\u00e7in \u00f6nemli bir ara\u00e7 haline gelmi\u015ftir.<\/p><p>E\u011fer siz de Windows\u2019ta sudo komutunu kullanarak i\u015flemlerinizi daha verimli hale getirmek istiyorsan\u0131z, yukar\u0131daki ad\u0131mlar\u0131 takip ederek hemen ba\u015flayabilirsiniz.<\/p>","excerpt":"Microsoft, Windows i\u015fletim sisteminde geli\u015ftiricilerin ve sistem y\u00f6neticilerinin i\u015flerini kolayla\u015ft\u0131rmak i\u00e7in s\u00fcrekli yeni \u00f6zellikler ekliyor. Bu \u00f6zelliklerden biri de **sudo** komutu. Peki, Windows\u2019ta sudo komutu nedir ve nas\u0131l kullan\u0131l\u0131r? Bu makalede, Windows\u2019ta sudo komutunun ne oldu\u011funu, nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 ve nas\u0131l kullanabilece\u011finizi detayl\u0131 bir \u015fekilde inceleyece\u011fiz.","created_at":"2025-01-20 14:45:32","updated_at":"2026-09-07 08:31:12","category_id":6,"view_count":741,"reading_time":5,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-01-20 14:45:32","featured_image":"resimyok.jpg","slug":"windowsta-sudo-komutu-nedir-ve-nasil-kullanilir","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":250,"title":"Windows Sistem Ara\u00e7lar\u0131","content":"<p>Windows sistem y\u00f6netim ve bak\u0131m i\u015flemlerini kolayla\u015ft\u0131ran kapsaml\u0131 bir GUI uygulamas\u0131.<\/p><p>## \u00d6zellikler<\/p><p>- Sistem Bilgileri G\u00f6r\u00fcnt\u00fcleme<br>- Disk ve RAM Y\u00f6netimi<br>- A\u011f Ara\u00e7lar\u0131<br>- Sistem Bak\u0131m ve Temizlik<br>- Windows Servis Y\u00f6netimi<br>- G\u00fcvenlik Duvar\u0131 Kontrol\u00fc<\/p><p>## Kurulum<\/p><p>```bash<br># Gerekli mod\u00fclleri y\u00fckleyin<br>pip install -r requirements.txt<\/p><p># Program\u0131 ba\u015flat\u0131n<br>python main.py<br>```<\/p><p>## Da\u011f\u0131t\u0131m<\/p><p>Program\u0131 .exe dosyas\u0131 olarak da\u011f\u0131tmak i\u00e7in:<\/p><p>```bash<br>pyinstaller \u2014 onefile \u2014 windowed \u2014 icon=app.ico \u2014 manifest=manifest.xml \u2014 name=\u201dWindows Ara\u00e7lar\u0131\u201d t.py<br>```<\/p><p>## Gereksinimler<\/p><p>- Python 3.x<br>- tkinter<br>- psutil<br>- pywin32<\/p><p>## Y\u00f6netici Haklar\u0131<\/p><p>Baz\u0131 \u00f6zellikler i\u00e7in y\u00f6netici haklar\u0131 gereklidir.<\/p><p>## Lisans<\/p><p>Bu proje MIT lisans\u0131 alt\u0131nda lisanslanm\u0131\u015ft\u0131r.<\/p><p>## Katk\u0131da Bulunma<\/p><p>1. Fork edin<br>2. Feature branch olu\u015fturun<br>3. De\u011fi\u015fikliklerinizi commit edin<br>4. Push edin<br>5. Pull request a\u00e7\u0131n<\/p><p><a href=\"https:\/\/github.com\/onder7\/Windows-Sistem-Ara-lar-.git\">https:\/\/github.com\/onder7\/Windows-Sistem-Ara-lar-.git<\/a><\/p>","excerpt":"Windows sistem y\u00f6netim ve bak\u0131m i\u015flemlerini kolayla\u015ft\u0131ran kapsaml\u0131 bir GUI uygulamas\u0131.","created_at":"2024-12-29 11:38:55","updated_at":"2026-09-05 20:32:24","category_id":6,"view_count":628,"reading_time":1,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2024-12-29 11:38:55","featured_image":"resimyok.jpg","slug":"windows-sistem-araclari","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":300,"title":"Etki Alan\u0131na Kat\u0131ld\u0131ktan Sonra Masa\u00fcst\u00fc Simgeleri Etkinle\u015ftirilemiyor","content":"Merhabalar; server taraf\u0131nda domaine ald\u0131\u011f\u0131n\u0131z sunucunuzda masa \u00fcst\u00fc k\u0131sayollar\u0131n\u0131 \u00f6zelle\u015ftirmek istedi\u011finizde a\u015fa\u011f\u0131daki hatay\u0131 al\u0131yorsan\u0131z \u00e7\u00f6z\u00fcm\u00fc a\u015fa\u011f\u0131da Error = \u201cWindows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item.\u201d Bir grup ilkesi olu\u015fturun ve a\u015fa\u011f\u0131daki ayar\u0131 etkinle\u015ftirin. <pre>Computer Configuration &gt; Windows Settings &gt; Security Settings &gt; Local Policies &gt; Security Options<\/pre> A\u015fa\u011f\u0131daki se\u00e7ene\u011fi etkinle\u015ftirin. <strong>User Account Control: Admin Approval Mode for the Built-in Administrator account<\/strong> Yukar\u0131daki ayar\u0131 uygulamak i\u00e7in sistemi yeniden ba\u015flat\u0131n Art\u0131k ayar\u0131 de\u011fi\u015ftirebileceksiniz","excerpt":"Merhabalar; server taraf\u0131nda domaine ald\u0131\u011f\u0131n\u0131z sunucunuzda masa \u00fcst\u00fc k\u0131sayollar\u0131n\u0131 \u00f6zelle\u015ftirmek istedi\u011finizde a\u015fa\u011f\u0131daki hatay\u0131...","created_at":"2022-04-14 20:10:29","updated_at":"2026-09-07 02:29:03","category_id":6,"view_count":582,"reading_time":1,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2022-04-14 20:10:29","featured_image":"resimyok.jpg","slug":"etki-alanina-katildiktan-sonra-masaustu-simgeleri-etkinlestirilemiyor","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":301,"title":"Windows Sistemlerinde Parola ve Kimlik Bilgilerini Arama","content":"<p>&nbsp;<\/p>\r\n<h1>&nbsp;Windows&rsquo;ta Kaydedilmi\u015f Parola ve Kimlik Bilgilerini Arama Rehberi<\/h1>\r\n<p>Zaman i&ccedil;inde masa&uuml;st&uuml;nde &ldquo;password.txt&rdquo;, config dosyalar\u0131nda d&uuml;z metin \u015fifreler, script&rsquo;lerin i&ccedil;ine g&ouml;m&uuml;l&uuml; kullan\u0131c\u0131 adlar\u0131, veya kay\u0131t defterinde unutulmu\u015f parolalar&hellip;<br>Hepsi bir s&uuml;re sonra ciddi bir g&uuml;venlik riski h&acirc;line gelebiliyor.<\/p>\r\n<p>Bu yaz\u0131da, <strong>Windows komut sat\u0131r\u0131<\/strong> ve <strong>PowerShell<\/strong> kullanarak sistemde saklanm\u0131\u015f olabilecek parolalar\u0131 nas\u0131l tespit edebilece\u011fini ad\u0131m ad\u0131m anlat\u0131yorum.<\/p>\r\n<blockquote>\r\n<p>\u26a0\ufe0f <strong>&Ouml;nemli:<\/strong> Buradaki teknikleri <em>sadece<\/em> kendi bilgisayar\u0131nda, \u015firket sistemlerinde ise <strong>yaz\u0131l\u0131 izinle<\/strong> kullanmal\u0131s\u0131n.<\/p>\r\n<\/blockquote>\r\n<hr>\r\n<h2>1\ufe0f\u20e3 Temel Dosya Tarama Y&ouml;ntemleri<\/h2>\r\n<p>\u0130lk ad\u0131m, &ldquo;password&rdquo; kelimesi ge&ccedil;en basit metin dosyalar\u0131n\u0131 h\u0131zl\u0131ca avlamak.<\/p>\r\n<h3>\ud83d\udd39 <code>findstr<\/code> ile dosya i&ccedil;inde &ldquo;password&rdquo; arama<\/h3>\r\n<pre><code class=\"language-cmd\">findstr \/SI \/M \"password\" *.ini *.txt\r\n<\/code><\/pre>\r\n<p>Bu komut ne yap\u0131yor?<\/p>\r\n<ul>\r\n<li>\r\n<p><code>\/S<\/code> &rarr; Alt dizinlere de bakar<\/p>\r\n<\/li>\r\n<li>\r\n<p><code>\/I<\/code> &rarr; B&uuml;y&uuml;k\/k&uuml;&ccedil;&uuml;k harf fark etmeksizin arar<\/p>\r\n<\/li>\r\n<li>\r\n<p><code>\/M<\/code> &rarr; E\u015fle\u015fen <strong>dosya adlar\u0131n\u0131<\/strong> listeler (i&ccedil;eri\u011fi g&ouml;stermez)<\/p>\r\n<\/li>\r\n<li>\r\n<p><code>\"password\"<\/code> &rarr; Aranan kelime<\/p>\r\n<\/li>\r\n<li>\r\n<p><code>*.ini *.txt<\/code> &rarr; Sadece <code>.ini<\/code> ve <code>.txt<\/code> dosyalar\u0131nda arar<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>\ud83d\udc49 Bu sayede, &ldquo;password&rdquo; i&ccedil;eren ayar veya metin dosyalar\u0131n\u0131 h\u0131zl\u0131ca tespit edebilirsin.<\/p>\r\n<hr>\r\n<h3>\ud83d\udd39 <code>where<\/code> ile belirli dosya adlar\u0131n\u0131 bulma<\/h3>\r\n<p>&Ouml;rne\u011fin sistemde bir yerlerde unutulmu\u015f <code>password.txt<\/code> dosyalar\u0131n\u0131 bulmak istiyorsun:<\/p>\r\n<pre><code class=\"language-cmd\">where \/R c:\\ password.txt\r\n<\/code><\/pre>\r\n<ul>\r\n<li>\r\n<p><code>\/R c:\\<\/code> &rarr; C: s&uuml;r&uuml;c&uuml;s&uuml;nde <strong>recursive<\/strong> (alt klas&ouml;rlerle birlikte) arama yapar<\/p>\r\n<\/li>\r\n<li>\r\n<p><code>password.txt<\/code> &rarr; Tam dosya ad\u0131n\u0131 arar<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>Bu, &ouml;zellikle &ldquo;password.txt&rdquo;, &ldquo;pass.txt&rdquo;, &ldquo;secret.txt&rdquo; gibi klasik &ldquo;g&uuml;nah ke&ccedil;isi&rdquo; dosyalar i&ccedil;in i\u015fe yarar.