[{"id":407,"title":"Windows Server 24H2 G\u00fcvenlik Alarm\u0131 ? KB5066835 Yamas\u0131","content":"<div id=\"model-response-message-contentr_23aa18ca0c31b55d\" class=\"markdown markdown-main-panel enable-luminous-fast-follows enable-updated-hr-color stronger\" dir=\"ltr\" aria-busy=\"false\" aria-live=\"polite\">\n<p data-path-to-node=\"3\">Siber g&uuml;venlik d&uuml;nyas\u0131nda zafiyetlerin \"ya\u015f\u0131\" her zaman riskin bitti\u011fi anlam\u0131na gelmez. Bunun en g&uuml;ncel &ouml;rne\u011fini, Microsoft&rsquo;un modern i\u015fletim sistemleri i&ccedil;in yay\u0131nlad\u0131\u011f\u0131 son toplu g&uuml;ncelle\u015ftirmelerde a&ccedil;\u0131k&ccedil;a g&ouml;r&uuml;yoruz. K&ouml;keni 2016 y\u0131l\u0131na dayanan bir a&ccedil;\u0131k kaynak k&uuml;t&uuml;phanesi zafiyeti, bug&uuml;n en g&uuml;ncel&nbsp;<strong data-path-to-node=\"3\" data-index-in-node=\"299\">Windows Server 24H2<\/strong> sistemlerimizi do\u011frudan etkileyebiliyor.<\/p>\n<p data-path-to-node=\"4\">Bu yaz\u0131m\u0131zda, sistem y&ouml;neticilerinin radar\u0131nda olmas\u0131 gereken <strong data-path-to-node=\"4\" data-index-in-node=\"62\">CVE-2016-9535<\/strong> zafiyetini ve &ccedil;&ouml;z&uuml;m ad\u0131mlar\u0131n\u0131 ele al\u0131yoruz.<\/p>\n<h3 data-path-to-node=\"6\">Tehlike Nedir? (CVE-2016-9535 ve LibTIFF)<\/h3>\n<p data-path-to-node=\"7\">Zafiyetin merkezinde, g&ouml;rsel i\u015fleme s&uuml;re&ccedil;lerinde yayg\u0131n olarak kullan\u0131lan a&ccedil;\u0131k kaynakl\u0131 bir k&uuml;t&uuml;phane olan <strong data-path-to-node=\"7\" data-index-in-node=\"107\">LibTIFF<\/strong> yer al\u0131yor. Bu k&uuml;t&uuml;phanenin eski s&uuml;r&uuml;mlerinde (<code data-path-to-node=\"7\" data-index-in-node=\"162\">tif_predict.c<\/code> kaynakl\u0131), k&ouml;t&uuml; ama&ccedil;l\u0131 yap\u0131land\u0131r\u0131lm\u0131\u015f bir TIFF g&ouml;rseli i\u015flenirken bellek boyutu yanl\u0131\u015f hesaplan\u0131yor.<\/p>\n<p data-path-to-node=\"8\">Sonu&ccedil;? <strong data-path-to-node=\"8\" data-index-in-node=\"7\">Kritik (CVSS: 9.8) seviyede bir Y\u0131\u011f\u0131n Tabanl\u0131 Arabellek Ta\u015fmas\u0131 (Heap-based Buffer Overflow).<\/strong><\/p>\n<p data-path-to-node=\"9\">Sald\u0131rganlar, bu a&ccedil;\u0131\u011f\u0131 manip&uuml;le ederek sistem &uuml;zerinde <strong data-path-to-node=\"9\" data-index-in-node=\"55\">Uzaktan Kod &Ccedil;al\u0131\u015ft\u0131rma (RCE)<\/strong> ger&ccedil;ekle\u015ftirebilir veya sistem servislerini tamamen &ccedil;&ouml;kerterek hizmet d\u0131\u015f\u0131 (DoS) b\u0131rakabilir.<\/p>\n<h3 data-path-to-node=\"10\">En G&uuml;ncel Sistemler Neden Etkileniyor?<\/h3>\n<p data-path-to-node=\"11\">Peki, 2016'n\u0131n a&ccedil;\u0131\u011f\u0131 neden 24H2 mimarisinde kar\u015f\u0131m\u0131za &ccedil;\u0131k\u0131yor?<\/p>\n<p data-path-to-node=\"12\">Bunun nedeni <strong data-path-to-node=\"12\" data-index-in-node=\"13\">yaz\u0131l\u0131m tedarik zinciri (Supply Chain)<\/strong> ba\u011f\u0131ml\u0131l\u0131klar\u0131d\u0131r. \u0130\u015fletim sistemlerinin alt katmanlar\u0131nda yer alan faks, yazd\u0131rma alt yap\u0131lar\u0131 veya dahili imaj g&ouml;r&uuml;nt&uuml;leme bile\u015fenleri, arka planda h&acirc;l&acirc; bu k&ouml;kl&uuml; k&uuml;t&uuml;phanelerin kod par&ccedil;ac\u0131klar\u0131n\u0131 bar\u0131nd\u0131rabiliyor. Microsoft, modern i\u015fletim sistemlerini tamamen g&uuml;venli hale getirmek ad\u0131na bu eski kal\u0131nt\u0131lar\u0131 da geriye d&ouml;n&uuml;k olarak temizlemektedir.<\/p>\n<h3 data-path-to-node=\"14\">&Ccedil;&ouml;z&uuml;m: KB5066835 G&uuml;ncelle\u015ftirmesi<\/h3>\n<p data-path-to-node=\"15\">Microsoft, x64 tabanl\u0131 Windows Server 24H2 ve Windows 11 sistemler i&ccedil;in bu a&ccedil;\u0131\u011f\u0131 kapatan <strong data-path-to-node=\"15\" data-index-in-node=\"89\">KB5066835<\/strong> toplu g&uuml;ncelle\u015ftirme paketini devreye ald\u0131.<\/p>\n<p data-path-to-node=\"16\">Bu yama, alt bile\u015fenlerdeki bellek tahsis aritmeti\u011fini ve s\u0131n\u0131r kontrollerini d&uuml;zelterek g&uuml;venlik a&ccedil;\u0131\u011f\u0131n\u0131 tamamen ortadan kald\u0131r\u0131yor. G&uuml;ncelleme ba\u015far\u0131yla uyguland\u0131\u011f\u0131nda, i\u015fletim sistemi derleme numaran\u0131z <strong data-path-to-node=\"16\" data-index-in-node=\"205\">26100.6899<\/strong> (veya &uuml;zeri) seviyesine y&uuml;kselmektedir.<\/p>\n<h3 data-path-to-node=\"18\">Sistem Y&ouml;neticileri \u0130&ccedil;in 3 Ad\u0131ml\u0131 Aksiyon Plan\u0131<\/h3>\n<p data-path-to-node=\"19\">E\u011fer altyap\u0131n\u0131zda Windows Server 24H2 veya Windows 11 24H2 &ccedil;al\u0131\u015ft\u0131ran sunucu ve istemciler varsa, a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 h\u0131zla uygulaman\u0131z\u0131 &ouml;neririz:<\/p>\n<ol start=\"1\" data-path-to-node=\"20\">\n<li>\n<p data-path-to-node=\"20,0,0\"><strong data-path-to-node=\"20,0,0\" data-index-in-node=\"0\">Envanter Kontrol&uuml;:<\/strong> WSUS, SCCM veya Microsoft Defender for Endpoint &uuml;zerinden sistemlerinizin derleme (build) numaralar\u0131n\u0131 filtreleyin.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"20,1,0\"><strong data-path-to-node=\"20,1,0\" data-index-in-node=\"0\">Yama Da\u011f\u0131t\u0131m\u0131:<\/strong> Test ortamlar\u0131nda do\u011frulamas\u0131 yap\u0131lan <strong data-path-to-node=\"20,1,0\" data-index-in-node=\"53\">KB5066835<\/strong> g&uuml;ncellemesini &uuml;retim (production) ortam\u0131ndaki sunucular\u0131n\u0131za planl\u0131 bir kesinti pencerelerinde da\u011f\u0131t\u0131n.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"20,2,0\"><strong data-path-to-node=\"20,2,0\" data-index-in-node=\"0\">Do\u011frulama:<\/strong> G&uuml;ncelleme sonras\u0131nda sunucularda PowerShell &uuml;zerinden a\u015fa\u011f\u0131daki komutu &ccedil;al\u0131\u015ft\u0131rarak g&uuml;venli derleme s&uuml;r&uuml;m&uuml;ne ula\u015ft\u0131\u011f\u0131n\u0131z\u0131 teyit edin:<\/p>\n<!----><!----><!----><!----><!----><!----><!----><!---->\n<div class=\"code-block ng-tns-c2643669177-22 ng-animate-disabled ng-trigger ng-trigger-codeBlockRevealAnimation\" data-hveid=\"0\" data-ved=\"0CAAQhtANahgKEwj1lp7dwMKVAxUAAAAAHQAAAAAQrwE\"><!---->\n<div class=\"formatted-code-block-internal-container ng-tns-c2643669177-22\">\n<div class=\"animated-opacity ng-tns-c2643669177-22\">\n<div class=\"code-block-decoration header-formatted gds-emphasized-body-m ng-tns-c2643669177-22 ng-star-inserted\"><span class=\"ng-tns-c2643669177-22\">PowerShell<\/span><!----><!