[{"id":407,"title":"Windows Server 24H2 G\u00fcvenlik Alarm\u0131 ? KB5066835 Yamas\u0131","content":"<div id=\"model-response-message-contentr_23aa18ca0c31b55d\" class=\"markdown markdown-main-panel enable-luminous-fast-follows enable-updated-hr-color stronger\" dir=\"ltr\" aria-busy=\"false\" aria-live=\"polite\">\n<p data-path-to-node=\"3\">Siber g&uuml;venlik d&uuml;nyas\u0131nda zafiyetlerin \"ya\u015f\u0131\" her zaman riskin bitti\u011fi anlam\u0131na gelmez. Bunun en g&uuml;ncel &ouml;rne\u011fini, Microsoft&rsquo;un modern i\u015fletim sistemleri i&ccedil;in yay\u0131nlad\u0131\u011f\u0131 son toplu g&uuml;ncelle\u015ftirmelerde a&ccedil;\u0131k&ccedil;a g&ouml;r&uuml;yoruz. K&ouml;keni 2016 y\u0131l\u0131na dayanan bir a&ccedil;\u0131k kaynak k&uuml;t&uuml;phanesi zafiyeti, bug&uuml;n en g&uuml;ncel&nbsp;<strong data-path-to-node=\"3\" data-index-in-node=\"299\">Windows Server 24H2<\/strong> sistemlerimizi do\u011frudan etkileyebiliyor.<\/p>\n<p data-path-to-node=\"4\">Bu yaz\u0131m\u0131zda, sistem y&ouml;neticilerinin radar\u0131nda olmas\u0131 gereken <strong data-path-to-node=\"4\" data-index-in-node=\"62\">CVE-2016-9535<\/strong> zafiyetini ve &ccedil;&ouml;z&uuml;m ad\u0131mlar\u0131n\u0131 ele al\u0131yoruz.<\/p>\n<h3 data-path-to-node=\"6\">Tehlike Nedir? (CVE-2016-9535 ve LibTIFF)<\/h3>\n<p data-path-to-node=\"7\">Zafiyetin merkezinde, g&ouml;rsel i\u015fleme s&uuml;re&ccedil;lerinde yayg\u0131n olarak kullan\u0131lan a&ccedil;\u0131k kaynakl\u0131 bir k&uuml;t&uuml;phane olan <strong data-path-to-node=\"7\" data-index-in-node=\"107\">LibTIFF<\/strong> yer al\u0131yor. Bu k&uuml;t&uuml;phanenin eski s&uuml;r&uuml;mlerinde (<code data-path-to-node=\"7\" data-index-in-node=\"162\">tif_predict.c<\/code> kaynakl\u0131), k&ouml;t&uuml; ama&ccedil;l\u0131 yap\u0131land\u0131r\u0131lm\u0131\u015f bir TIFF g&ouml;rseli i\u015flenirken bellek boyutu yanl\u0131\u015f hesaplan\u0131yor.<\/p>\n<p data-path-to-node=\"8\">Sonu&ccedil;? <strong data-path-to-node=\"8\" data-index-in-node=\"7\">Kritik (CVSS: 9.8) seviyede bir Y\u0131\u011f\u0131n Tabanl\u0131 Arabellek Ta\u015fmas\u0131 (Heap-based Buffer Overflow).<\/strong><\/p>\n<p data-path-to-node=\"9\">Sald\u0131rganlar, bu a&ccedil;\u0131\u011f\u0131 manip&uuml;le ederek sistem &uuml;zerinde <strong data-path-to-node=\"9\" data-index-in-node=\"55\">Uzaktan Kod &Ccedil;al\u0131\u015ft\u0131rma (RCE)<\/strong> ger&ccedil;ekle\u015ftirebilir veya sistem servislerini tamamen &ccedil;&ouml;kerterek hizmet d\u0131\u015f\u0131 (DoS) b\u0131rakabilir.<\/p>\n<h3 data-path-to-node=\"10\">En G&uuml;ncel Sistemler Neden Etkileniyor?<\/h3>\n<p data-path-to-node=\"11\">Peki, 2016'n\u0131n a&ccedil;\u0131\u011f\u0131 neden 24H2 mimarisinde kar\u015f\u0131m\u0131za &ccedil;\u0131k\u0131yor?<\/p>\n<p data-path-to-node=\"12\">Bunun nedeni <strong data-path-to-node=\"12\" data-index-in-node=\"13\">yaz\u0131l\u0131m tedarik zinciri (Supply Chain)<\/strong> ba\u011f\u0131ml\u0131l\u0131klar\u0131d\u0131r. \u0130\u015fletim sistemlerinin alt katmanlar\u0131nda yer alan faks, yazd\u0131rma alt yap\u0131lar\u0131 veya dahili imaj g&ouml;r&uuml;nt&uuml;leme bile\u015fenleri, arka planda h&acirc;l&acirc; bu k&ouml;kl&uuml; k&uuml;t&uuml;phanelerin kod par&ccedil;ac\u0131klar\u0131n\u0131 bar\u0131nd\u0131rabiliyor. Microsoft, modern i\u015fletim sistemlerini tamamen g&uuml;venli hale getirmek ad\u0131na bu eski kal\u0131nt\u0131lar\u0131 da geriye d&ouml;n&uuml;k olarak temizlemektedir.