<\/p>\r\n<hr>\r\n<h2>2\ufe0f\u20e3 PowerShell ile Geli\u015fmi\u015f Dosya Ad\u0131 Aramas\u0131<\/h2>\r\n<p>CMD iyidir ama PowerShell bu konuda &ccedil;ok daha esnek.<\/p>\r\n<pre><code class=\"language-powershell\">dir \/S \/B *pass*.txt *pass*.xml *pass*.ini *cred* *vnc* *.config*\r\n<\/code><\/pre>\r\n<p>Bu komut:<\/p>\r\n<ul>\r\n<li>\r\n<p><code>\/S<\/code> &rarr; Alt dizinleri de gezer<\/p>\r\n<\/li>\r\n<li>\r\n<p><code>\/B<\/code> &rarr; Sadece tam dosya yolunu yazar (Basic format)<\/p>\r\n<\/li>\r\n<li>\r\n<p><code>*pass*<\/code>, <code>*cred*<\/code>, <code>*vnc*<\/code>, <code>*.config*<\/code> &rarr;<\/p>\r\n<ul>\r\n<li>\r\n<p><code>pass<\/code> ge&ccedil;en dosyalar (password, pass, passw vb.)<\/p>\r\n<\/li>\r\n<li>\r\n<p>&ldquo;cred&rdquo; i&ccedil;eren dosyalar (credentials, credstore vs.)<\/p>\r\n<\/li>\r\n<li>\r\n<p>VNC gibi uzak masa&uuml;st&uuml; ara&ccedil;lar\u0131yla ilgili dosyalar<\/p>\r\n<\/li>\r\n<li>\r\n<p><code>.config<\/code> dosyalar\u0131 (web.config, app.config vb. i&ccedil;inde connection string ve \u015fifre olabilir)<\/p>\r\n<\/li>\r\n<\/ul>\r\n<\/li>\r\n<\/ul>\r\n<p>Bu sayede sadece &ldquo;password&rdquo; kelimesine de\u011fil, \u015f&uuml;pheli olabilecek dosya adlar\u0131na da odaklanm\u0131\u015f olursun.<\/p>\r\n<hr>\r\n<h2>3\ufe0f\u20e3 Kay\u0131t Defterinde &ldquo;password&rdquo; Arama<\/h2>\r\n<p>Baz\u0131 eski uygulamalar veya k&ouml;t&uuml; yaz\u0131lm\u0131\u015f programlar, parolalar\u0131 <strong>kay\u0131t defterine d&uuml;z metin<\/strong> olarak yazabiliyor. Buna bir bakal\u0131m.<\/p>\r\n<pre><code class=\"language-cmd\">REG QUERY HKLM \/F \"password\" \/t REG_SZ \/S \/K\r\n<\/code><\/pre>\r\n<p>A&ccedil;\u0131klayal\u0131m:<\/p>\r\n<ul>\r\n<li>\r\n<p><code>HKLM<\/code> &rarr; <code>HKEY_LOCAL_MACHINE<\/code> alt\u0131nda arama yapar<\/p>\r\n<\/li>\r\n<li>\r\n<p><code>\/F \"password\"<\/code> &rarr; &ldquo;password&rdquo; i&ccedil;eren de\u011ferleri arar<\/p>\r\n<\/li>\r\n<li>\r\n<p><code>\/t REG_SZ<\/code> &rarr; Sadece metin t&uuml;r&uuml;ndeki de\u011ferleri listeler<\/p>\r\n<\/li>\r\n<li>\r\n<p><code>\/S<\/code> &rarr; T&uuml;m alt anahtarlar\u0131 da tarar<\/p>\r\n<\/li>\r\n<li>\r\n<p><code>\/K<\/code> &rarr; Anahtar adlar\u0131n\u0131 da filtreler<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>Buradan &ccedil;\u0131kan sonu&ccedil;lar\u0131 dikkatle incelemeli, varsa <strong>gereksiz\/tehlikeli<\/strong> olanlar\u0131 temizlemelisin.<\/p>\r\n<hr>\r\n<h2>4\ufe0f\u20e3 Di\u011fer &Ouml;nemli Kaynaklar: Credential Manager ve Taray\u0131c\u0131lar<\/h2>\r\n<h3>\ud83d\udd39 Windows Credential Manager (Kimlik Bilgisi Y&ouml;neticisi)<\/h3>\r\n<pre><code class=\"language-powershell\">cmdkey \/list\r\n<\/code><\/pre>\r\n<p>Bu komut, Windows taraf\u0131ndan kay\u0131tl\u0131 tutulan:<\/p>\r\n<ul>\r\n<li>\r\n<p>RDP ba\u011flant\u0131lar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>Payla\u015f\u0131mlar (\\sunucu\\payla\u015f\u0131m)<\/p>\r\n<\/li>\r\n<li>\r\n<p>Web servisleri veya uygulamalar<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>gibi yerler i&ccedil;in saklanan kimlik bilgilerini listeler.<\/p>\r\n<p>Bunlar genelde \u015fifreyi do\u011frudan <strong>g&ouml;stermez<\/strong>, ama nerelerde credential sakland\u0131\u011f\u0131na dair fikir verir.<\/p>\r\n<hr>\r\n<h3>\ud83d\udd39 Taray\u0131c\u0131larda Kay\u0131tl\u0131 Parolalar<\/h3>\r\n<p>Taray\u0131c\u0131 parolalar\u0131 genellikle <strong>\u015fifreli<\/strong> olarak tutulur; fakat yine de dosya konumlar\u0131n\u0131 bilmek iyi bir fikirdir.<\/p>\r\n<p>&Ouml;rne\u011fin Chrome i&ccedil;in:<\/p>\r\n<pre><code class=\"language-powershell\">Get-ChildItem -Path \"$env:LOCALAPPDATA\\Google\\Chrome\\User Data\\Default\\Login Data\"\r\n<\/code><\/pre>\r\n<p>Bu dosya parolalar\u0131 a&ccedil;\u0131k metin h&acirc;linde tutmaz, DPAPI ile \u015fifreler.<br>Ancak bu t&uuml;r dosyalar\u0131n nerede oldu\u011funu bilmek, <strong>yedekleme, silme veya inceleme<\/strong> i&ccedil;in &ouml;nemlidir.<\/p>\r\n<hr>\r\n<h2>\ud83d\udd10 G&uuml;venlik ve Etik Uyar\u0131lar<\/h2>\r\n<p>Bu k\u0131s\u0131m en az teknik k\u0131s\u0131m kadar &ouml;nemli.<\/p>\r\n<ol>\r\n<li>\r\n<p><strong>Sadece yetkili oldu\u011fun sistemlerde kullan<\/strong><\/p>\r\n<ul>\r\n<li>\r\n<p>Ev bilgisayar\u0131n, kendi sunucun, test lab&rsquo;\u0131n&hellip;<\/p>\r\n<\/li>\r\n<li>\r\n<p>Kurumsal ortamda mutlaka <strong>yaz\u0131l\u0131 izin<\/strong> al.<\/p>\r\n<\/li>\r\n<\/ul>\r\n<\/li>\r\n<li>\r\n<p><strong>Buldu\u011fun \u015fifreleri asla payla\u015fma<\/strong><\/p>\r\n<ul>\r\n<li>\r\n<p>Log dosyalar\u0131na d&uuml;z metin yazma<\/p>\r\n<\/li>\r\n<li>\r\n<p>Ekran g&ouml;r&uuml;nt&uuml;s&uuml; al\u0131p sa\u011fa sola atma<\/p>\r\n<\/li>\r\n<li>\r\n<p>Gerekmiyorsa g&ouml;r&uuml;r g&ouml;rmez de\u011fi\u015ftir veya sil<\/p>\r\n<\/li>\r\n<\/ul>\r\n<\/li>\r\n<li>\r\n<p><strong>Otomatik parola kaydetme &ouml;zelliklerini d&uuml;\u015f&uuml;nerek kullan<\/strong><\/p>\r\n<ul>\r\n<li>\r\n<p>Taray\u0131c\u0131lar<\/p>\r\n<\/li>\r\n<li>\r\n<p>RDP istemcileri<\/p>\r\n<\/li>\r\n<li>\r\n<p>&Uuml;&ccedil;&uuml;nc&uuml; parti \u015fifre alan uygulamalar<\/p>\r\n<\/li>\r\n<\/ul>\r\n<\/li>\r\n<li>\r\n<p><strong>Gerekirse g&uuml;venlik politikas\u0131na ekle<\/strong><\/p>\r\n<ul>\r\n<li>\r\n<p>&ldquo;\u015eifreler d&uuml;z metin dosyalarda tutulmayacakt\u0131r.&rdquo;<\/p>\r\n<\/li>\r\n<li>\r\n<p>&ldquo;Config dosyalar\u0131nda hassas bilgiler \u015fifrelenmi\u015f olarak saklanacakt\u0131r.&rdquo;<\/p>\r\n<\/li>\r\n<\/ul>\r\n<\/li>\r\n<\/ol>\r\n<hr>\r\n<h2>\ud83e\uddfe &Ouml;zet<\/h2>\r\n<p>Bu yaz\u0131da:<\/p>\r\n<ul>\r\n<li>\r\n<p><code>findstr<\/code>, <code>where<\/code> ve PowerShell ile <strong>dosya bazl\u0131 parola arama<\/strong><\/p>\r\n<\/li>\r\n<li>\r\n<p>Registry&rsquo;de <code>\"password\"<\/code> ge&ccedil;en alanlar\u0131 bulma<\/p>\r\n<\/li>\r\n<li>\r\n<p>Credential Manager ve taray\u0131c\u0131 depolar\u0131na genel bak\u0131\u015f<\/p>\r\n<\/li>\r\n<li>\r\n<p>Ve en &ouml;nemlisi <strong>etik ve g&uuml;venlik boyutu<\/strong><\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>&uuml;zerinden Windows sistemlerinde kaydedilmi\u015f parolalar\u0131 tespit etmenin temel yollar\u0131n\u0131 g&ouml;rd&uuml;n.<\/p>\r\n<p>Bu y&ouml;ntemler:<\/p>\r\n<ul>\r\n<li>\r\n<p>Unuttu\u011fun bir parolay\u0131 bulmana<\/p>\r\n<\/li>\r\n<li>\r\n<p>G&uuml;venlik a&ccedil;\u0131\u011f\u0131 yaratabilecek &ldquo;password.txt&rdquo; t&uuml;r&uuml; dosyalar\u0131 temizlemene<\/p>\r\n<\/li>\r\n<li>\r\n<p>Sistemlerini daha g&uuml;venli h&acirc;le getirmeni sa\u011flamana yard\u0131mc\u0131 olabilir.<\/p>\r\n<\/li>\r\n<\/ul>","excerpt":"Windows sistemlerinde \u00e7e\u015fitli nedenlerle kaydedilmi\u015f parola ve kimlik bilgilerini aramak gerekebilir. Bu yaz\u0131da, komut sat\u0131r\u0131 ara\u00e7lar\u0131...","created_at":"2022-04-14 20:01:58","updated_at":"2026-09-08 03:22:14","category_id":6,"view_count":640,"reading_time":5,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2022-04-14 20:01:00","featured_image":"6c0cd04096d57ec1d34c5b08108b294c.png","slug":"windows-sistemlerinde-parola-ve-kimlik-bilgilerini-arama","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":302,"title":"AD Pentest Tools","content":"<h1>JAWS (Just Another Windows Script): Windows Bilgi Toplama ve G&uuml;venlik Analizi Arac\u0131<\/h1>\r\n<h3>PowerShell Tabanl\u0131 Windows Enumerasyon Scripti Rehberi<\/h3>\r\n<p><iframe style=\"width: 637px; height: 357px;\" src=\"https:\/\/www.youtube.com\/embed\/OASnDBRgM04\" width=\"637\" height=\"357\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\r\n<p>&nbsp;<\/p>\r\n<p>Windows ortamlar\u0131nda bilgi toplamak, g&uuml;venlik a&ccedil;\u0131klar\u0131n\u0131 analiz etmek ve potansiyel privilege escalation (ayr\u0131cal\u0131k y&uuml;kseltme) noktalar\u0131n\u0131 belirlemek i&ccedil;in kullan\u0131lan <strong>JAWS<\/strong>, g&uuml;venlik ara\u015ft\u0131rmac\u0131lar\u0131 ve penetrasyon testi uzmanlar\u0131 aras\u0131nda olduk&ccedil;a pop&uuml;ler bir ara&ccedil;t\u0131r.