----><button class=\"mdc-icon-button mat-mdc-icon-button mat-mdc-button-base mat-badge mat-unthemed _mat-animation-noopable mat-badge-overlap mat-badge-above mat-badge-after mat-badge-small mat-badge-hidden ng-star-inserted\" aria-label=\"Kodu indir\"><!----><!----><!----><!----><\/button><!----><!----><!----><!----><!----><!----><!----><!----><!----><button class=\"mdc-icon-button mat-mdc-icon-button mat-mdc-button-base mat-badge mat-unthemed _mat-animation-noopable mat-badge-overlap mat-badge-above mat-badge-after mat-badge-small mat-badge-hidden ng-star-inserted\" aria-label=\"Kodu kopyala\"><!----><!----><!----><!----><\/button><!----><!----><!----><!----><!----><!----><!----><!----><\/div>\n<div class=\"code-block-decoration header-formatted gds-emphasized-body-m ng-tns-c2643669177-22 ng-star-inserted\"><code class=\"code-container formatted ng-tns-c2643669177-22\" role=\"text\" data-test-id=\"code-content\">(<span class=\"hljs-built_in\">Get-ItemProperty<\/span> <span class=\"hljs-string\">\"HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\"<\/span>).UBR\n<\/code><\/div>\n<!----><!----><\/div>\n<\/div>\n<\/div>\n<!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><\/li>\n<\/ol>\n<p data-path-to-node=\"21\">Unutmay\u0131n; siber sald\u0131rganlar sistem s\u0131zmalar\u0131 i&ccedil;in her zaman en karma\u015f\u0131k s\u0131f\u0131r\u0131nc\u0131 g&uuml;n (Zero-Day) a&ccedil;\u0131klar\u0131n\u0131 aramazlar, &ccedil;o\u011fu zaman g&ouml;zden ka&ccedil;an eski ve yamalanmam\u0131\u015f k&uuml;t&uuml;phaneleri kullan\u0131rlar. Sistemlerinizi g&uuml;ncel tutun, altyap\u0131n\u0131z\u0131 g&uuml;vende b\u0131rak\u0131n!!!<\/p>\n<\/div>","excerpt":"Siber g\u00fcvenlik d\u00fcnyas\u0131nda zafiyetlerin \"ya\u015f\u0131\" her zaman riskin bitti\u011fi anlam\u0131na gelmez. Bunun en g\u00fcncel \u00f6rne\u011fini, Microsoft\u2019un modern i\u015fletim sistemleri i\u00e7in yay\u0131nlad\u0131\u011f\u0131 son toplu g\u00fcncelle\u015ftirmelerde a\u00e7\u0131k\u00e7a g\u00f6r\u00fcyoruz. K\u00f6keni 2016 y\u0131l\u0131na dayanan bir a\u00e7\u0131k kaynak k\u00fct\u00fcphanesi zafiyeti, bug\u00fcn en g\u00fcncel\u00a0Windows Server 24H2 sistemlerimizi do\u011frudan etkileyebiliyor.","created_at":"2026-07-08 10:11:25","updated_at":"2026-09-08 02:29:31","category_id":12,"view_count":253,"reading_time":4,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2026-07-08 07:11:25","featured_image":"\/uploads\/images\/2026\/07\/6a4df819b9d6e_1783494681.jpg","slug":"windows-server-24h2-guvenlik-alarmi-kb5066835-yamasi","category_name":"Misconfiguration","category_slug":"misconfiguration","category_color":"#84cc16"},{"id":383,"title":"Windows Sunucularda G\u00fcvenlik Analizi: Kullan\u0131c\u0131 Oturumlar\u0131n\u0131 \u0130zleme ve Raporlama","content":"<div id=\"model-response-message-contentr_9badafa2c860b643\" class=\"markdown markdown-main-panel stronger enable-updated-hr-color\" dir=\"ltr\" aria-live=\"polite\" aria-busy=\"false\">\n<p data-path-to-node=\"3\">&nbsp;<\/p>\n<p data-path-to-node=\"4\">Bu yaz\u0131m\u0131zda, Windows sunucular\u0131n\u0131zda kullan\u0131c\u0131 giri\u015flerini analiz etmek i&ccedil;in kullanabilece\u011finiz profesyonel y&ouml;ntemleri ele al\u0131yoruz.<\/p>\n<h3 data-path-to-node=\"5\">1. Event Viewer: Sistem G&uuml;nl&uuml;klerinin \"Kara Kutusu\"<\/h3>\n<p data-path-to-node=\"6\">Windows tabanl\u0131 sistemlerde ger&ccedil;ekle\u015fen her ba\u015far\u0131l\u0131 veya ba\u015far\u0131s\u0131z giri\u015f denemesi, G&uuml;venlik (Security) g&uuml;nl&uuml;klerine kaydedilir. Bir siber g&uuml;venlik analizi veya denetim s\u0131ras\u0131nda bakman\u0131z gereken ilk yer buras\u0131d\u0131r.<\/p>\n<ul data-path-to-node=\"7\">\n<li>\n<p data-path-to-node=\"7,0,0\"><strong data-path-to-node=\"7,0,0\" data-index-in-node=\"0\">Yol:<\/strong> <code data-path-to-node=\"7,0,0\" data-index-in-node=\"5\">Event Viewer &gt; Windows Logs &gt; Security<\/code><\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"7,1,0\"><strong data-path-to-node=\"7,1,0\" data-index-in-node=\"0\">Filtreleme:<\/strong> Sa\u011f paneldeki \"Filter Current Log\" se&ccedil;ene\u011fine t\u0131klayarak <strong data-path-to-node=\"7,1,0\" data-index-in-node=\"69\">Event ID: 4624<\/strong> (Success Logon) kodunu arat\u0131n.<\/p>\n<\/li>\n<\/ul>\n<p>Kritik \u0130pucu: Logon Type Parametresi<\/p>\n<p>ID 4624 tek ba\u015f\u0131na yeterli de\u011fildir. Detaylar k\u0131sm\u0131ndaki \"Logon Type\" verisi, giri\u015fin t&uuml;r&uuml;n&uuml; s&ouml;yler:<\/p>\n<ul data-path-to-node=\"9\">\n<li>\n<p data-path-to-node=\"9,0,0\"><strong data-path-to-node=\"9,0,0\" data-index-in-node=\"0\">Type 2:<\/strong> Fiziksel klavye ve monit&ouml;r ba\u015f\u0131ndaki giri\u015f.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"9,1,0\"><strong data-path-to-node=\"9,1,0\" data-index-in-node=\"0\">Type 3:<\/strong> A\u011f &uuml;zerinden (dosya payla\u015f\u0131m\u0131 gibi) eri\u015fim.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"9,2,0\"><strong data-path-to-node=\"9,2,0\" data-index-in-node=\"0\">Type 10:<\/strong> En kritik olan\u0131d\u0131r; Uzak Masa&uuml;st&uuml; (RDP) ba\u011flant\u0131s\u0131n\u0131 temsil eder.<\/p>\n<\/li>\n<\/ul>\n<h3 data-path-to-node=\"10\">2. PowerShell ile H\u0131zl\u0131 Raporlama<\/h3>\n<p data-path-to-node=\"11\">Aray&uuml;z i&ccedil;inde kaybolmak yerine, PowerShell'in g&uuml;c&uuml;n&uuml; kullanarak son giri\u015f yapan kullan\u0131c\u0131lar\u0131 saniyeler i&ccedil;inde listeleyebilirsiniz. A\u015fa\u011f\u0131daki komut, sunucuya en son giri\u015f yapan 5 ba\u015far\u0131l\u0131 oturum a&ccedil;ma i\u015flemini kullan\u0131c\u0131 ad\u0131 ve zaman damgas\u0131yla getirir:<\/p>\n<!----><!----><!----><!----><!----><!----><!---->\n<div class=\"code-block ng-tns-c2721585414-85 ng-animate-disabled ng-trigger ng-trigger-codeBlockRevealAnimation\" data-hveid=\"0\" data-ved=\"0CAAQhtANahcKEwiqgOqIqIuSAxUAAAAAHQAAAAAQbg\">\n<div class=\"code-block-decoration header-formatted gds-title-s ng-tns-c2721585414-85 ng-star-inserted\"><span class=\"ng-tns-c2721585414-85\">PowerShell<\/span>\n<div class=\"buttons ng-tns-c2721585414-85 ng-star-inserted\"><button class=\"mdc-icon-button mat-mdc-icon-button mat-mdc-button-base mat-mdc-tooltip-trigger copy-button ng-tns-c2721585414-85 mat-unthemed _mat-animation-noopable ng-star-inserted\" aria-label=\"Kodu kopyala\"><\/button><!----><!----><\/div>\n<!----><\/div>\n<!