<\/p>\n<h3 data-path-to-node=\"14\">&Ccedil;&ouml;z&uuml;m: KB5066835 G&uuml;ncelle\u015ftirmesi<\/h3>\n<p data-path-to-node=\"15\">Microsoft, x64 tabanl\u0131 Windows Server 24H2 ve Windows 11 sistemler i&ccedil;in bu a&ccedil;\u0131\u011f\u0131 kapatan <strong data-path-to-node=\"15\" data-index-in-node=\"89\">KB5066835<\/strong> toplu g&uuml;ncelle\u015ftirme paketini devreye ald\u0131.<\/p>\n<p data-path-to-node=\"16\">Bu yama, alt bile\u015fenlerdeki bellek tahsis aritmeti\u011fini ve s\u0131n\u0131r kontrollerini d&uuml;zelterek g&uuml;venlik a&ccedil;\u0131\u011f\u0131n\u0131 tamamen ortadan kald\u0131r\u0131yor. G&uuml;ncelleme ba\u015far\u0131yla uyguland\u0131\u011f\u0131nda, i\u015fletim sistemi derleme numaran\u0131z <strong data-path-to-node=\"16\" data-index-in-node=\"205\">26100.6899<\/strong> (veya &uuml;zeri) seviyesine y&uuml;kselmektedir.<\/p>\n<h3 data-path-to-node=\"18\">Sistem Y&ouml;neticileri \u0130&ccedil;in 3 Ad\u0131ml\u0131 Aksiyon Plan\u0131<\/h3>\n<p data-path-to-node=\"19\">E\u011fer altyap\u0131n\u0131zda Windows Server 24H2 veya Windows 11 24H2 &ccedil;al\u0131\u015ft\u0131ran sunucu ve istemciler varsa, a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 h\u0131zla uygulaman\u0131z\u0131 &ouml;neririz:<\/p>\n<ol start=\"1\" data-path-to-node=\"20\">\n<li>\n<p data-path-to-node=\"20,0,0\"><strong data-path-to-node=\"20,0,0\" data-index-in-node=\"0\">Envanter Kontrol&uuml;:<\/strong> WSUS, SCCM veya Microsoft Defender for Endpoint &uuml;zerinden sistemlerinizin derleme (build) numaralar\u0131n\u0131 filtreleyin.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"20,1,0\"><strong data-path-to-node=\"20,1,0\" data-index-in-node=\"0\">Yama Da\u011f\u0131t\u0131m\u0131:<\/strong> Test ortamlar\u0131nda do\u011frulamas\u0131 yap\u0131lan <strong data-path-to-node=\"20,1,0\" data-index-in-node=\"53\">KB5066835<\/strong> g&uuml;ncellemesini &uuml;retim (production) ortam\u0131ndaki sunucular\u0131n\u0131za planl\u0131 bir kesinti pencerelerinde da\u011f\u0131t\u0131n.<\/p>\n<\/li>\n<li>\n<p data-path-to-node=\"20,2,0\"><strong data-path-to-node=\"20,2,0\" data-index-in-node=\"0\">Do\u011frulama:<\/strong> G&uuml;ncelleme sonras\u0131nda sunucularda PowerShell &uuml;zerinden a\u015fa\u011f\u0131daki komutu &ccedil;al\u0131\u015ft\u0131rarak g&uuml;venli derleme s&uuml;r&uuml;m&uuml;ne ula\u015ft\u0131\u011f\u0131n\u0131z\u0131 teyit edin:<\/p>\n<!----><!----><!----><!----><!----><!----><!----><!---->\n<div class=\"code-block ng-tns-c2643669177-22 ng-animate-disabled ng-trigger ng-trigger-codeBlockRevealAnimation\" data-hveid=\"0\" data-ved=\"0CAAQhtANahgKEwj1lp7dwMKVAxUAAAAAHQAAAAAQrwE\"><!---->\n<div class=\"formatted-code-block-internal-container ng-tns-c2643669177-22\">\n<div class=\"animated-opacity ng-tns-c2643669177-22\">\n<div class=\"code-block-decoration header-formatted gds-emphasized-body-m ng-tns-c2643669177-22 ng-star-inserted\"><span class=\"ng-tns-c2643669177-22\">PowerShell<\/span><!----><!----><button class=\"mdc-icon-button mat-mdc-icon-button mat-mdc-button-base mat-badge mat-unthemed _mat-animation-noopable mat-badge-overlap mat-badge-above mat-badge-after mat-badge-small mat-badge-hidden ng-star-inserted\" aria-label=\"Kodu indir\"><!----><!----><!----><!----><\/button><!----><!----><!----><!----><!----><!----><!----><!----><!