<\/p>\r\n<p>Bu yaz\u0131da JAWS arac\u0131n\u0131n ne oldu\u011funu, hangi durumlarda kullan\u0131ld\u0131\u011f\u0131n\u0131, &ouml;zelliklerini ve nas\u0131l &ccedil;al\u0131\u015ft\u0131r\u0131laca\u011f\u0131n\u0131 detayl\u0131 bir rehber h&acirc;line getirdim.<\/p>\r\n<hr>\r\n<h1>\ud83d\udd0d JAWS Nedir?<\/h1>\r\n<p>JAWS (<strong>Just Another Windows Script<\/strong>), Windows sistemlerde kapsaml\u0131 bilgi toplama (enumeration) yapmak i&ccedil;in geli\u015ftirilmi\u015f <strong>PowerShell tabanl\u0131 bir g&uuml;venlik arac\u0131d\u0131r<\/strong>.<\/p>\r\n<p>GitHub projesi:<br>\ud83d\udc49 <a href=\"https:\/\/github.com\/TheJoyOfHacking\/411Hall-JAWS\">https:\/\/github.com\/TheJoyOfHacking\/411Hall-JAWS<\/a><\/p>\r\n<p>Bu ara&ccedil;, bir Windows makinesinin:<\/p>\r\n<ul>\r\n<li>\r\n<p>G&uuml;venlik durumu<\/p>\r\n<\/li>\r\n<li>\r\n<p>Yap\u0131land\u0131rma hatalar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>Eksik yamalar<\/p>\r\n<\/li>\r\n<li>\r\n<p>Privilege escalation f\u0131rsatlar\u0131<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>gibi kritik noktalar\u0131n\u0131 otomatik olarak analiz eder.<\/p>\r\n<hr>\r\n<h1>\u2b50 JAWS&rsquo;\u0131n Ba\u015fl\u0131ca &Ouml;zellikleri<\/h1>\r\n<p><img src=\"https:\/\/redmondmag.com\/articles\/2015\/01\/23\/~\/media\/ECG\/redmondmag\/Images\/2015\/01\/PowerShellInfo_Fig2.ashx?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/redmondmag.com\/articles\/2015\/01\/23\/~\/media\/ECG\/redmondmag\/Images\/2015\/01\/PowerShellInfo_Fig3.ashx?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/i.sstatic.net\/r2FBA.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/www.manageengine.com\/products\/active-directory-audit\/powershell\/images\/powershell-script-for-security-1.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/delinea.com\/hs-fs\/hubfs\/delinea-blog-12-privilege-escalation-example-of-the%20steps-an-attacker-will-take.jpg?name=delinea-blog-12-privilege-escalation-example-of-the+steps-an-attacker-will-take.jpg&amp;width=750&amp;utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/delinea.com\/hs-fs\/hubfs\/delinea-blog-7-privilege-escalation-default-groups-that-determine-privileges-of-users.jpg?name=delinea-blog-7-privilege-escalation-default-groups-that-determine-privileges-of-users.jpg&amp;width=750&amp;utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p>JAWS bir&ccedil;ok &ouml;nemli g&uuml;venlik bile\u015fenini otomatik olarak raporlar.<\/p>\r\n<hr>\r\n<h2>1. \ud83d\udda5\ufe0f Sistem Bilgisi Toplama<\/h2>\r\n<p>Arac\u0131n temel i\u015flevi, sistem hakk\u0131nda kritik bilgileri toplamak ve analiz etmektir:<\/p>\r\n<ul>\r\n<li>\r\n<p>Windows s&uuml;r&uuml;m&uuml;, build numaras\u0131 ve sistem mimarisi<\/p>\r\n<\/li>\r\n<li>\r\n<p>Y&uuml;kl&uuml; programlar<\/p>\r\n<\/li>\r\n<li>\r\n<p>Patch seviyeleri<\/p>\r\n<\/li>\r\n<li>\r\n<p>&Ccedil;al\u0131\u015fan servisler<\/p>\r\n<\/li>\r\n<li>\r\n<p>\u0130\u015flemler (process listesi)<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>Bu veriler, sistemde eksik g&uuml;venlik g&uuml;ncellemelerini tespit etmeye yard\u0131mc\u0131 olur.<\/p>\r\n<hr>\r\n<h2>2. \ud83d\udc64 Kullan\u0131c\u0131 Hesaplar\u0131 ve Yetki Analizi<\/h2>\r\n<p>JAWS, sistemde kullan\u0131c\u0131 ve grup yap\u0131land\u0131rmalar\u0131n\u0131 derinlemesine tarar:<\/p>\r\n<ul>\r\n<li>\r\n<p>Kullan\u0131c\u0131 hesaplar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>Y&ouml;netici grubu &uuml;yeleri<\/p>\r\n<\/li>\r\n<li>\r\n<p>Oturum a&ccedil;an son kullan\u0131c\u0131lar<\/p>\r\n<\/li>\r\n<li>\r\n<p>Kullan\u0131c\u0131 privilege seviyeleri<\/p>\r\n<\/li>\r\n<li>\r\n<p>Potansiyel yetki y&uuml;kseltme a&ccedil;\u0131klar\u0131<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>Bu &ouml;zellik &ouml;zellikle <strong>s\u0131zma testi<\/strong> s\u0131ras\u0131nda &ccedil;ok &ouml;nemlidir.<\/p>\r\n<hr>\r\n<h2>3. \ud83c\udf10 A\u011f Yap\u0131land\u0131rmas\u0131 ve Ba\u011flant\u0131lar<\/h2>\r\n<p>JAWS, a\u011f taraf\u0131nda a\u015fa\u011f\u0131daki bilgileri enumerate eder:<\/p>\r\n<ul>\r\n<li>\r\n<p>A\u011f arabirimleri<\/p>\r\n<\/li>\r\n<li>\r\n<p>IP yap\u0131land\u0131rmalar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>Firewall kurallar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>ARP tablosu<\/p>\r\n<\/li>\r\n<li>\r\n<p>Routing tablosu<\/p>\r\n<\/li>\r\n<li>\r\n<p>A&ccedil;\u0131k ba\u011flant\u0131lar ve portlar<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>Bu veriler a\u011f g&uuml;venli\u011fini analiz etmek i&ccedil;in kritik &ouml;nem ta\u015f\u0131r.<\/p>\r\n<hr>\r\n<h2>4. \ud83d\udd10 G&uuml;venlik Kontrolleri ve Zafiyet Tespiti<\/h2>\r\n<p>Ara&ccedil; ayr\u0131ca g&uuml;venlikle ilgili &ccedil;e\u015fitli kontroller yapar:<\/p>\r\n<ul>\r\n<li>\r\n<p>Antivir&uuml;s durumu<\/p>\r\n<\/li>\r\n<li>\r\n<p>AppLocker politikalar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>UAC ayarlar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>\u015e&uuml;pheli izinler<\/p>\r\n<\/li>\r\n<li>\r\n<p>Zay\u0131f ACL yap\u0131land\u0131rmalar\u0131<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>Bu alanlar, &ccedil;o\u011fu zaman privilege escalation i&ccedil;in en &ccedil;ok kullan\u0131lan yanl\u0131\u015f yap\u0131land\u0131rmalard\u0131r.<\/p>\r\n<hr>\r\n<h1>\ud83c\udfaf JAWS Ne \u0130&ccedil;in Kullan\u0131l\u0131r?<\/h1>\r\n<p>JAWS, hem g&uuml;venlik uzmanlar\u0131 hem de sistem y&ouml;neticileri taraf\u0131ndan farkl\u0131 ama&ccedil;larla kullan\u0131labilir.<\/p>\r\n<p><img src=\"https:\/\/www.hackthebox.com\/storage\/blog\/VYcNKHs3A899YeiU1Z2G2fkRqxaoHgxm.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/cdn.prod.website-files.com\/61dd9339d05701829d0b3241\/61dd9339d0570139770b350a_1%2A2Y66B1rrGJunV574QGPOlw.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/d2ds8yldqp7gxv.cloudfront.net\/Blog%2BExplanatory%2BImages\/Ethical%2BHacking%2BTools%2B2.webp?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/www.nopsec.com\/wp-content\/uploads\/2021\/08\/Nmap_screenshot.width-800.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/miro.medium.com\/1%2AHx8zzXY1IjFJ00xFPT5sTg.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/miro.medium.com\/v2\/resize%3Afit%3A1400\/1%2A6Dc4VwT2B7T-z1QQTr8OsA.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<h3>\u2714 1. Penetrasyon Testlerinde Enumerasyon<\/h3>\r\n<p>S\u0131zma testi s&uuml;recinin en kritik a\u015famalar\u0131ndan biri sistem bilgisinin toplanmas\u0131d\u0131r.<\/p>\r\n<h3>\u2714 2. Privilege Escalation Analizi<\/h3>\r\n<p>Yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f haklar, zay\u0131f servisler veya ayr\u0131cal\u0131kl\u0131 dosyalar tespit edilebilir.<\/p>\r\n<h3>\u2714 3. Sistem Y&ouml;neticileri \u0130&ccedil;in G&uuml;venlik Denetimi<\/h3>\r\n<p>Sistemlerin g&uuml;venlik seviyesini analiz etmek i&ccedil;in kullan\u0131labilir.