---->\n<div class=\"formatted-code-block-internal-container ng-tns-c2721585414-85\">\n<div class=\"animated-opacity ng-tns-c2721585414-85\">\n<pre class=\"ng-tns-c2721585414-85\"><code class=\"code-container formatted ng-tns-c2721585414-85\" role=\"text\" data-test-id=\"code-content\"><span class=\"hljs-built_in\">Get-EventLog<\/span> <span class=\"hljs-literal\">-LogName<\/span> Security <span class=\"hljs-literal\">-InstanceId<\/span> <span class=\"hljs-number\">4624<\/span> <span class=\"hljs-literal\">-Newest<\/span> <span class=\"hljs-number\">5<\/span> | \n<span class=\"hljs-built_in\">Select-Object<\/span> TimeGenerated, <span class=\"hljs-selector-tag\">@<\/span>{Name=<span class=\"hljs-string\">\"User\"<\/span>; Expression={<span class=\"hljs-variable\">$_<\/span>.ReplacementStrings[<span class=\"hljs-number\">5<\/span>]}}\n<\/code><\/pre>\n<!----><\/div>\n<\/div>\n<\/div>\n<!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!---->\n<p data-path-to-node=\"13\">Bu y&ouml;ntem, &ouml;zellikle rutin kontroller s\u0131ras\u0131nda zaman kazanman\u0131z\u0131 sa\u011flar.<\/p>\n<h3 data-path-to-node=\"14\">3. \"quser\" Komutu: Anl\u0131k Durum Analizi<\/h3>\n<p data-path-to-node=\"15\">Sunucunuzun performans\u0131nda bir yava\u015flama hissetti\u011finizde veya \"Uzak masa&uuml;st&uuml; kullan\u0131c\u0131 s\u0131n\u0131r\u0131na ula\u015f\u0131ld\u0131\" hatas\u0131 ald\u0131\u011f\u0131n\u0131zda, o an kimlerin sistemde oldu\u011funu bilmeniz gerekir.<\/p>\n<p data-path-to-node=\"16\">Terminali (CMD veya PowerShell) a&ccedil;\u0131n ve sadece <code data-path-to-node=\"16\" data-index-in-node=\"47\">quser<\/code> yaz\u0131n. Bu komut size \u015fu bilgileri verir:<\/p>\n<ul data-path-to-node=\"17\">\n<li>\n<p data-path-to-node=\"17,0,0\">Aktif kullan\u0131c\u0131 adlar\u0131.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"17,1,0\">Oturumun durumu (Active \/ Disconnected).<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"17,2,0\">Oturumun ba\u015flang\u0131&ccedil; saati.<\/p>\n<\/li>\n<\/ul>\n<p data-path-to-node=\"18\"><em data-path-to-node=\"18\" data-index-in-node=\"0\">E\u011fer bir kullan\u0131c\u0131 oturumunu kapatmak yerine sadece pencereyi &ccedil;arpt\u0131ysa, oturumu \"Disconnected\" olarak g&ouml;receksiniz. Bu durum gereksiz kaynak t&uuml;ketimine neden olabilir.<\/em><\/p>\n<h3 data-path-to-node=\"19\">4. Kay\u0131t Defteri (Registry) &Uuml;zerinden Son Kullan\u0131c\u0131 Kontrol&uuml;<\/h3>\n<p>Sunucuda en son hangi kullan\u0131c\u0131n\u0131n i\u015flem yapt\u0131\u011f\u0131n\u0131 h\u0131zl\u0131ca g&ouml;rmek i&ccedil;in Registry kay\u0131tlar\u0131na da g&ouml;z atabilirsiniz:<\/p>\n<p>HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Authentication\\LogonUI<\/p>\n<p data-path-to-node=\"21\">Buradaki <strong data-path-to-node=\"21\" data-index-in-node=\"9\">LastLoggedOnUser<\/strong> anahtar\u0131, sistemin haf\u0131zas\u0131ndaki son kullan\u0131c\u0131 bilgisini statik olarak tutar.<\/p>\n<p data-path-to-node=\"21\">&nbsp;<\/p>\n<div id=\"model-response-message-contentr_14680a3defe63e45\" class=\"markdown markdown-main-panel stronger enable-updated-hr-color\" dir=\"ltr\" aria-live=\"polite\" aria-busy=\"false\">\n<p data-path-to-node=\"0\">blog yaz\u0131s\u0131nda bahsetti\u011fim y&ouml;ntemleri (Event Viewer analizi, aktif kullan\u0131c\u0131 sorgulama ve son giri\u015f yapan kullan\u0131c\u0131y\u0131 g&ouml;rme) tek bir aray&uuml;zde birle\u015ftiren, kullan\u0131m\u0131 kolay bir <strong data-path-to-node=\"0\" data-index-in-node=\"190\">PowerShell GUI<\/strong> haz\u0131rlad\u0131m.<\/p>\n<p data-path-to-node=\"1\">Bu ara&ccedil;; RDP giri\u015flerini (Logon Type 10), fiziksel giri\u015fleri ve anl\u0131k aktif kullan\u0131c\u0131lar\u0131 tek t\u0131kla listeler.<\/p>\n<h3 data-path-to-node=\"2\">PowerShell GUI Kodu<\/h3>\n<p data-path-to-node=\"3\">A\u015fa\u011f\u0131daki kodu bir <code data-path-to-node=\"3\" data-index-in-node=\"19\">.ps1<\/code> dosyas\u0131 olarak kaydedip (&ouml;rne\u011fin: <code data-path-to-node=\"3\" data-index-in-node=\"58\">OturumIzleme.ps1<\/code>) sa\u011f t\u0131klay\u0131p \"PowerShell ile &Ccedil;al\u0131\u015ft\u0131r\" diyebilirsiniz:<\/p>\n<!----><!----><!----><!----><!----><!----><!---->\n<div class=\"code-block ng-tns-c2721585414-94 ng-animate-disabled ng-trigger ng-trigger-codeBlockRevealAnimation\" data-hveid=\"0\" data-ved=\"0CAAQhtANahgKEwiqgOqIqIuSAxUAAAAAHQAAAAAQgwE\">\n<div class=\"formatted-code-block-internal-container ng-tns-c2721585414-94\">\n<div class=\"animated-opacity ng-tns-c2721585414-94\">\n<pre class=\"ng-tns-c2721585414-94\">&nbsp;<\/pre>\n<pre class=\"language-markup\"><code># Gerekli k&uuml;t&uuml;phaneleri y&uuml;kle\nAdd-Type -AssemblyName System.Windows.Forms\nAdd-Type -AssemblyName System.Drawing\n\n# Ana Form Ayarlar\u0131\n$form = New-Object System.Windows.Forms.Form\n$form.Text = \"Ondernet - Windows Oturum \u0130zleme Paneli\"\n$form.Size = New-Object System.Drawing.Size(850, 650)\n$form.StartPosition = \"CenterScreen\"\n$form.BackColor = \"#F8F9FA\"\n$form.Font = New-Object System.Drawing.Font(\"Segoe UI\", 9)\n\n# Ba\u015fl\u0131k Etiketi\n$label = New-Object System.Windows.Forms.Label\n$label.Text = \"Sunucu Eri\u015fim ve G&uuml;venlik Analizi\"\n$label.Location = New-Object System.Drawing.Point(20, 15)\n$label.Size = New-Object System.Drawing.Size(400, 30)\n$label.Font = New-Object System.Drawing.Font(\"Segoe UI\", 16, [System.Drawing.FontStyle]::Bold)\n$label.ForeColor = \"#212529\"\n$form.Controls.Add($label)\n\n# Veri Tablosu (DataGridView)\n$dataGridView = New-Object System.Windows.Forms.DataGridView\n$dataGridView.Location = New-Object System.Drawing.Point(20, 110)\n$dataGridView.Size = New-Object System.Drawing.Size(790, 430)\n$dataGridView.AutoSizeColumnsMode = \"Fill\"\n$dataGridView.BackgroundColor = \"White\"\n$dataGridView.BorderStyle = \"None\"\n$dataGridView.RowHeadersVisible = $false\n$dataGridView.ReadOnly = $true\n$dataGridView.SelectionMode = \"FullRowSelect\"\n$dataGridView.AlternatingRowsDefaultCellStyle.BackColor = \"#F2F2F2\"\n$form.Controls.Add($dataGridView)\n\n# Fonksiyon: Veriyi Grid'e G&uuml;venli Basma\nfunction Update-Grid {\n    param($DataList)\n    $arrayList = New-Object System.Collections.ArrayList\n    if ($DataList) {\n        $arrayList.AddRange($DataList)\n    }\n    $dataGridView.DataSource = $arrayList\n}\n\n# 1. Buton: Aktif Kullan\u0131c\u0131lar (quser)\n$btnQuser = New-Object System.Windows.Forms.Button\n$btnQuser.Text = \"Anl\u0131k Aktif Kullan\u0131c\u0131lar\"\n$btnQuser.Location = New-Object System.Drawing.Point(20, 60)\n$btnQuser.Size = New-Object System.Drawing.Size(250, 40)\n$btnQuser.BackColor = \"#0078D7\"\n$btnQuser.ForeColor = \"White\"\n$btnQuser.FlatStyle = \"Flat\"\n$btnQuser.Cursor = [System.Windows.Forms.Cursors]::Hand\n$btnQuser.Add_Click({\n    # quser &ccedil;\u0131kt\u0131s\u0131n\u0131 g&uuml;venli bir \u015fekilde diziye al (tek sonu&ccedil; olsa bile)\n    $rawOutput = @(quser 2&gt;$null)\n    \n    if ($rawOutput.Count -gt 0) {\n        $data = @($rawOutput | Select-Object -Skip 1 | ForEach-Object {\n            # Bo\u015fluklara g&ouml;re b&ouml;l ve temizle\n            $line = $_.Trim() -split '\\s{2,}'\n            [PSCustomObject]@{\n                Kullanici    = $line[0].Replace(\"&gt;\",\"\") # Aktif kullan\u0131c\u0131 imlecini temizle\n                Oturum_Adi   = if($line[1] -match '^\\d+$') { \"RDP\/None\" } else { $line[1] }\n                ID           = if($line[1] -match '^\\d+$') { $line[1] } else { $line[2] }\n                Durum        = if($line[1] -match '^\\d+$') { $line[2] } else { $line[3] }\n                Giris_Zamani = if($line[1] -match '^\\d+$') { $line[4] } else { $line[5] }\n            }\n        })\n        Update-Grid -DataList $data\n    } else {\n        [System.Windows.Forms.MessageBox]::Show(\"Aktif oturum bulunamad\u0131 veya yetki yetersiz.\", \"Bilgi\")\n    }\n})\n$form.Controls.Add($btnQuser)\n\n# 2. Buton: Son 15 Ba\u015far\u0131l\u0131 Giri\u015f (Event Log)\n$btnLogon = New-Object System.Windows.Forms.Button\n$btnLogon.Text = \"Son 15 Ba\u015far\u0131l\u0131 Giri\u015f (Event Log)\"\n$btnLogon.Location = New-Object System.Drawing.Point(285, 60)\n$btnLogon.Size = New-Object System.Drawing.Size(250, 40)\n$btnLogon.BackColor = \"#28A745\"\n$btnLogon.ForeColor = \"White\"\n$btnLogon.FlatStyle = \"Flat\"\n$btnLogon.Cursor = [System.Windows.Forms.Cursors]::Hand\n$btnLogon.Add_Click({\n    try {\n        $events = @(Get-WinEvent -FilterHashtable @{LogName='Security';ID=4624} -MaxEvents 15 -ErrorAction SilentlyContinue | ForEach-Object {\n            [PSCustomObject]@{\n                Tarih_Saat  = $_.TimeCreated\n                Kullanici   = $_.Properties[5].Value\n                Logon_Tipi  = $_.Properties[8].Value # Tip 10: RDP, Tip 2: Yerel\n                Kaynak_IP   = $_.Properties[18].Value\n            }\n        })\n        Update-Grid -DataList $events\n    } catch {\n        [System.Windows.Forms.MessageBox]::Show(\"Olay g&uuml;nl&uuml;kleri okunurken hata olu\u015ftu. Y&ouml;netici olarak &ccedil;al\u0131\u015ft\u0131rd\u0131\u011f\u0131n\u0131zdan emin olun.\", \"Hata\")\n    }\n})\n$form.Controls.Add($btnLogon)\n\n# 3. Buton: Registry Son Kullan\u0131c\u0131 Bilgisi\n$btnReg = New-Object System.Windows.Forms.Button\n$btnReg.Text = \"Kay\u0131t Defteri (Son Kay\u0131t)\"\n$btnReg.Location = New-Object System.Drawing.Point(550, 60)\n$btnReg.Size = New-Object System.Drawing.Size(250, 40)\n$btnReg.BackColor = \"#6C757D\"\n$btnReg.ForeColor = \"White\"\n$btnReg.FlatStyle = \"Flat\"\n$btnReg.Cursor = [System.Windows.Forms.Cursors]::Hand\n$btnReg.Add_Click({\n    $regPath = \"HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Authentication\\LogonUI\"\n    $lastUser = (Get-ItemProperty -Path $regPath -ErrorAction SilentlyContinue).LastLoggedOnUser\n    if ($lastUser) {\n        [System.Windows.Forms.MessageBox]::Show(\"Windows Kay\u0131t Defterine G&ouml;re Son Giri\u015f Yapan:`n`n$lastUser\", \"Registry Bilgisi\")\n    } else {\n        [System.Windows.Forms.MessageBox]::Show(\"Bilgi al\u0131namad\u0131.\", \"Hata\")\n    }\n})\n$form.Controls.Add($btnReg)\n\n# Alt Bilgi (Footer)\n$footer = New-Object System.Windows.Forms.Label\n$footer.Text = \"&copy; 2024 Ondernet.net - Sunucu G&uuml;venlik Analiz Arac\u0131\"\n$footer.Location = New-Object System.Drawing.Point(20, 560)\n$footer.Size = New-Object System.Drawing.Size(500, 20)\n$footer.ForeColor = \"Gray\"\n$form.Controls.Add($footer)\n\n# Formu G&ouml;ster\n[void]$form.ShowDialog()<\/code><\/pre>\n<pre class=\"ng-tns-c2721585414-94\"><code class=\"code-container formatted ng-tns-c2721585414-94\" role=\"text\" data-test-id=\"code-content\">\n<\/code><\/pre>\n<!----><\/div>\n<\/div>\n<\/div>\n<!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!---->\n<h3 data-path-to-node=\"5\">Ara&ccedil; Neleri Kaps\u0131yor?<\/h3>\n<ol start=\"1\" data-path-to-node=\"6\">\n<li>\n<p data-path-to-node=\"6,0,0\"><strong data-path-to-node=\"6,0,0\" data-index-in-node=\"0\">Anl\u0131k Aktif Kullan\u0131c\u0131lar (quser):<\/strong> Sunucuda o anda \"Active\" veya \"Disconnected\" durumda olan t&uuml;m kullan\u0131c\u0131lar\u0131, oturum ID'leri ve giri\u015f saatleriyle birlikte tabloya d&ouml;ker.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"6,1,0\"><strong data-path-to-node=\"6,1,0\" data-index-in-node=\"0\">Son 10 Giri\u015f (Event ID 4624):<\/strong> G&uuml;venlik g&uuml;nl&uuml;klerini tarar. Kullan\u0131c\u0131 ad\u0131n\u0131n yan\u0131 s\u0131ra, blog yaz\u0131s\u0131nda kritik oldu\u011fu belirtilen <strong data-path-to-node=\"6,1,0\" data-index-in-node=\"127\">Logon Type<\/strong> ve <strong data-path-to-node=\"6,1,0\" data-index-in-node=\"141\">Kaynak IP<\/strong> bilgilerini g&ouml;sterir (&Ouml;rn: Type 10 g&ouml;r&uuml;yorsan\u0131z RDP ile giri\u015ftir).<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"6,2,0\"><strong data-path-to-node=\"6,2,0\" data-index-in-node=\"0\">Registry Bilgisi:<\/strong> Windows'un kay\u0131t defterinde tuttu\u011fu \"son giri\u015f yapan kullan\u0131c\u0131\" bilgisini k&uuml;&ccedil;&uuml;k bir pop-up mesaj\u0131 olarak ekrana getirir.<\/p>\n<\/li>\n<\/ol>\n<h3 data-path-to-node=\"7\">&Ccedil;al\u0131\u015ft\u0131rmadan &Ouml;nce Notlar:<\/h3>\n<ul data-path-to-node=\"8\">\n<li>\n<p data-path-to-node=\"8,0,0\"><strong data-path-to-node=\"8,0,0\" data-index-in-node=\"0\">Y&ouml;netici Yetkisi:<\/strong> <code data-path-to-node=\"8,0,0\" data-index-in-node=\"18\">Security<\/code> loglar\u0131n\u0131 okumak ve <code data-path-to-node=\"8,0,0\" data-index-in-node=\"47\">quser<\/code> komutunu &ccedil;al\u0131\u015ft\u0131rmak i&ccedil;in PowerShell'i <strong data-path-to-node=\"8,0,0\" data-index-in-node=\"92\">Y&ouml;netici Olarak &Ccedil;al\u0131\u015ft\u0131r<\/strong> se&ccedil;ene\u011fiyle a&ccedil;mal\u0131s\u0131n\u0131z.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"8,1,0\"><strong data-path-to-node=\"8,1,0\" data-index-in-node=\"0\">Execution Policy:<\/strong> E\u011fer script &ccedil;al\u0131\u015fmazsa, terminale <code data-path-to-node=\"8,1,0\" data-index-in-node=\"52\">Set-ExecutionPolicy RemoteSigned -Scope CurrentUser<\/code> komutunu yazarak izin verebilirsiniz.<\/p>\n<\/li>\n<\/ul>\n<\/div>\n<hr data-path-to-node=\"22\">\n<h3 data-path-to-node=\"23\">Ondernet &Ouml;nerisi: Neden \u0130zleme Yapmal\u0131s\u0131n\u0131z?