<\/p>\r\n<h3>\u2714 4. CTF Yar\u0131\u015fmalar\u0131 ve E\u011fitim<\/h3>\r\n<p>&Ouml;\u011frenme ama&ccedil;l\u0131, Windows g&uuml;venlik mekanizmalar\u0131n\u0131 anlamak i&ccedil;in s\u0131k&ccedil;a tercih edilir.<\/p>\r\n<hr>\r\n<h1>\u26a0\ufe0f Yasal Uyar\u0131<\/h1>\r\n<p>JAWS yaln\u0131zca:<\/p>\r\n<ul>\r\n<li>\r\n<p>Kendi sistemlerinizde<\/p>\r\n<\/li>\r\n<li>\r\n<p>Size ait olmayan sistemlerde <strong>yaz\u0131l\u0131 izin al\u0131nm\u0131\u015fsa<\/strong><\/p>\r\n<\/li>\r\n<li>\r\n<p>E\u011fitim ve laboratuvar ortamlar\u0131nda<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>kullan\u0131lmal\u0131d\u0131r.<\/p>\r\n<blockquote>\r\n<p><strong>Yetkisiz sistemlere y&ouml;nelik kullan\u0131m\u0131 yasa d\u0131\u015f\u0131d\u0131r ve ciddi sorumluluk do\u011furur.<\/strong><\/p>\r\n<\/blockquote>\r\n<hr>\r\n<h1>\ud83d\udee0\ufe0f Kurulum ve Kullan\u0131m<\/h1>\r\n<p>JAWS bir PowerShell scripti oldu\u011fu i&ccedil;in &ccedil;al\u0131\u015ft\u0131rmas\u0131 olduk&ccedil;a kolayd\u0131r.<\/p>\r\n<h3>GitHub&rsquo;dan indir:<\/h3>\r\n<p><a href=\"https:\/\/github.com\/TheJoyOfHacking\/411Hall-JAWS\">https:\/\/github.com\/TheJoyOfHacking\/411Hall-JAWS<\/a><\/p>\r\n<hr>\r\n<h1>\u25b6\ufe0f Temel Kullan\u0131m Komutlar\u0131<\/h1>\r\n<hr>\r\n<h2>1. CMD &Uuml;zerinden &Ccedil;al\u0131\u015ft\u0131rma (&Ccedil;\u0131kt\u0131y\u0131 Dosyaya Yazma)<\/h2>\r\n<pre><code class=\"language-cmd\">C:\\temp&gt; powershell.exe -ExecutionPolicy Bypass -File .\\jaws-enum.ps1 -OutputFilename JAWS-Enum.txt\r\n<\/code><\/pre>\r\n<p>Bu komut &ccedil;al\u0131\u015ft\u0131\u011f\u0131nda sistem hakk\u0131nda <strong>kapsaml\u0131 bir rapor dosyas\u0131<\/strong> olu\u015fturur.<\/p>\r\n<hr>\r\n<h2>2. CMD &Uuml;zerinden Standart &Ccedil;al\u0131\u015ft\u0131rma<\/h2>\r\n<pre><code class=\"language-cmd\">C:\\temp&gt; powershell.exe -ExecutionPolicy Bypass -File .\\jaws-enum.ps1\r\n<\/code><\/pre>\r\n<hr>\r\n<h2>3. PowerShell &Uuml;zerinden &Ccedil;al\u0131\u015ft\u0131rma (Output dosyas\u0131na yazma)<\/h2>\r\n<pre><code class=\"language-powershell\">PS C:\\temp&gt; .\\jaws-enum.ps1 -OutputFileName Jaws-Enum.txt\r\n<\/code><\/pre>\r\n<hr>\r\n<h1>\ud83d\udcc4 &Ccedil;\u0131kt\u0131 Dosyas\u0131 Neler \u0130&ccedil;erir?<\/h1>\r\n<p>JAWS &ccedil;al\u0131\u015ft\u0131ktan sonra:<\/p>\r\n<ul>\r\n<li>\r\n<p>Sistem bilgisi<\/p>\r\n<\/li>\r\n<li>\r\n<p>A\u011f konfig&uuml;rasyonlar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>Kullan\u0131c\u0131\/grup bilgileri<\/p>\r\n<\/li>\r\n<li>\r\n<p>G&uuml;venlik ayarlar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>Yetki analizleri<\/p>\r\n<\/li>\r\n<li>\r\n<p>Zay\u0131f nokta tespitleri<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>gibi y&uuml;zlerce sat\u0131rdan olu\u015fan ayr\u0131nt\u0131l\u0131 bir rapor &uuml;retir.<\/p>\r\n<p>Bu rapor &ouml;zellikle penetrasyon testlerinde &ldquo;gizli hazineler&rdquo; sunar.<\/p>\r\n<hr>\r\n<h1>\ud83c\udfc1 Sonu&ccedil;<\/h1>\r\n<p>JAWS, Windows sistemler i&ccedil;in geli\u015ftirilen en kapsaml\u0131 PowerShell tabanl\u0131 bilgi toplama ara&ccedil;lar\u0131ndan biridir.<br>Penetrasyon testlerinden e\u011fitim ortamlar\u0131na kadar bir&ccedil;ok kullan\u0131m alan\u0131na sahiptir.<\/p>\r\n<p>Bu yaz\u0131da:<\/p>\r\n<ul>\r\n<li>\r\n<p>JAWS&rsquo;\u0131n ne oldu\u011funu<\/p>\r\n<\/li>\r\n<li>\r\n<p>Hangi &ouml;zelliklere sahip oldu\u011funu<\/p>\r\n<\/li>\r\n<li>\r\n<p>Kullan\u0131m senaryolar\u0131n\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>CMD ve PowerShell &uuml;zerinden nas\u0131l &ccedil;al\u0131\u015ft\u0131r\u0131ld\u0131\u011f\u0131n\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>Yasal kullan\u0131m gerekliliklerini<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>detayl\u0131 olarak ele ald\u0131k.<\/p>","excerpt":"GitHub'da bulunan (https:\/\/github.com\/TheJoyOfHacking\/411Hall-JAWS) projesi, Windows sistemlerinde bilgi toplama ve enumerasyon i\u00e7in tasarlanm\u0131\u015f...","created_at":"2021-12-05 20:03:24","updated_at":"2026-09-05 13:59:38","category_id":7,"view_count":522,"reading_time":4,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2021-12-05 20:03:00","featured_image":"ba17999369878142d1d7aa7e06477668.png","slug":"ad-pentest-tools","category_name":"Cyber Security","category_slug":"cyber-security","category_color":"#10b981"},{"id":303,"title":"Windows'ta Gizli A\u011f Adapt\u00f6rleri nas\u0131l kald\u0131r\u0131l\u0131r","content":"<p>&nbsp;<\/p>\r\n<h1>\ud83d\udda7 Windows&rsquo;ta Gizli A\u011f Ba\u011fda\u015ft\u0131r\u0131c\u0131lar\u0131 Sorunu ve &ldquo;IP Adresi Zaten Ba\u015fka Bir Adapt&ouml;re Atanm\u0131\u015f&rdquo; Hatas\u0131 &Ccedil;&ouml;z&uuml;m&uuml;<\/h1>\r\n<h3>(P2V, Donan\u0131m De\u011fi\u015fikli\u011fi, Hypervisor Migrasyonu ve VLAN Yap\u0131land\u0131rmalar\u0131nda G&ouml;r&uuml;len Sorun)<\/h3>\r\n<p><img src=\"https:\/\/i.sstatic.net\/fV7Kk.gif?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/woshub.com\/wp-content\/uploads\/2020\/11\/ghost-hidden-network-adapter-on-windows.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/winaero.com\/blog\/wp-content\/uploads\/2021\/05\/View-Hidden-Devices-in-Device-Manager-on-Windows-10.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/interworks.com\/wp-content\/uploads\/sites\/default\/files\/Blog-CannotRenameThisConnection-SS04.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/wmatthyssen.com\/wp-content\/uploads\/2020\/01\/blog_logo-2.jpg?w=950&amp;utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/telnet25.wordpress.com\/wp-content\/uploads\/2015\/07\/clip_image001.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p>Windows sistemlerde fiziksel bir a\u011f kart\u0131n\u0131 de\u011fi\u015ftirdi\u011finizde, sanal makineleri farkl\u0131 hypervisor&rsquo;ler aras\u0131nda ta\u015f\u0131d\u0131\u011f\u0131n\u0131zda (P2V \/ V2V \/ Migration) veya tek NIC &uuml;zerinde birden fazla VLAN yap\u0131land\u0131rd\u0131\u011f\u0131n\u0131zda olduk&ccedil;a s\u0131k kar\u015f\u0131la\u015f\u0131lan bir problem ortaya &ccedil;\u0131kar:<\/p>\r\n<blockquote>\r\n<p><strong>Gizli (Non-Present) a\u011f ba\u011fda\u015ft\u0131r\u0131c\u0131lar\u0131 Windows&rsquo;ta g&ouml;r&uuml;nmeye devam eder ve eski IP adresi yeni adapt&ouml;re atanamaz.<\/strong><\/p>\r\n<\/blockquote>\r\n<p>Bu durum &ouml;zellikle statik IP kullan\u0131lan sunucu ortamlar\u0131nda ciddi bir engeldir. &Ccedil;&uuml;nk&uuml; Windows, art\u0131k fiziksel olarak sistemde bulunmayan adapt&ouml;r&uuml;n &uuml;zerine kay\u0131tl\u0131 IP adresini &ldquo;korur&rdquo; ve yeni NIC i&ccedil;in kullan\u0131lmas\u0131na izin vermez.<\/p>\r\n<hr>\r\n<h1>\u2757 Kar\u015f\u0131la\u015f\u0131lan Hata<\/h1>\r\n<h2>&ldquo;Bu IP adresi zaten ba\u015fka bir a\u011f ba\u011fda\u015ft\u0131r\u0131c\u0131s\u0131na atanm\u0131\u015f&rdquo;<\/h2>\r\n<p><img src=\"https:\/\/us1.discourse-cdn.com\/spiceworks\/original\/4X\/2\/2\/8\/2286fc6ec720699b93bc276438b0a3ad99edd06c.jpeg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/www.itechguides.com\/wp-content\/uploads\/2019\/09\/image-492.webp?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/wmatthyssen.com\/wp-content\/uploads\/2020\/01\/blog_logo-2.jpg?w=950&amp;utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/wmatthyssen.com\/wp-content\/uploads\/2020\/01\/1-4.jpg?w=501&amp;utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p>Yeni a\u011f kart\u0131na bir IP adresi atamak istedi\u011finizde \u015fu uyar\u0131 &ccedil;\u0131kar:<\/p>\r\n<blockquote>\r\n<p><strong>Bu IP adresi zaten ba\u015fka bir a\u011f ba\u011fda\u015ft\u0131r\u0131c\u0131s\u0131na atanm\u0131\u015f, gizli bir adapt&ouml;r taraf\u0131ndan kullan\u0131l\u0131yor olabilir.