<\/h3>\n<p data-path-to-node=\"24\">Sistem g&uuml;venli\u011fi sadece d\u0131\u015far\u0131dan gelen sald\u0131r\u0131lara kar\u015f\u0131 barikat kurmak de\u011fildir. \u0130&ccedil;erideki hareketlili\u011fi izlemek, yetkisiz eri\u015fimleri erkenden tespit etmenize ve olas\u0131 bir hata durumunda \"sorumlu hesab\u0131\" h\u0131zl\u0131ca bulman\u0131za olanak tan\u0131r.<\/p>\n<p data-path-to-node=\"25\"><strong data-path-to-node=\"25\" data-index-in-node=\"0\">Sunucu g&uuml;venli\u011finizi bir &uuml;st seviyeye ta\u015f\u0131mak m\u0131 istiyorsunuz?<\/strong> Y&uuml;ksek performansl\u0131 ve g&uuml;venli <strong data-path-to-node=\"25\" data-index-in-node=\"94\">Windows VDS<\/strong> &ccedil;&ouml;z&uuml;mlerimizle tan\u0131\u015fmak i&ccedil;in <!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><a class=\"ng-star-inserted\" href=\"..\/..\/\" target=\"_blank\" rel=\"noopener\" data-hveid=\"0\" data-ved=\"0CAAQ_4QMahcKEwiqgOqIqIuSAxUAAAAAHQAAAAAQbw\">Ondernet.net<\/a><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----> adresini ziyaret edebilir, uzman ekibimizden destek alabilirsiniz.<\/p>\n<hr data-path-to-node=\"26\">\n<p data-path-to-node=\"27\"><em data-path-to-node=\"27\" data-index-in-node=\"0\">Bu yaz\u0131, sistem y&ouml;neticilerinin g&uuml;nl&uuml;k operasyonlar\u0131n\u0131 kolayla\u015ft\u0131rmak ve g&uuml;venlik fark\u0131ndal\u0131\u011f\u0131n\u0131 art\u0131rmak amac\u0131yla haz\u0131rlanm\u0131\u015ft\u0131r.<\/em><\/p>\n<\/div>","excerpt":"Sunucu y\u00f6netimi sadece servislerin ayakta kalmas\u0131n\u0131 sa\u011flamak de\u011fil, ayn\u0131 zamanda sistemin \"kim taraf\u0131ndan, ne zaman ve nas\u0131l\" kullan\u0131ld\u0131\u011f\u0131n\u0131 takip etmektir. \u00d6zellikle \u00e7ok kullan\u0131c\u0131l\u0131 Windows Sunucu ortamlar\u0131nda veya uzak masa\u00fcst\u00fc (RDP) trafi\u011finin yo\u011fun oldu\u011fu yap\u0131larda, oturum izleme operasyonel g\u00fcvenli\u011fin temel ta\u015f\u0131d\u0131r.","created_at":"2026-01-14 20:03:49","updated_at":"2026-09-08 04:02:21","category_id":9,"view_count":545,"reading_time":8,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2026-01-14 17:03:49","featured_image":"\/uploads\/images\/2026\/01\/6967cc5d11958_1768410205.png","slug":"windows-sunucularda-guvenlik-analizi-kullanici-oturumlarini-izleme-ve-raporlama","category_name":"Yaz\u0131l\u0131m","category_slug":"yazilim","category_color":"#ef4444"},{"id":375,"title":"Active Directory Ortam\u0131n\u0131z\u0131 G\u00fcvenli Hale Getirmenin 5 Yolu","content":"<div id=\"model-response-message-contentr_39dc0001f7df709f\" class=\"markdown markdown-main-panel stronger enable-updated-hr-color\" dir=\"ltr\" aria-live=\"polite\" aria-busy=\"false\">\n<p data-path-to-node=\"5\">\u0130\u015fte t&uuml;m <strong data-path-to-node=\"5\" data-index-in-node=\"9\">Active Directory<\/strong>, <strong data-path-to-node=\"5\" data-index-in-node=\"27\">Group Policy<\/strong> ve <strong data-path-to-node=\"5\" data-index-in-node=\"43\">Windows Security<\/strong> y&ouml;neticilerine y&ouml;nelik haz\u0131rlad\u0131\u011f\u0131m\u0131z \"Holiday Administrator Challenge\"!<\/p>\n<hr data-path-to-node=\"6\">\n<h3 data-path-to-node=\"7\">1. Parola Politikan\u0131z Ger&ccedil;ekten Sand\u0131\u011f\u0131n\u0131z Gibi mi?<\/h3>\n<p data-path-to-node=\"8\">&Ccedil;o\u011fu y&ouml;netici, <code data-path-to-node=\"8\" data-index-in-node=\"15\">Default Domain Policy<\/code> &uuml;zerindeki parola ayarlar\u0131na bakar ve \"Tamam, herkes 12 karakter kullan\u0131yor\" der. Ancak b&uuml;y&uuml;k bir yan\u0131lg\u0131 var: <strong data-path-to-node=\"8\" data-index-in-node=\"148\">Fine-Grained Password Policies (FGPP)<\/strong>.<\/p>\n<ul data-path-to-node=\"9\">\n<li>\n<p data-path-to-node=\"9,0,0\"><strong data-path-to-node=\"9,0,0\" data-index-in-node=\"0\">Neden &Ouml;nemli?<\/strong> E\u011fer birisi ge&ccedil;mi\u015fte belirli bir grup i&ccedil;in (&ouml;rne\u011fin y&ouml;neticiler veya stajyerler) &ouml;zel bir parola politikas\u0131 olu\u015fturduysa, bu politika Default Domain Policy'yi ezer.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"9,1,0\"><strong data-path-to-node=\"9,1,0\" data-index-in-node=\"0\">Ne Yapmal\u0131?<\/strong> <code data-path-to-node=\"9,1,0\" data-index-in-node=\"12\">AD Administrative Center<\/code> &uuml;zerinden \"Password Settings Container\"\u0131 kontrol edin. T&uuml;m kullan\u0131c\u0131lar\u0131n\u0131z\u0131n ger&ccedil;ekten hedefledi\u011finiz karma\u015f\u0131kl\u0131k ve uzunluk standartlar\u0131na tabi oldu\u011fundan emin olun.<\/p>\n<\/li>\n<\/ul>\n<h3 data-path-to-node=\"10\">2. Auditing (Denetleme): K&ouml;r Noktalar\u0131n\u0131z\u0131 Kontrol Edin<\/h3>\n<p data-path-to-node=\"11\">Domain Controller (DC) g&uuml;nl&uuml;kleriniz size her \u015feyi anlat\u0131yor mu, yoksa sadece g&uuml;r&uuml;lt&uuml; m&uuml; yap\u0131yor?<\/p>\n<ul data-path-to-node=\"12\">\n<li>\n<p data-path-to-node=\"12,0,0\"><strong data-path-to-node=\"12,0,0\" data-index-in-node=\"0\">B&uuml;y&uuml;k Hata:<\/strong> Geleneksel Auditing ile <strong data-path-to-node=\"12,0,0\" data-index-in-node=\"36\">Advanced Audit Policy Configuration<\/strong> (Geli\u015fmi\u015f Denetim \u0130lkesi Yap\u0131land\u0131rmas\u0131) bir arada kullan\u0131lamaz. E\u011fer ikisini de etkinle\u015ftirirseniz, geli\u015fmi\u015f politikalar &ouml;ncelik kazan\u0131r ancak RSOP (Resultant Set of Policy) raporlar\u0131nda yanl\u0131\u015f sonu&ccedil;lar g&ouml;rebilirsiniz.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"12,1,0\"><strong data-path-to-node=\"12,1,0\" data-index-in-node=\"0\">\u0130pucu:<\/strong> Sisteminizde \"Audit: Force audit policy subcategory settings\" ayar\u0131n\u0131n etkin oldu\u011fundan emin olun ve denetlemelerinizi alt kategoriler baz\u0131nda (Logon\/Logoff, Object Access vb.) optimize edin.<\/p>\n<\/li>\n<\/ul>\n<h3 data-path-to-node=\"13\">3. G&uuml;venlik Ara&ccedil;lar\u0131n\u0131z \"M\u0131\u015f Gibi\" mi Yap\u0131yor?<\/h3>\n<p data-path-to-node=\"14\">En pahal\u0131 SIEM veya AD izleme arac\u0131na sahip olman\u0131z, g&uuml;vende oldu\u011funuz anlam\u0131na gelmez.<\/p>\n<ul data-path-to-node=\"15\">\n<li>\n<p data-path-to-node=\"15,0,0\"><strong data-path-to-node=\"15,0,0\" data-index-in-node=\"0\">Ger&ccedil;eklik Kontrol&uuml;:<\/strong> Arac\u0131n\u0131z en son ne zaman veri toplad\u0131? Replikasyon ak\u0131\u015f\u0131nda bir kopukluk var m\u0131? Event log'lar d&uuml;zg&uuml;n bir \u015fekilde merkeze ak\u0131yor mu?<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"15,1,0\"><strong data-path-to-node=\"15,1,0\" data-index-in-node=\"0\">Kontrol Listesi:<\/strong> Ara&ccedil;lar\u0131n\u0131z\u0131n son ba\u015far\u0131l\u0131 tarama tarihini (Last Scan\/Sync) kontrol edin. E\u011fer veriler 24 saatten eskiyse, k&ouml;r u&ccedil;u\u015fu yap\u0131yor olabilirsiniz.<\/p>\n<\/li>\n<\/ul>\n<h3 data-path-to-node=\"16\">4. \"Administrator\" Hesab\u0131n\u0131 Bir Hedefe D&ouml;n&uuml;\u015ft&uuml;r&uuml;n (Honeypot)<\/h3>\n<p data-path-to-node=\"17\">Yerle\u015fik (built-in) Administrator hesab\u0131, sald\u0131rganlar\u0131n ilk hedefidir. Onu kullanmay\u0131 b\u0131rak\u0131n ve bir tuza\u011fa d&ouml;n&uuml;\u015ft&uuml;r&uuml;n.<\/p>\n<ul data-path-to-node=\"18\">\n<li>\n<p data-path-to-node=\"18,0,0\"><strong data-path-to-node=\"18,0,0\" data-index-in-node=\"0\">Strateji:<\/strong> Bu hesab\u0131n parolas\u0131n\u0131 &ccedil;ok karma\u015f\u0131k bir de\u011ferle de\u011fi\u015ftirin ve asla kullanmay\u0131n. Ard\u0131ndan, bu hesaba bir <strong data-path-to-node=\"18,0,0\" data-index-in-node=\"113\">Honeypot (Bal k&uuml;p&uuml;)<\/strong> muamelesi yap\u0131n: E\u011fer bu hesapla bir giri\u015f giri\u015fimi olursa, an\u0131nda telefonunuza alarm d&uuml;\u015fecek bir sistem kurun.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"18,1,0\"><strong data-path-to-node=\"18,1,0\" data-index-in-node=\"0\">Unutmay\u0131n:<\/strong> G&uuml;nl&uuml;k i\u015fleriniz i&ccedil;in \"Named Account\" (isimlendirilmi\u015f hesap) kullan\u0131n ve bu hesaplar\u0131n yetkilerini k\u0131s\u0131tlay\u0131n.<\/p>\n<\/li>\n<\/ul>\n<h3 data-path-to-node=\"19\">5. Kritik Gruplar\u0131 Bo\u015falt\u0131n: Schema &amp; Enterprise Admins<\/h3>\n<p data-path-to-node=\"20\">Bu gruplar \"\u0130svi&ccedil;re &Ccedil;ak\u0131s\u0131\" gibidir, ancak sadece bir \u015feyler bozuldu\u011funda veya y&uuml;kseltme yap\u0131ld\u0131\u011f\u0131nda (Exchange Schema Update vb.) laz\u0131md\u0131r.<\/p>\n<ul data-path-to-node=\"21\">\n<li>\n<p data-path-to-node=\"21,0,0\"><strong data-path-to-node=\"21,0,0\" data-index-in-node=\"0\">Alt\u0131n Kural:<\/strong> <strong data-path-to-node=\"21,0,0\" data-index-in-node=\"13\">Schema Admins<\/strong> ve <strong data-path-to-node=\"21,0,0\" data-index-in-node=\"30\">Enterprise Admins<\/strong> gruplar\u0131 normal zamanlarda <strong data-path-to-node=\"21,0,0\" data-index-in-node=\"75\">BO\u015e<\/strong> olmal\u0131d\u0131r.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"21,1,0\"><strong data-path-to-node=\"21,1,0\" data-index-in-node=\"0\">Aksiyon Plan\u0131:<\/strong> Bu gruplara birisi eklendi\u011finde size anl\u0131k e-posta veya SMS bildirimi g&ouml;nderecek bir \"Alert\" mekanizmas\u0131 kurun. Yetki gerekti\u011finde kullan\u0131c\u0131y\u0131 ekleyin, i\u015fi bitince &ccedil;\u0131kart\u0131n.<\/p>\n<\/li>\n<\/ul>\n<div id=\"model-response-message-contentr_13da5cabbeb4e5d1\" class=\"markdown markdown-main-panel stronger enable-updated-hr-color\" dir=\"ltr\" aria-live=\"polite\" aria-busy=\"false\">\n<h1 data-path-to-node=\"2\">Teknik Derin Bak\u0131\u015f: Active Directory G&uuml;venlik Taramas\u0131<\/h1>\n<h3 data-path-to-node=\"3\">1. Parola Politikalar\u0131n\u0131n Ke\u015ffi (FGPP)<\/h3>\n<p data-path-to-node=\"4\">Sadece GPO'ya bakmak yetmez. Domaininizdeki \"\u0130nce Ayarl\u0131 Parola Politikalar\u0131n\u0131\" (Fine-Grained Password Policies) \u015fu komutla listeleyebilirsiniz:<\/p>\n<!----><!----><!----><!----><!----><!----><!---->\n<div class=\"code-block ng-tns-c503815587-80 ng-animate-disabled ng-trigger ng-trigger-codeBlockRevealAnimation\" data-hveid=\"0\" data-ved=\"0CAAQhtANahgKEwjU7cyox_ORAxUAAAAAHQAAAAAQ2QE\">\n<div class=\"code-block-decoration header-formatted gds-title-s ng-tns-c503815587-80 ng-star-inserted\"><span class=\"ng-tns-c503815587-80\">PowerShell<\/span>\n<div class=\"buttons ng-tns-c503815587-80 ng-star-inserted\"><button class=\"mdc-icon-button mat-mdc-icon-button mat-mdc-button-base mat-mdc-tooltip-trigger copy-button ng-tns-c503815587-80 mat-unthemed _mat-animation-noopable ng-star-inserted\" aria-label=\"Kodu kopyala\"><\/button><!----><!----><\/div>\n<!----><\/div>\n<!---->\n<div class=\"formatted-code-block-internal-container ng-tns-c503815587-80\">\n<div class=\"animated-opacity ng-tns-c503815587-80\">\n<pre class=\"ng-tns-c503815587-80\"><code class=\"code-container formatted ng-tns-c503815587-80\" role=\"text\" data-test-id=\"code-content\"><span class=\"hljs-comment\"># Mevcut t&uuml;m Fine-Grained Password politikalar\u0131n\u0131 g&ouml;r&uuml;nt&uuml;le<\/span>\n<span class=\"hljs-built_in\">Get-ADFineGrainedPasswordPolicy<\/span> <span class=\"hljs-literal\">-Filter<\/span> * | <span class=\"hljs-built_in\">Select-Object<\/span> Name, Precedence, ComplexityEnabled, PasswordHistoryCount, MinPasswordLength\n<\/code><\/pre>\n<!----><\/div>\n<\/div>\n<\/div>\n<!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!---->\n<p data-path-to-node=\"6\"><em data-path-to-node=\"6\" data-index-in-node=\"0\">E\u011fer bu komut bo\u015f d&ouml;n&uuml;yorsa, sadece Default Domain Policy ge&ccedil;erlidir. E\u011fer doluysa, <code data-path-to-node=\"6\" data-index-in-node=\"84\">Precedence<\/code> (&ouml;ncelik) de\u011feri en d&uuml;\u015f&uuml;k olan (&ouml;rn: 1) en bask\u0131n politikad\u0131r.<\/em><\/p>\n<h3 data-path-to-node=\"7\">2. Geli\u015fmi\u015f Denetim Politikas\u0131 (Advanced Auditing)<\/h3>\n<p data-path-to-node=\"8\">DC'lerinizde hangi denetimlerin aktif oldu\u011funu RSOP yerine \u015fu komutla ham veriden kontrol edin:<\/p>\n<!----><!----><!----><!----><!----><!----><!---->\n<div class=\"code-block ng-tns-c503815587-81 ng-animate-disabled ng-trigger ng-trigger-codeBlockRevealAnimation\" data-hveid=\"0\" data-ved=\"0CAAQhtANahgKEwjU7cyox_ORAxUAAAAAHQAAAAAQ2gE\">\n<div class=\"code-block-decoration header-formatted gds-title-s ng-tns-c503815587-81 ng-star-inserted\"><span class=\"ng-tns-c503815587-81\">PowerShell<\/span>\n<div class=\"buttons ng-tns-c503815587-81 ng-star-inserted\"><button class=\"mdc-icon-button mat-mdc-icon-button mat-mdc-button-base mat-mdc-tooltip-trigger copy-button ng-tns-c503815587-81 mat-unthemed _mat-animation-noopable ng-star-inserted\" aria-label=\"Kodu kopyala\"><\/button><!----><!----><\/div>\n<!----><\/div>\n<!---->\n<div class=\"formatted-code-block-internal-container ng-tns-c503815587-81\">\n<div class=\"animated-opacity ng-tns-c503815587-81\">\n<pre class=\"ng-tns-c503815587-81\"><code class=\"code-container formatted ng-tns-c503815587-81\" role=\"text\" data-test-id=\"code-content\"><span class=\"hljs-comment\"># DC &uuml;zerinde hangi audit alt kategorilerinin a&ccedil;\u0131k oldu\u011funu kontrol et<\/span>\nauditpol \/get \/category:*\n<\/code><\/pre>\n<!