<\/strong><\/p>\r\n<\/blockquote>\r\n<p>Ancak Ayg\u0131t Y&ouml;neticisi&rsquo;ni a&ccedil;t\u0131\u011f\u0131n\u0131zda eski adapt&ouml;r g&ouml;r&uuml;nmez. &Ccedil;&uuml;nk&uuml; Windows, art\u0131k fiziksel olarak ba\u011fl\u0131 olmayan cihazlar\u0131 <strong>otomatik olarak gizler<\/strong>.<\/p>\r\n<hr>\r\n<h1>\ud83e\udde0 Gizli A\u011f Adapt&ouml;rleri Neden Olu\u015fur?<\/h1>\r\n<p>Bu problem en &ccedil;ok \u015fu durumlarda ya\u015fan\u0131r:<\/p>\r\n<ul>\r\n<li>\r\n<p>Fiziksel NIC de\u011fi\u015fimi<\/p>\r\n<\/li>\r\n<li>\r\n<p>P2V (Physical to Virtual) d&ouml;n&uuml;\u015f&uuml;mleri<\/p>\r\n<\/li>\r\n<li>\r\n<p>VM migration (Hyper-V &rarr; VMware, VMware &rarr; Proxmox vb.)<\/p>\r\n<\/li>\r\n<li>\r\n<p>VLAN tagging ile tek NIC &uuml;zerinde birden &ccedil;ok sanal adapt&ouml;r olu\u015fturulmas\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>VPN veya sanal network yaz\u0131l\u0131mlar\u0131n\u0131n kald\u0131r\u0131lmas\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>Eski s&uuml;r&uuml;c&uuml;n&uuml;n d&uuml;zg&uuml;n kald\u0131r\u0131lmam\u0131\u015f olmas\u0131<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>Sonu&ccedil;: Windows, eski adapt&ouml;r&uuml; &ldquo;gizli&rdquo; olarak tutar ve &uuml;zerindeki IP adresi yeni kart taraf\u0131ndan kullan\u0131lamaz h&acirc;le gelir.<\/p>\r\n<hr>\r\n<h1>\ud83d\udee0 Gizli A\u011f Adapt&ouml;rlerini Silme ve IP Adresi Sorununu &Ccedil;&ouml;zme Y&ouml;ntemleri<\/h1>\r\n<p>A\u015fa\u011f\u0131da bu sorunu &ccedil;&ouml;zmek i&ccedil;in uygulanabilecek <strong>4 etkili y&ouml;ntem<\/strong> bulunuyor.<\/p>\r\n<hr>\r\n<h1>\ud83d\udd27 Y&ouml;ntem 1: Komut \u0130stemi ile Gizli Adapt&ouml;rleri G&ouml;sterip Kald\u0131rma<\/h1>\r\n<p><img src=\"https:\/\/www.thewindowsclub.com\/wp-content\/uploads\/2015\/03\/Show-non-present-devices-600x295.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/winaero.com\/blog\/wp-content\/uploads\/2021\/05\/View-Hidden-Devices-in-Device-Manager-on-Windows-10.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/www.thewindowsclub.com\/wp-content\/uploads\/2015\/03\/Show-non-present-devices.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/www.graef.io\/show-non-present-devices-in-windows-with-device-manager\/2021-08-10-11-56-22.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<h3>1. Y&ouml;netici CMD a&ccedil;\u0131n<\/h3>\r\n<p>Ba\u015flat &rarr; cmd &rarr; sa\u011f t\u0131k &rarr; <strong>Y&ouml;netici olarak &ccedil;al\u0131\u015ft\u0131r<\/strong><\/p>\r\n<h3>2. Gizli ayg\u0131tlar\u0131 g&ouml;r&uuml;n&uuml;r h&acirc;le getirin<\/h3>\r\n<pre><code class=\"language-cmd\">set devmgr_show_nonpresent_devices=1\r\nstart devmgmt.msc\r\n<\/code><\/pre>\r\n<h3>3. Ayg\u0131t Y&ouml;neticisi&rsquo;nde<\/h3>\r\n<ul>\r\n<li>\r\n<p><strong>G&ouml;r&uuml;n&uuml;m &rarr; Gizli ayg\u0131tlar\u0131 g&ouml;ster<\/strong><\/p>\r\n<\/li>\r\n<li>\r\n<p><strong>A\u011f ba\u011fda\u015ft\u0131r\u0131c\u0131lar\u0131<\/strong> b&ouml;l&uuml;m&uuml;n&uuml; a&ccedil;\u0131n<\/p>\r\n<\/li>\r\n<li>\r\n<p>Soluk (gri) g&ouml;r&uuml;nen adapt&ouml;rlere sa\u011f t\u0131klay\u0131p <strong>Ayg\u0131t\u0131 kald\u0131r<\/strong> se&ccedil;in<\/p>\r\n<\/li>\r\n<\/ul>\r\n<blockquote>\r\n<p>Bu y&ouml;ntem genelde sorunu %90 &ccedil;&ouml;zer.<\/p>\r\n<\/blockquote>\r\n<hr>\r\n<h1>\ud83c\udf00 Y&ouml;ntem 2: PowerShell ile Gizli NIC Temizleme<\/h1>\r\n<p><img src=\"https:\/\/www.sconstantinou.com\/wp-content\/uploads\/2018\/04\/get-netadapter-includehidden.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/us1.discourse-cdn.com\/spiceworks\/optimized\/4X\/a\/4\/3\/a4303829747503b9c0ac9d368a94286ecedbf4b9_2_690x337.jpeg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/www.techtutsonline.com\/wp-content\/uploads\/2022\/01\/Disable-NetAdapter.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/www.alexandrumarin.com\/wp-content\/uploads\/2023\/07\/get-netadapter.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<h3>1. Y&ouml;netici PowerShell a&ccedil;\u0131n<\/h3>\r\n<h3>2. Gizli adapt&ouml;rleri listeleyin<\/h3>\r\n<pre><code class=\"language-powershell\">Get-NetAdapter -IncludeHidden\r\n<\/code><\/pre>\r\n<h3>3. Belirli bir adapt&ouml;r&uuml; kald\u0131r\u0131n<\/h3>\r\n<pre><code class=\"language-powershell\">Remove-NetAdapter -Name \"Adapt&ouml;rAd\u0131\" -Confirm:$false\r\n<\/code><\/pre>\r\n<p>PowerShell y&ouml;nteminin avantaj\u0131:<br>Sanal adapt&ouml;r adlar\u0131n\u0131 daha d&uuml;zg&uuml;n g&ouml;sterir ve temizleme daha kontroll&uuml;d&uuml;r.<\/p>\r\n<hr>\r\n<h1>\ud83e\ude9b Y&ouml;ntem 3: Kay\u0131t Defterinden A\u011f\u0131 S\u0131f\u0131rlamak (Geli\u015fmi\u015f Y&ouml;ntem)<\/h1>\r\n<p><img src=\"https:\/\/www.majorgeeks.com\/content\/file\/3923_how%2Bto%2Breset%2Bthe%2Bregistry%2Beditor%2Bregedit%2Bto%2Bdefault.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/i.ytimg.com\/vi\/20io-0pTgD4\/maxresdefault.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/i.sstatic.net\/pT1dJ.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/i.sstatic.net\/ibMKi.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><strong>UYARI:<\/strong> \u0130\u015flem &ouml;ncesi Registry yede\u011fi al\u0131n.<\/p>\r\n<h3>1. Regedit a&ccedil;\u0131n<\/h3>\r\n<p><code>Win + R &rarr; regedit<\/code><\/p>\r\n<h3>2. \u015eu konuma gidin:<\/h3>\r\n<pre><code>HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Network\r\n<\/code><\/pre>\r\n<h3>3. <code>Config<\/code> klas&ouml;r&uuml;n&uuml; silin (yedek almay\u0131 unutmay\u0131n)<\/h3>\r\n<h3>4. Bilgisayar\u0131 yeniden ba\u015flat\u0131n<\/h3>\r\n<p>Bu i\u015flem b&uuml;t&uuml;n a\u011f yap\u0131land\u0131rma &ldquo;profilini&rdquo; s\u0131f\u0131rlar ve temiz bir ba\u015flang\u0131&ccedil; sa\u011flar.<\/p>\r\n<hr>\r\n<h1>\ud83d\udd01 Y&ouml;ntem 4: NetShell (netsh) ile A\u011f Yap\u0131land\u0131rmas\u0131n\u0131 S\u0131f\u0131rlama<\/h1>\r\n<p><img src=\"https:\/\/www.lifewire.com\/thmb\/U21VKrPfh7y8csQU_vZnKhJ8GB8%3D\/1500x0\/filters%3Ano_upscale%28%29%3Amax_bytes%28150000%29%3Astrip_icc%28%29\/netsh-winsock-reset-command-1cf13e8f07dd4f1c970e434785599d87.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/www.thewindowsclub.com\/wp-content\/uploads\/2019\/06\/reset-winsock.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/techlogon.com\/wp-content\/uploads\/2019\/09\/netsh-int-ip-reset.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/techlogon.com\/wp-content\/uploads\/2019\/09\/W10-netsh-int-ip-reset.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p>Y&ouml;netici Komut \u0130stemi a&ccedil;\u0131n ve \u015fu komutlar\u0131 &ccedil;al\u0131\u015ft\u0131r\u0131n:<\/p>\r\n<pre><code class=\"language-cmd\">netsh winsock reset catalog\r\nnetsh int ip reset reset.log\r\n<\/code><\/pre>\r\n<p>Son olarak bilgisayar\u0131 yeniden ba\u015flat\u0131n.<\/p>\r\n<p>Bu y&ouml;ntem &ouml;zellikle bozuk TCP\/IP stack ve Winsock sorunlar\u0131nda etkilidir.<\/p>\r\n<hr>\r\n<h1>\u26a0 &Ouml;nemli Uyar\u0131lar<\/h1>\r\n<p><img src=\"https:\/\/learn-attachment.microsoft.com\/api\/attachments\/e9c4c2b0-9934-4f8a-a5f3-af39b4294dc4?platform=QnA&amp;utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/techcommunity.microsoft.com\/legacyfs\/online\/media\/TNBlogsFS\/prod.evol.blogs.technet.com\/CommunityServer.Blogs.Components.WeblogFiles\/00\/00\/00\/31\/06\/metablogapi\/6811.image_0639AB78.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/cdn.mos.cms.futurecdn.net\/EF7xuQ9KZ6iLLQwqionvdi.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/support.microsoft.com\/images\/en-us\/b37f3c99-ab4b-4c8e-a653-b04acd26fd80?