----><\/div>\n<\/div>\n<\/div>\n<!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!---->\n<p data-path-to-node=\"10\"><em data-path-to-node=\"10\" data-index-in-node=\"0\">Not: GPO &uuml;zerinden \"Audit: Force audit policy subcategory settings\" (Denetim: Denetim ilkesi alt kategori ayarlar\u0131n\u0131 zorla) ayar\u0131n\u0131n <strong data-path-to-node=\"10\" data-index-in-node=\"133\">Enabled<\/strong> oldu\u011fundan emin olun.<\/em><\/p>\n<h3 data-path-to-node=\"11\">3. Kritik Gruplar\u0131n Temizli\u011fi (Schema &amp; Enterprise Admins)<\/h3>\n<p data-path-to-node=\"12\">Bu gruplar\u0131n &uuml;yelerini h\u0131zl\u0131ca kontrol etmek ve bo\u015f olduklar\u0131n\u0131 teyit etmek i&ccedil;in:<\/p>\n<!----><!----><!----><!----><!----><!----><!---->\n<div class=\"code-block ng-tns-c503815587-82 ng-animate-disabled ng-trigger ng-trigger-codeBlockRevealAnimation\" data-hveid=\"0\" data-ved=\"0CAAQhtANahgKEwjU7cyox_ORAxUAAAAAHQAAAAAQ2wE\">\n<div class=\"code-block-decoration header-formatted gds-title-s ng-tns-c503815587-82 ng-star-inserted\"><span class=\"ng-tns-c503815587-82\">PowerShell<\/span>\n<div class=\"buttons ng-tns-c503815587-82 ng-star-inserted\"><button class=\"mdc-icon-button mat-mdc-icon-button mat-mdc-button-base mat-mdc-tooltip-trigger copy-button ng-tns-c503815587-82 mat-unthemed _mat-animation-noopable ng-star-inserted\" aria-label=\"Kodu kopyala\"><\/button><!----><!----><\/div>\n<!----><\/div>\n<!---->\n<div class=\"formatted-code-block-internal-container ng-tns-c503815587-82\">\n<div class=\"animated-opacity ng-tns-c503815587-82\">\n<pre class=\"ng-tns-c503815587-82\"><code class=\"code-container formatted ng-tns-c503815587-82\" role=\"text\" data-test-id=\"code-content\"><span class=\"hljs-variable\">$Groups<\/span> = <span class=\"hljs-selector-tag\">@<\/span>(<span class=\"hljs-string\">\"Schema Admins\"<\/span>, <span class=\"hljs-string\">\"Enterprise Admins\"<\/span>)\n<span class=\"hljs-keyword\">foreach<\/span> (<span class=\"hljs-variable\">$Group<\/span> <span class=\"hljs-keyword\">in<\/span> <span class=\"hljs-variable\">$Groups<\/span>) {\n    <span class=\"hljs-variable\">$Members<\/span> = <span class=\"hljs-built_in\">Get-ADGroupMember<\/span> <span class=\"hljs-literal\">-Identity<\/span> <span class=\"hljs-variable\">$Group<\/span>\n    <span class=\"hljs-keyword\">if<\/span> (<span class=\"hljs-variable\">$Members<\/span>) {\n        <span class=\"hljs-built_in\">Write-Host<\/span> <span class=\"hljs-string\">\"[UYARI] <span class=\"hljs-variable\">$Group<\/span> grubu bo\u015f de\u011fil!\"<\/span> <span class=\"hljs-literal\">-ForegroundColor<\/span> Red\n        <span class=\"hljs-variable\">$Members<\/span> | <span class=\"hljs-built_in\">Select-Object<\/span> Name, SamAccountName\n    } <span class=\"hljs-keyword\">else<\/span> {\n        <span class=\"hljs-built_in\">Write-Host<\/span> <span class=\"hljs-string\">\"[TAMAM] <span class=\"hljs-variable\">$Group<\/span> grubu temiz.\"<\/span> <span class=\"hljs-literal\">-ForegroundColor<\/span> Green\n    }\n}\n<\/code><\/pre>\n<!----><\/div>\n<\/div>\n<\/div>\n<!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!---->\n<h3 data-path-to-node=\"14\">4. Administrator Hesab\u0131 \u0130&ccedil;in Honeypot Mant\u0131\u011f\u0131<\/h3>\n<p data-path-to-node=\"15\">Yerle\u015fik Administrator hesab\u0131n\u0131n <code data-path-to-node=\"15\" data-index-in-node=\"33\">AdminCount<\/code> de\u011ferini ve son giri\u015f denemesini izlemek kritiktir. Ancak daha iyisi, bu hesaba &ouml;zel bir <strong data-path-to-node=\"15\" data-index-in-node=\"133\">Event ID 4625<\/strong> (Hatal\u0131 Giri\u015f) veya <strong data-path-to-node=\"15\" data-index-in-node=\"167\">4624<\/strong> (Ba\u015far\u0131l\u0131 Giri\u015f) alarm\u0131 kurmakt\u0131r.<\/p>\n<hr data-path-to-node=\"16\">\n<h2 data-path-to-node=\"17\">AD Holiday Challenge: Kontrol Listesi (Checklist)<\/h2>\n<p data-path-to-node=\"18\">Bu tabloyu blog yaz\u0131n\u0131n sonuna \"indirilebilir veya kopyalanabilir\" bir b&ouml;l&uuml;m olarak ekleyebilirsin:<\/p>\n<table data-path-to-node=\"19\">\n<thead>\n<tr>\n<td><strong>Madde<\/strong><\/td>\n<td><strong>G&ouml;rev<\/strong><\/td>\n<td><strong>Durum<\/strong><\/td>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><span data-path-to-node=\"19,1,0,0\"><strong data-path-to-node=\"19,1,0,0\" data-index-in-node=\"0\">1<\/strong><\/span><\/td>\n<td><span data-path-to-node=\"19,1,1,0\"><strong data-path-to-node=\"19,1,1,0\" data-index-in-node=\"0\">FGPP Kontrol&uuml;:<\/strong> Default policy d\u0131\u015f\u0131nda aktif bir parola politikas\u0131 var m\u0131?<\/span><\/td>\n<td><span data-path-to-node=\"19,1,2,0\">[ ]<\/span><\/td>\n<\/tr>\n<tr>\n<td><span data-path-to-node=\"19,2,0,0\"><strong data-path-to-node=\"19,2,0,0\" data-index-in-node=\"0\">2<\/strong><\/span><\/td>\n<td><span data-path-to-node=\"19,2,1,0\"><strong data-path-to-node=\"19,2,1,0\" data-index-in-node=\"0\">Audit &Ccedil;ak\u0131\u015fmas\u0131:<\/strong> Klasik ve Geli\u015fmi\u015f denetim politikalar\u0131 &ccedil;ak\u0131\u015f\u0131yor mu?<\/span><\/td>\n<td><span data-path-to-node=\"19,2,2,0\">[ ]<\/span><\/td>\n<\/tr>\n<tr>\n<td><span data-path-to-node=\"19,3,0,0\"><strong data-path-to-node=\"19,3,0,0\" data-index-in-node=\"0\">3<\/strong><\/span><\/td>\n<td><span data-path-to-node=\"19,3,1,0\"><strong data-path-to-node=\"19,3,1,0\" data-index-in-node=\"0\">Ara&ccedil; Sa\u011fl\u0131\u011f\u0131:<\/strong> G&uuml;venlik ara&ccedil;lar\u0131 (SIEM, AD Audit) son 1 saat i&ccedil;inde veri ald\u0131 m\u0131?<\/span><\/td>\n<td><span data-path-to-node=\"19,3,2,0\">[ ]<\/span><\/td>\n<\/tr>\n<tr>\n<td><span data-path-to-node=\"19,4,0,0\"><strong data-path-to-node=\"19,4,0,0\" data-index-in-node=\"0\">4<\/strong><\/span><\/td>\n<td><span data-path-to-node=\"19,4,1,0\"><strong data-path-to-node=\"19,4,1,0\" data-index-in-node=\"0\">Admin G&uuml;venli\u011fi:<\/strong> Built-in Administrator hesab\u0131 aktif kullan\u0131mdan &ccedil;ekildi mi?<\/span><\/td>\n<td><span data-path-to-node=\"19,4,2,0\">[ ]<\/span><\/td>\n<\/tr>\n<tr>\n<td><span data-path-to-node=\"19,5,0,0\"><strong data-path-to-node=\"19,5,0,0\" data-index-in-node=\"0\">5<\/strong><\/span><\/td>\n<td><span data-path-to-node=\"19,5,1,0\"><strong data-path-to-node=\"19,5,1,0\" data-index-in-node=\"0\">Honeypot:<\/strong> Administrator hesab\u0131 i&ccedil;in bir izleme\/alarm mekanizmas\u0131 kuruldu mu?<\/span><\/td>\n<td><span data-path-to-node=\"19,5,2,0\">[ ]<\/span><\/td>\n<\/tr>\n<tr>\n<td><span data-path-to-node=\"19,6,0,0\"><strong data-path-to-node=\"19,6,0,0\" data-index-in-node=\"0\">6<\/strong><\/span><\/td>\n<td><span data-path-to-node=\"19,6,1,0\"><strong data-path-to-node=\"19,6,1,0\" data-index-in-node=\"0\">Grup Temizli\u011fi:<\/strong> Schema Admins grubunda kal\u0131c\u0131 &uuml;ye var m\u0131?<\/span><\/td>\n<td><span data-path-to-node=\"19,6,2,0\">[ ]<\/span><\/td>\n<\/tr>\n<tr>\n<td><span data-path-to-node=\"19,7,0,0\"><strong data-path-to-node=\"19,7,0,0\" data-index-in-node=\"0\">7<\/strong><\/span><\/td>\n<td><span data-path-to-node=\"19,7,1,0\"><strong data-path-to-node=\"19,7,1,0\" data-index-in-node=\"0\">Grup Temizli\u011fi:<\/strong> Enterprise Admins grubunda kal\u0131c\u0131 &uuml;ye var m\u0131?<\/span><\/td>\n<td><span data-path-to-node=\"19,7,2,0\">[ ]<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<br>\n<div id=\"model-response-message-contentr_fe4ae30b76a74b66\" class=\"markdown markdown-main-panel stronger enable-updated-hr-color\" dir=\"ltr\" aria-live=\"polite\" aria-busy=\"false\"><br>&nbsp;<strong>Bonus<\/strong>: G&ouml;r&uuml;nmez Tehdit \"Orphaned GPOs\" ve \"Hidden Admins\"\n<p data-path-to-node=\"4\">Challenge'\u0131 bir ad\u0131m &ouml;teye ta\u015f\u0131mak isteyenler i&ccedil;in iki kritik kontrol daha ekleyelim:<\/p>\n<ul data-path-to-node=\"5\">\n<li>\n<p data-path-to-node=\"5,0,0\"><strong data-path-to-node=\"5,0,0\" data-index-in-node=\"0\">Yetim GPO'lar (Orphaned GPOs):<\/strong> Hi&ccedil;bir OU'ya ba\u011fl\u0131 olmayan ama i&ccedil;inde kritik ayarlar bar\u0131nd\u0131ran GPO'lar ortam\u0131n\u0131zda g&uuml;venlik bo\u015fluklar\u0131 yaratabilir. Bunlar\u0131 temizlemek, hem performans\u0131 art\u0131r\u0131r hem de kafa kar\u0131\u015f\u0131kl\u0131\u011f\u0131n\u0131 giderir.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"5,1,0\"><strong data-path-to-node=\"5,1,0\" data-index-in-node=\"0\">Delegasyon Kontrol&uuml;:<\/strong> Sadece \"Domain Admins\" grubuna bakmak yetmez. <code data-path-to-node=\"5,1,0\" data-index-in-node=\"67\">Active Directory Users and Computers<\/code> &uuml;zerinde sa\u011f t\u0131klay\u0131p \"Delegate Control\" ile ge&ccedil;mi\u015fte kimlere, hangi OU &uuml;zerinde tam yetki verildi\u011fini kontrol ettiniz mi?<\/p>\n<\/li>\n<\/ul>\n<p data-path-to-node=\"6\"><strong data-path-to-node=\"6\" data-index-in-node=\"0\">PowerShell ile Delegasyon Taramas\u0131 (Kritik):<\/strong><\/p>\n<!----><!----><!----><!----><!----><!----><!---->\n<div class=\"code-block ng-tns-c503815587-93 ng-animate-disabled ng-trigger ng-trigger-codeBlockRevealAnimation\" data-hveid=\"0\" data-ved=\"0CAAQhtANahgKEwjU7cyox_ORAxUAAAAAHQAAAAAQ9QE\">\n<div class=\"code-block-decoration header-formatted gds-title-s ng-tns-c503815587-93 ng-star-inserted\"><span class=\"ng-tns-c503815587-93\">PowerShell<\/span>\n<div class=\"buttons ng-tns-c503815587-93 ng-star-inserted\"><button class=\"mdc-icon-button mat-mdc-icon-button mat-mdc-button-base mat-mdc-tooltip-trigger copy-button ng-tns-c503815587-93 mat-unthemed _mat-animation-noopable ng-star-inserted\" aria-label=\"Kodu kopyala\"><\/button><!----><!----><\/div>\n<!----><\/div>\n<!---->\n<div class=\"formatted-code-block-internal-container ng-tns-c503815587-93\">\n<div class=\"animated-opacity ng-tns-c503815587-93\">\n<pre class=\"ng-tns-c503815587-93\"><code class=\"code-container formatted ng-tns-c503815587-93\" role=\"text\" data-test-id=\"code-content\"><span class=\"hljs-comment\"># Belirli bir OU &uuml;zerinde 'Full Control' yetkisi olan kullan\u0131c\u0131lar\u0131 listele<\/span>\n(<span class=\"hljs-built_in\">Get-Acl<\/span> <span class=\"hljs-string\">\"AD:OU=Finance,DC=domain,DC=com\"<\/span>).Access | <span class=\"hljs-built_in\">Where-Object<\/span> { <span class=\"hljs-variable\">$_<\/span>.ActiveDirectoryRights <span class=\"hljs-operator\">-like<\/span> <span class=\"hljs-string\">\"*GenericAll*\"<\/span> }\n<\/code><\/pre>\n<!----><\/div>\n<\/div>\n<\/div>\n<!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><hr data-path-to-node=\"12\">Destek\n<p data-path-to-node=\"14\">E\u011fer yukar\u0131daki ad\u0131mlar\u0131 uygularken;<\/p>\n<ul data-path-to-node=\"15\">\n<li>\n<p data-path-to-node=\"15,0,0\"><em data-path-to-node=\"15,0,0\" data-index-in-node=\"0\">\"Bu komut bende neden &ccedil;al\u0131\u015fmad\u0131?\"<\/em><\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"15,1,0\"><em data-path-to-node=\"15,1,0\" data-index-in-node=\"0\">\"Auditing ayarlar\u0131n\u0131 yaparken DC performans\u0131m d&uuml;\u015fer mi?\"<\/em><\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"15,2,0\"><em data-path-to-node=\"15,2,0\" data-index-in-node=\"0\">\"Honeypot hesab\u0131n\u0131 g&uuml;venli \u015fekilde nas\u0131l raporlar\u0131m?\"<\/em><\/p>\n<\/li>\n<\/ul>\n<p data-path-to-node=\"16\">gibi sorular\u0131n\u0131z olursa veya ortam\u0131n\u0131z\u0131n genel bir <strong data-path-to-node=\"16\" data-index-in-node=\"51\">Security Assessment<\/strong> (G&uuml;venlik De\u011ferlendirmesi) raporuna ihtiyac\u0131 varsa bana ula\u015fmaktan &ccedil;ekinmeyin.<\/p>\n<\/div>\n<p data-path-to-node=\"21\"><!----><\/p>\n<\/div>\n<p><!----><\/p>\n<hr data-path-to-node=\"22\">\n<p data-path-to-node=\"24\">Bu 5 maddeyi tamamlamak sadece birka&ccedil; saatinizi alabilir, ancak sizi aylar s&uuml;recek bir siber sald\u0131r\u0131 felaketinden kurtarabilir. Unutmay\u0131n, en b&uuml;y&uuml;k g&uuml;venlik a&ccedil;\u0131\u011f\u0131 genellikle karma\u015f\u0131k yaz\u0131l\u0131mlarda de\u011fil, yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f basit ayarlardad\u0131r.<\/p>\n<p data-path-to-node=\"25\">&nbsp;<\/p>\n<p data-path-to-node=\"30\">&nbsp;<\/p>\n<\/div>\n<p><!----><\/p>","excerpt":"Domain Controller loglar\u0131n\u0131zda en son ne zaman 'Administrator' kullan\u0131c\u0131s\u0131n\u0131n ba\u015far\u0131l\u0131 giri\u015f yapt\u0131\u011f\u0131n\u0131 kontrol ettiniz? E\u011fer bu sabah siz girdiyseniz, ilk hatay\u0131 yapm\u0131\u015f olabilirsiniz...","created_at":"2026-01-05 08:06:06","updated_at":"2026-09-07 18:24:49","category_id":6,"view_count":441,"reading_time":7,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2026-01-05 05:06:06","featured_image":"\/uploads\/images\/2026\/01\/695b460782e98_1767589383.png","slug":"active-directory-ortaminizi-guvenli-hale-getirmenin-5-yolu","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"}]