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<ul>\r\n<li>\r\n<p>Aktif kullan\u0131lan adapt&ouml;rleri <strong>asla<\/strong> silmeyin<\/p>\r\n<\/li>\r\n<li>\r\n<p>M&uuml;mk&uuml;nse i\u015flemden &ouml;nce bir <strong>Sistem Geri Y&uuml;kleme Noktas\u0131<\/strong> olu\u015fturun<\/p>\r\n<\/li>\r\n<li>\r\n<p>NIC s&uuml;r&uuml;c&uuml;lerini kald\u0131rd\u0131ktan sonra, gerekiyorsa yeniden kurabilirsiniz<\/p>\r\n<\/li>\r\n<li>\r\n<p>Sanal makinelerde i\u015flem sonras\u0131 <strong>MAC adresi<\/strong> e\u015fle\u015fmelerini kontrol edin<\/p>\r\n<\/li>\r\n<\/ul>\r\n<hr>\r\n<h1>\ud83c\udfc1 Sonu&ccedil;: Bu Sorun Sunucu Ortamlar\u0131nda S\u0131k G&ouml;r&uuml;l&uuml;r ve Kolayca &Ccedil;&ouml;z&uuml;lebilir<\/h1>\r\n<p>Bu rehberde:<\/p>\r\n<ul>\r\n<li>\r\n<p>Gizli a\u011f adapt&ouml;rlerinin neden olu\u015ftu\u011funu<\/p>\r\n<\/li>\r\n<li>\r\n<p>&ldquo;IP adresi zaten ba\u015fka adapt&ouml;re atanm\u0131\u015f&rdquo; hatas\u0131n\u0131n sebebini<\/p>\r\n<\/li>\r\n<li>\r\n<p>4 farkl\u0131 &ccedil;&ouml;z&uuml;m y&ouml;ntemini<\/p>\r\n<\/li>\r\n<li>\r\n<p>Registry, PowerShell ve netsh ile temizleme yollar\u0131n\u0131<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>ayr\u0131nt\u0131l\u0131 bir \u015fekilde &ouml;\u011frendiniz.<\/p>\r\n<p>Bu i&ccedil;erik hem teknik blog, hem kurumsal dok&uuml;man, hem de sistem y&ouml;neticisi e\u011fitim notu olarak kullan\u0131labilir.<\/p>","excerpt":"Bir anakart\u0131 veya a\u011f kart\u0131n\u0131 de\u011fi\u015ftirirken, sanal makinelerin hiperviz\u00f6rler \/ siteler aras\u0131nda P2V veyaMigrasyon s\u0131ras\u0131nda veya...","created_at":"2021-11-21 20:38:19","updated_at":"2026-09-07 17:08:25","category_id":6,"view_count":668,"reading_time":5,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2021-11-21 20:38:00","featured_image":"8a551586c6a5808c2e6be6a9ca379f59.png","slug":"windowsta-gizli-ag-adaptorleri-nasil-kaldirilir","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":307,"title":"Windows 10 hatas\u0131, bu dosyan\u0131n simgesini g\u00f6r\u00fcnce sabit diskinizi bozuyor","content":"<h1>Windows 10 NTFS G&uuml;venlik A&ccedil;\u0131\u011f\u0131: &ldquo;Bu Dosyan\u0131n Simgesini G&ouml;r&uuml;nce Sabit Diskinizi Bozuyor&rdquo; Hatas\u0131<\/h1>\r\n<h3>(0-Day NTFS Bug, Teknik Analiz ve &Ccedil;&ouml;z&uuml;m Rehberi)<\/h3>\r\n<p>&nbsp;<\/p>\r\n<p><img src=\"https:\/\/i.imgur.com\/zbMok0J.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/images.wondershare.com\/recoverit\/article\/2020\/03\/ntfs-system-error-1.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/www.windowslatest.com\/wp-content\/uploads\/2020\/12\/Windows-10-NTFS-BSOD.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/learn-attachment.microsoft.com\/api\/attachments\/63525b53-3ea6-4fdf-b348-152413fce01e?platform=QnA&amp;utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/i.ytimg.com\/vi\/BlVOxnX1i7g\/maxresdefault.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><strong>Microsoft Windows 10<\/strong>, uzun s&uuml;re yamalanmam\u0131\u015f kritik bir <strong>0-day NTFS g&uuml;venlik a&ccedil;\u0131\u011f\u0131<\/strong> nedeniyle, yaln\u0131zca tek sat\u0131rl\u0131k bir komutla <strong>NTFS dosya sistemli bir diskin bozulmas\u0131na<\/strong> neden olabiliyordu. Bu hata, kullan\u0131c\u0131 dosyay\u0131 a&ccedil;masa bile yaln\u0131zca <strong>simgesine bak\u0131ld\u0131\u011f\u0131nda bile<\/strong> tetiklenebilen bir kusurdu.<\/p>\r\n<p>Bu nedenle d&uuml;nya genelinde g&uuml;venlik ara\u015ft\u0131rmac\u0131lar\u0131 taraf\u0131ndan:<\/p>\r\n<blockquote>\r\n<p><strong>&ldquo;Kritik derecede k&uuml;&ccedil;&uuml;msenen NTFS g&uuml;venlik a&ccedil;\u0131\u011f\u0131&rdquo;<\/strong><\/p>\r\n<\/blockquote>\r\n<p>olarak tan\u0131mland\u0131.<\/p>\r\n<p>Bu rehberde hem g&uuml;venlik a&ccedil;\u0131\u011f\u0131n\u0131n nas\u0131l &ccedil;al\u0131\u015ft\u0131\u011f\u0131n\u0131 hem de Windows 10&rsquo;da g&ouml;r&uuml;len <strong>&ldquo;Bu dosyan\u0131n simgesini g&ouml;r&uuml;nce sabit diski bozuyor&rdquo;<\/strong> hatas\u0131n\u0131n sebeplerini ve &ccedil;&ouml;z&uuml;m yollar\u0131n\u0131 anlat\u0131yorum.<\/p>\r\n<hr>\r\n<h1>\ud83e\udde8 NTFS G&uuml;venlik A&ccedil;\u0131\u011f\u0131 Nas\u0131l &Ccedil;al\u0131\u015f\u0131yor?<\/h1>\r\n<p><img src=\"https:\/\/images.contentstack.io\/v3\/assets\/blt36c2e63521272fdc\/blt78798a55512d2199\/5f0c9d1a91afb901b86d57b1\/FTK_I30_2-300x231.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/images.contentstack.io\/v3\/assets\/blt36c2e63521272fdc\/blt4432818f0ba472eb\/5f0c9cfc9be1ce01c562a452\/WipeExample-300x122.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/www.researchgate.net\/publication\/316994448\/figure\/fig1\/AS%3A669542586003474%401536642800213\/Figure-23-The-NTFS-file-Structure.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/www.researchgate.net\/publication\/349982097\/figure\/fig1\/AS%3A11431281219146999%401705956895951\/Basic-Organization-of-NTFS-File-System.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/i.sstatic.net\/cqu2C.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/www.bleepstatic.com\/images\/news\/Microsoft\/Windows-10\/bugs\/ntfs-corruption-fix\/ntfs-corruption-bug.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p>Bu g&uuml;venlik a&ccedil;\u0131\u011f\u0131, NTFS i&ccedil;inde &ouml;zel bir attribute olan:<\/p>\r\n<pre><code>C:\\:$i30:$bitmap\r\n<\/code><\/pre>\r\n<p>adresine yap\u0131lan eri\u015fim s\u0131ras\u0131nda tetikleniyor.<br>Sald\u0131rganlar bu komutu a\u015fa\u011f\u0131daki t&uuml;rde dosyalar\u0131n i&ccedil;ine <strong>gizleyebiliyor<\/strong>:<\/p>\r\n<ul>\r\n<li>\r\n<p>Windows .url k\u0131sayollar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>Zip ar\u015fivleri<\/p>\r\n<\/li>\r\n<li>\r\n<p>HTML dosyalar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>Batch (.bat) dosyalar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>K\u0131sayol (.lnk) dosyalar\u0131<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>Kurban dosyay\u0131 <strong>hi&ccedil; a&ccedil;masa bile<\/strong>, dosya simgesi Explorer &uuml;zerinde g&ouml;r&uuml;nt&uuml;lendi\u011fi anda komut &ccedil;al\u0131\u015f\u0131p <strong>dosya sistemini bozuyor<\/strong>.<\/p>\r\n<h3>\ud83d\udccc Bu komutun etkisi:<\/h3>\r\n<ul>\r\n<li>\r\n<p>NTFS an\u0131nda bozuluyor<\/p>\r\n<\/li>\r\n<li>\r\n<p>Windows kullan\u0131c\u0131ya &ldquo;<strong>Dosya veya dizin bozuk ve okunam\u0131yor<\/strong>&rdquo; hatas\u0131 veriyor<\/p>\r\n<\/li>\r\n<li>\r\n<p>Sonras\u0131nda otomatik olarak CHKDSK &ccedil;al\u0131\u015ft\u0131r\u0131lmas\u0131 isteniyor<\/p>\r\n<\/li>\r\n<li>\r\n<p>Yeniden ba\u015flatma s\u0131ras\u0131nda Windows diski tarayarak (k\u0131smen) onarmaya &ccedil;al\u0131\u015f\u0131yor<\/p>\r\n<\/li>\r\n<\/ul>\r\n<h3>\u26a0 &Ouml;rnek NTFS&rsquo;i bozan komut (sak\u0131n canl\u0131 sistemde deneme!)<\/h3>\r\n<pre><code>C:\\:$i30:$bitmap\r\n<\/code><\/pre>\r\n<p><strong>UYARI:<\/strong> Bu komut ger&ccedil;ek sistemlerde &ccedil;al\u0131\u015ft\u0131r\u0131l\u0131rsa disk bozulur.<br>Denemek i&ccedil;in yaln\u0131zca snapshot al\u0131nm\u0131\u015f bir <strong>sanal makinada<\/strong> kullan\u0131lmal\u0131d\u0131r.<\/p>\r\n<p>Bu g&uuml;venlik a&ccedil;\u0131\u011f\u0131n\u0131n kod taraf\u0131nda hi&ccedil;bir log, registry izi veya event b\u0131rakmamas\u0131 nedeniyle Microsoft taraf\u0131ndan analiz edilmesi olduk&ccedil;a g&uuml;&ccedil;t&uuml;. Bu y&uuml;zden ara\u015ft\u0131rmac\u0131lar taraf\u0131ndan:<\/p>\r\n<blockquote>\r\n<p>&ldquo;Kaynak kod olmad\u0131\u011f\u0131 i&ccedil;in nedenini bulmak neredeyse imk&acirc;ns\u0131z&rdquo;<br>denildi.<\/p>\r\n<\/blockquote>\r\n<hr>\r\n<h1>\ud83d\udea8 Windows 10&rsquo;da G&ouml;r&uuml;len Hata:<\/h1>\r\n<h2>&ldquo;Bu Dosya veya Dizin Bozuk ve Okunam\u0131yor&rdquo;<\/h2>\r\n<p>Bu Windows 10 hatas\u0131, NTFS bozulmas\u0131ndan sonra ortaya &ccedil;\u0131kar. Ancak &ccedil;o\u011fu kullan\u0131c\u0131 bu hatay\u0131 <strong>genellikle zarars\u0131z simge bozulmalar\u0131yla kar\u0131\u015ft\u0131r\u0131yor<\/strong>. Simgeleri g&ouml;r&uuml;nt&uuml;lerken Explorer &ccedil;&ouml;ker ve disk okuma hatalar\u0131 olu\u015fabilir.<\/p>\r\n<p>A\u015fa\u011f\u0131da <strong>ger&ccedil;ek&ccedil;i nedenler<\/strong> ve &ccedil;&ouml;z&uuml;mler yer almaktad\u0131r.<\/p>\r\n<hr>\r\n<h1>\ud83d\udd75\ufe0f Olas\u0131 Nedenler<\/h1>\r\n<p><img src=\"https:\/\/woshub.com\/wp-content\/uploads\/2016\/10\/corrupted-icon-cache-win10.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/i.ytimg.com\/vi\/pliY3nUgw3E\/hq720.jpg?rs=AOn4CLDzzOuysqcu3c53siQVITJ18wM65Q&amp;sqp=-oaymwEhCK4FEIIDSFryq4qpAxMIARUAAAAAGAElAADIQj0AgKJD&amp;utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/images.minitool.com\/partitionwizard.com\/images\/uploads\/2025\/05\/ntfs-external-hard-drive-formatted-on-linux-is-not-recognized-by-windows-thumbnail.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/winaero.com\/blog\/wp-content\/uploads\/2021\/01\/Windows-10-The-file-or-directory-is-corrupted-and-unreadable.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<ul>\r\n<li>\r\n<p>Bozuk simge &ouml;nbelle\u011fi<\/p>\r\n<\/li>\r\n<li>\r\n<p>NTFS dosya sistemi bozulmas\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>Grafik s&uuml;r&uuml;c&uuml; hatalar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>Windows Explorer dosya &ouml;nbelle\u011fi &ccedil;ak\u0131\u015fmalar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>G&uuml;venlik a&ccedil;\u0131\u011f\u0131n\u0131n tetiklenmesi<\/p>\r\n<\/li>\r\n<\/ul>\r\n<hr>\r\n<h1>\ud83d\udee0 Windows 10 NTFS Hatas\u0131 &Ccedil;&ouml;z&uuml;m Y&ouml;ntemleri<\/h1>\r\n<p>A\u015fa\u011f\u0131daki &ccedil;&ouml;z&uuml;mler NTFS bozulmas\u0131 <em>olmayan<\/em>, yaln\u0131zca simge &ouml;nbelle\u011fi veya sistem dosyas\u0131 kaynakl\u0131 durumda i\u015fe yarar.<\/p>\r\n<p>E\u011fer NTFS ger&ccedil;ekten bozulduysa <strong>chkdsk<\/strong> otomatik olarak devreye girer.<\/p>\r\n<hr>\r\n<h1>\ud83d\udd27 1. Simge (Icon) &Ouml;nbelle\u011fini Temizleme<\/h1>\r\n<p><img src=\"https:\/\/cdn.mos.cms.futurecdn.net\/9AoeZgjqEyhQNXggySJ4CU.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/i.sstatic.net\/TvR0R.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/www.partitionwizard.com\/images\/uploads\/articles\/2021\/12\/rebuild-icon-cache-windows-11\/rebuild-icon-cache-windows-11-1.png?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<p><img src=\"https:\/\/woshub.com\/wp-content\/uploads\/2016\/10\/corrupted-icon-cache-win10.jpg?utm_source=chatgpt.com\" alt=\"Image\"><\/p>\r\n<ol>\r\n<li>\r\n<p>Dosya Gezgini&rsquo;ni kapat<\/p>\r\n<\/li>\r\n<li>\r\n<p>G&ouml;rev Y&ouml;neticisi &rarr; <em>Windows Gezgini<\/em> &rarr; <strong>G&ouml;revi Sonland\u0131r<\/strong><\/p>\r\n<\/li>\r\n<li>\r\n<p>Y&ouml;netici Komut \u0130stemi a&ccedil;<\/p>\r\n<\/li>\r\n<li>\r\n<p>\u015eu komutlar\u0131 s\u0131rayla &ccedil;al\u0131\u015ft\u0131r:<\/p>\r\n<\/li>\r\n<\/ol>\r\n<pre><code class=\"language-powershell\">taskkill \/f \/im explorer.exe\r\ndel \/a \/q %localappdata%\\IconCache.db\r\nstart explorer.exe\r\n<\/code><\/pre>\r\n<hr>\r\n<h1>\ud83d\udd0d 2. DISM ve SFC ile Sistem Dosyalar\u0131n\u0131 Onar<\/h1>\r\n<p>Bu taramalar bozuk NTFS yap\u0131s\u0131n\u0131 de\u011fil, bozuk sistem dosyalar\u0131n\u0131 d&uuml;zeltir.<\/p>\r\n<pre><code class=\"language-powershell\">DISM \/Online \/Cleanup-Image \/RestoreHealth\r\nsfc \/scannow\r\n<\/code><\/pre>\r\n<p>Tarama bitti\u011finde bilgisayar\u0131 yeniden ba\u015flat\u0131n.<\/p>\r\n<hr>\r\n<h1>\ud83c\udfa8 3. Grafik S&uuml;r&uuml;c&uuml;lerini G&uuml;ncelleyin<\/h1>\r\n<ol>\r\n<li>\r\n<p>Ayg\u0131t Y&ouml;neticisi<\/p>\r\n<\/li>\r\n<li>\r\n<p>G&ouml;r&uuml;nt&uuml; Ba\u011fda\u015ft\u0131r\u0131c\u0131lar\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>Ekran kart\u0131na sa\u011f t\u0131k &rarr; <strong>S&uuml;r&uuml;c&uuml;y&uuml; G&uuml;ncelle<\/strong><\/p>\r\n<\/li>\r\n<\/ol>\r\n<hr>\r\n<h1>\ud83d\udcbe 4. Windows Update ile Yamalar\u0131 Y&uuml;kleyin<\/h1>\r\n<p>Microsoft bu g&uuml;venlik a&ccedil;\u0131\u011f\u0131n\u0131 sonradan yay\u0131nlanan yamalarla kapatt\u0131.<br>Bu nedenle Windows Update mutlaka aktif olmal\u0131d\u0131r.<\/p>\r\n<hr>\r\n<h1>\ud83d\udee0 5. Alternatif &Ccedil;&ouml;z&uuml;m: Registry D&uuml;zenleme (Simge Sorunu \u0130&ccedil;in)<\/h1>\r\n<p><strong>UYARI:<\/strong> Registry d&uuml;zenlemeden &ouml;nce yedek al\u0131n.<\/p>\r\n<pre><code>HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Icons\r\n<\/code><\/pre>\r\n<p>E\u011fer yoksa <strong>Shell Icons<\/strong> anahtar\u0131n\u0131 olu\u015fturun.<\/p>\r\n<p>Yeni dize de\u011feri ekleyin:<\/p>\r\n<ul>\r\n<li>\r\n<p>Ad: <strong>29<\/strong><\/p>\r\n<\/li>\r\n<li>\r\n<p>De\u011fer: <code>C:\\Windows\\System32\\imageres.dll,154<\/code><\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>Sistem yeniden ba\u015flat\u0131ld\u0131\u011f\u0131nda simgeler yenilenir.<\/p>\r\n<hr>\r\n<h1>\ud83d\udd58 Sorun H&acirc;l&acirc; Devam Ediyorsa?<\/h1>\r\n<ul>\r\n<li>\r\n<p><strong>Sistem Geri Y&uuml;kleme (System Restore)<\/strong> kullan\u0131labilir<\/p>\r\n<\/li>\r\n<li>\r\n<p>NTFS bozulduysa Windows otomatik olarak CHKDSK y&uuml;r&uuml;t&uuml;r<\/p>\r\n<\/li>\r\n<li>\r\n<p>Disk SMART testi yap\u0131labilir<\/p>\r\n<\/li>\r\n<\/ul>\r\n<hr>\r\n<h1>\ud83e\udded Sonu&ccedil;: Bu Hata Hem G&uuml;venlik A&ccedil;\u0131\u011f\u0131 Hem de Simge Bozulmas\u0131 Kaynakl\u0131 Olabilir<\/h1>\r\n<p>Bu yaz\u0131da:<\/p>\r\n<ul>\r\n<li>\r\n<p>NTFS 0-day g&uuml;venlik a&ccedil;\u0131\u011f\u0131n\u0131n nas\u0131l &ccedil;al\u0131\u015ft\u0131\u011f\u0131n\u0131<\/p>\r\n<\/li>\r\n<li>\r\n<p>Dosya simgesinin nas\u0131l diski bozabildi\u011fini<\/p>\r\n<\/li>\r\n<li>\r\n<p>Windows 10'un neden &ldquo;dosya bozuk&rdquo; hatas\u0131 verdi\u011fini<\/p>\r\n<\/li>\r\n<li>\r\n<p>En pratik &ccedil;&ouml;z&uuml;m yollar\u0131n\u0131<\/p>\r\n<\/li>\r\n<\/ul>\r\n<p>detayl\u0131 olarak a&ccedil;\u0131klam\u0131\u015f oldum.<\/p>\r\n<p>\u0130ster teknik bir bloga ister kurum i&ccedil;i bir g&uuml;venlik dok&uuml;man\u0131na <em>direkt yap\u0131\u015ft\u0131r\u0131labilir haz\u0131r formattad\u0131r.<\/em><\/p>\r\n<hr>\r\n<p>&nbsp;<\/p>\r\n<p>Hangisini istersin?<\/p>","excerpt":"NTFS g\u00fcvenlik a\u00e7\u0131\u011f\u0131 :\u00a0Microsoft Windows 10\u2019da d\u00fczeltme yamas\u0131 y\u00fcklenmemi\u015f bir 0day, sald\u0131rganlar\u0131n NTFS bi\u00e7imli bir sabit s\u00fcr\u00fcc\u00fcy\u00fc...","created_at":"2021-04-06 19:52:49","updated_at":"2026-09-07 10:05:05","category_id":6,"view_count":585,"reading_time":5,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2021-04-06 19:52:00","featured_image":"a89e00399e8eceeea8506f017707c9a8.jpg","slug":"windows-10-hatasi-bu-dosyanin-simgesini-gorunce-sabit-diskinizi-bozuyor","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"},{"id":310,"title":"Windows Server 2022 RDS (Remote Desktop Services) Licensing Problemi ve \u00c7\u00f6z\u00fcm\u00fc","content":"Remote Desktop Services (RDS) ortamlar\u0131nda kar\u015f\u0131la\u015f\u0131lan en yayg\u0131n problemlerden biri lisanslama sorunlar\u0131d\u0131r. Bu yaz\u0131da, Windows Server 2022 \u00fczerinde RDS Licensing yap\u0131land\u0131rmas\u0131 s\u0131ras\u0131nda kar\u015f\u0131la\u015f\u0131lan problemleri ve \u00e7\u00f6z\u00fcm yollar\u0131, <h2 >Problem Tan\u0131m\u0131<\/h2> <p >RD Licensing Diagnoser \u00e7al\u0131\u015ft\u0131r\u0131ld\u0131\u011f\u0131nda a\u015fa\u011f\u0131daki hatalar ile kar\u015f\u0131la\u015f\u0131lm\u0131\u015ft\u0131r:<\/p> <ul > <li ><strong>Licensing Mode<\/strong>: Not configured (Yap\u0131land\u0131r\u0131lmam\u0131\u015f)<\/li> <li ><strong>License Server<\/strong>: RD Session Host server has not been configured with any license server<\/li> <li ><strong>Grace Period<\/strong>: Server grace period i\u00e7inde \u00e7al\u0131\u015f\u0131yor ancak lisans problemi mevcut<\/li> <\/ul> <h2 >Mevcut Sistem Durumu Analizi<\/h2> <h3 >PowerShell ile Durum Kontrol\u00fc<\/h3> <pre  data-enlighter-language=\"generic\">Get-RDLicenseConfiguration -ConnectionBroker \"RDPSERVER\"<\/pre> Sonu\u00e7: <blockquote>Mode LicenseServer ---- ------------- NotConfigured {RDPSERVER.corp.intra}<\/blockquote> <p >Bu durum, RDS ortam\u0131n\u0131n hen\u00fcz d\u00fczg\u00fcn yap\u0131land\u0131r\u0131lmad\u0131\u011f\u0131n\u0131 g\u00f6stermektedir.<\/p> <h2 >\u00c7\u00f6z\u00fcm Ad\u0131mlar\u0131<\/h2> <h3 >1. RDS License Configuration Ayarlama<\/h3> <p >\u0130lk olarak, RD Session Host'u lisans sunucusu ile yap\u0131land\u0131rmam\u0131z gerekiyor:<\/p> <div > <div > <div > <div > <div > <pre  data-enlighter-language=\"generic\"># PerUser modu i\u00e7in Set-RDLicenseConfiguration -LicenseServer \"RDPSERVER.corp.intra\" -Mode PerUser -ConnectionBroker \"RDPSERVER\" -Force # PerDevice modu Set-RDLicenseConfiguration -LicenseServer \"RDPSERVER.corp.intra\" -Mode PerDevice -ConnectionBroker \"RDPSERVER\" -Force<\/pre> 2. RDS Licensing Server'\u0131 Deployment'a Ekleme <pre  data-enlighter-language=\"generic\">Add-RDServer -Server \"RDPSERVER.corp.intra\" -Role RDS-Licensing -ConnectionBroker \"RDPSERVER\"<\/pre> <p ><strong>Not:<\/strong> Bu ad\u0131mda validation hatas\u0131 al\u0131nabilir, ancak yap\u0131land\u0131rma genellikle ba\u015far\u0131l\u0131 olur.<\/p> <h3 >3. License Server Durumu Kontrol\u00fc<\/h3> <p >RDS Licensing service'inin \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 kontrol edin:<\/p> <\/div> <div > <pre  data-enlighter-language=\"generic\"># Service durumu kontrol\u00fc Get-Service -Name \"TermServLicensing\" -ComputerName \"RDPSERVER.corp.intra\" # Service ba\u015flatma (gerekirse) Start-Service -Name \"TermServLicensing\"<\/pre> 4. WMI ile License Server Bilgilerini Kontrol Etme <pre  data-enlighter-language=\"generic\"># License server genel bilgileri Get-WmiObject -Class \"Win32_TSLicenseServer\" -ComputerName \"RDPSERVER.corp.intra\" # Verilmi\u015f lisanslar\u0131 kontrol etme Get-WmiObject -Class \"Win32_TSIssuedLicense\" -ComputerName \"RDPSERVER.corp.intra\"<\/pre> <h3 >License Server Bilgileri<\/h3> <p >WMI sorgusu sonucunda elde edilen bilgiler:<\/p> <ul > <li ><strong>Server Role<\/strong>: 1 (Aktif License Server)<\/li> <li ><strong>Version<\/strong>: Windows Server 2022<\/li> <li ><strong>Database Path<\/strong>: C:\\Windows\\System32\\LServer\\<\/li> <li ><strong>Product ID<\/strong>: Ge\u00e7erli lisans ID'si<\/li> <\/ul> &nbsp; <\/div> <\/div> <\/div> <\/div> <div > <h3 >Son Yap\u0131land\u0131rma Kontrol\u00fc<\/h3> <div > <div > <div > <div > <div > <pre  data-enlighter-language=\"generic\">Get-RDLicenseConfiguration -ConnectionBroker \"RDPSERVER\"<\/pre> <p ><strong>Ba\u015far\u0131l\u0131 Sonu\u00e7:<\/strong><\/p> <div > <div > <div > <div > <div > <pre  data-enlighter-language=\"generic\">Mode LicenseServer ---- ------------- PerUser {RDPSERVER.corp.intra}<\/pre> &nbsp; <\/div> <div >Registry Ayarlar\u0131 (\u0130ste\u011fe Ba\u011fl\u0131)<\/div> <\/div> <\/div> <\/div> <div> <pre  data-enlighter-language=\"generic\"># License server registry ayar\u0131 $regPath = \"HKLM:\\SYSTEM\\CurrentControlSet\\Control\\Terminal Server\\RCM\\Licensing Core\" Set-ItemProperty -Path $regPath -Name \"LicenseServers\" -Value \"RDPSERVER.corp.intra\" Set-ItemProperty -Path $regPath -Name \"LicensingMode\" -Value 4 # PerUser modu i\u00e7in<\/pre> <p ><strong>Licensing Mode De\u011ferleri:<\/strong><\/p> <ul > <li ><strong>2<\/strong>: PerDevice<\/li> <li ><strong>4<\/strong>: PerUser<\/li> <\/ul> &nbsp; <\/div> <\/div> <\/div> <h3 >1. Event Log Kontrol\u00fc<\/h3> <div> <pre  data-enlighter-language=\"generic\"># Terminal Services Licensing event'lerini kontrol edin Get-WinEvent -FilterHashtable @{LogName='System'; ProviderName='Microsoft-Windows-TerminalServices-Licensing'} -MaxEvents 10<\/pre> <h3 >2. Servisleri Yeniden Ba\u015flatma<\/h3> <div > <div > <div > <div > <div > <pre  data-enlighter-language=\"generic\">Restart-Service TermService -Force Restart-Service SessionEnv -Force Restart-Service TermServLicensing -Force<\/pre> <h3>3. RDS Deployment Durumu<\/h3> <\/div> <div > <pre  data-enlighter-language=\"generic\"># Deployment'taki t\u00fcm server'lar\u0131 listeleyin Get-RDServer -ConnectionBroker \"RDPSERVER\" # Session Host durumunu kontrol edin Get-RDSessionHost -ConnectionBroker \"RDPSERVER\"<\/pre> <h2 >\u00d6nemli Notlar<\/h2> <ol > <li ><strong>Grace Period<\/strong>: RDS lisanslama 120 g\u00fcnl\u00fck grace period sunar, ancak bu s\u00fcre sonunda lisans gereklidir.<\/li> <li ><strong>License Mode Se\u00e7imi<\/strong>: <ul > <li ><strong>PerUser<\/strong>: Her kullan\u0131c\u0131 i\u00e7in bir lisans (ayn\u0131 kullan\u0131c\u0131 birden fazla cihazdan ba\u011flanabilir)<\/li> <li ><strong>PerDevice<\/strong>: Her cihaz i\u00e7in bir lisans (cihazdan farkl\u0131 kullan\u0131c\u0131lar ba\u011flanabilir)<\/li> <\/ul> <\/li> <li ><strong>Domain Membership<\/strong>: License server ve RD Session Host'lar\u0131n ayn\u0131 domain'de olmas\u0131 \u00f6nerilir.<\/li> <li ><strong>License Activation<\/strong>: License server'\u0131n Microsoft ile activate edilmi\u015f olmas\u0131 gerekir.<\/li> <\/ol> <\/div> <\/div> <\/div> <\/div> <div ><\/div> <\/div> <\/div> <\/div> <\/div> <\/div> <div > <p >Bu \u00e7\u00f6z\u00fcm ad\u0131mlar\u0131n\u0131 takip ederek, Windows Server 2022 \u00fczerinde RDS Licensing problemlerini ba\u015far\u0131yla \u00e7\u00f6zebilirsiniz. Kritik nokta, do\u011fru license mode'unu se\u00e7mek ve license server'\u0131 deployment'a d\u00fczg\u00fcn \u015fekilde entegre etmektir.<\/p> <p >Yap\u0131land\u0131rma tamamland\u0131ktan sonra RD Licensing Diagnoser'da ye\u015fil i\u015faretler g\u00f6rmeniz ve kullan\u0131c\u0131lar\u0131n sorunsuz \u015fekilde Remote Desktop ba\u011flant\u0131s\u0131 kurabilmesi gerekir.<\/p> <hr \/> <p ><em>Bu YAZI, ger\u00e7ek bir Windows Server 2022 RDS ortam\u0131nda kar\u015f\u0131la\u015f\u0131lan problemlerin \u00e7\u00f6z\u00fcm\u00fc \u00fczerine yaz\u0131lm\u0131\u015ft\u0131r. Farkl\u0131 ortamlar i\u00e7in ek yap\u0131land\u0131rmalar gerekebilir.<\/em><\/p> <\/div> <\/div> <\/div> <\/div>","excerpt":"Remote Desktop Services (RDS) ortamlar\u0131nda kar\u015f\u0131la\u015f\u0131lan en yayg\u0131n problemlerden biri lisanslama sorunlar\u0131d\u0131r. Bu yaz\u0131da, Windows Server 2022...","created_at":"2020-03-05 08:34:59","updated_at":"2026-09-08 03:34:34","category_id":6,"view_count":573,"reading_time":3,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2020-03-05 08:34:59","featured_image":"resimyok.jpg","slug":"windows-server-2022-rds-remote-desktop-services-licensing-problemi-ve-cozumu","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"}]