----><button class=\"mdc-icon-button mat-mdc-icon-button mat-mdc-button-base mat-badge mat-unthemed _mat-animation-noopable mat-badge-overlap mat-badge-above mat-badge-after mat-badge-small mat-badge-hidden ng-star-inserted\" aria-label=\"Kodu kopyala\"><!----><!----><!----><!----><\/button><!----><!----><!----><!----><!----><!----><!----><!----><\/div>\n<div class=\"code-block-decoration header-formatted gds-emphasized-body-m ng-tns-c2643669177-22 ng-star-inserted\"><code class=\"code-container formatted ng-tns-c2643669177-22\" role=\"text\" data-test-id=\"code-content\">(<span class=\"hljs-built_in\">Get-ItemProperty<\/span> <span class=\"hljs-string\">\"HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\"<\/span>).UBR\n<\/code><\/div>\n<!----><!----><\/div>\n<\/div>\n<\/div>\n<!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><!----><\/li>\n<\/ol>\n<p data-path-to-node=\"21\">Unutmay\u0131n; siber sald\u0131rganlar sistem s\u0131zmalar\u0131 i&ccedil;in her zaman en karma\u015f\u0131k s\u0131f\u0131r\u0131nc\u0131 g&uuml;n (Zero-Day) a&ccedil;\u0131klar\u0131n\u0131 aramazlar, &ccedil;o\u011fu zaman g&ouml;zden ka&ccedil;an eski ve yamalanmam\u0131\u015f k&uuml;t&uuml;phaneleri kullan\u0131rlar. Sistemlerinizi g&uuml;ncel tutun, altyap\u0131n\u0131z\u0131 g&uuml;vende b\u0131rak\u0131n!!!<\/p>\n<\/div>","excerpt":"Siber g\u00fcvenlik d\u00fcnyas\u0131nda zafiyetlerin \"ya\u015f\u0131\" her zaman riskin bitti\u011fi anlam\u0131na gelmez. Bunun en g\u00fcncel \u00f6rne\u011fini, Microsoft\u2019un modern i\u015fletim sistemleri i\u00e7in yay\u0131nlad\u0131\u011f\u0131 son toplu g\u00fcncelle\u015ftirmelerde a\u00e7\u0131k\u00e7a g\u00f6r\u00fcyoruz. K\u00f6keni 2016 y\u0131l\u0131na dayanan bir a\u00e7\u0131k kaynak k\u00fct\u00fcphanesi zafiyeti, bug\u00fcn en g\u00fcncel\u00a0Windows Server 24H2 sistemlerimizi do\u011frudan etkileyebiliyor.","created_at":"2026-07-08 10:11:25","updated_at":"2026-09-23 15:45:14","category_id":12,"view_count":254,"reading_time":4,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2026-07-08 07:11:25","featured_image":"\/uploads\/images\/2026\/07\/6a4df819b9d6e_1783494681.jpg","slug":"windows-server-24h2-guvenlik-alarmi-kb5066835-yamasi","category_name":"Misconfiguration","category_slug":"misconfiguration","category_color":"#84cc16"},{"id":367,"title":"Network Shares Denetimini Hafife Almay\u0131n","content":"<p>Kurumsal a\u011flarda g&uuml;venlik a&ccedil;\u0131klar\u0131 denildi\u011finde akla genellikle&nbsp;<strong>zararl\u0131 yaz\u0131l\u0131mlar, zay\u0131f parolalar veya g&uuml;ncel olmayan sistemler<\/strong> gelir.<br>Ancak pratikte en s\u0131k kar\u015f\u0131la\u015f\u0131lan &mdash; ve en &ccedil;ok g&ouml;zden ka&ccedil;an &mdash; risklerden biri <strong>a&ccedil;\u0131k unutulmu\u015f network payla\u015f\u0131mlar\u0131d\u0131r<\/strong>.<\/p>\n<p><iframe style=\"width: 674px; height: 379px;\" src=\"https:\/\/www.youtube.com\/embed\/uFDepQ-aC4M\" width=\"674\" height=\"379\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\n<p>Bir dosya transferi i&ccedil;in ge&ccedil;ici olarak a&ccedil;\u0131lan bir klas&ouml;r,<br>bir departmana &ldquo;\u015fimdilik&rdquo; verilen eri\u015fim,<br>ya da test ama&ccedil;l\u0131 payla\u015f\u0131ma a&ccedil;\u0131lan bir dizin&hellip;<\/p>\n<p>Bunlar\u0131n her biri, fark edilmeden <strong>aylarca hatta y\u0131llarca sessiz bir a&ccedil;\u0131k kap\u0131<\/strong> h&acirc;line gelebilir.<\/p>\n<p>Bir IT y&ouml;neticisi i&ccedil;in sorulmas\u0131 gereken kritik soru \u015fudur:<\/p>\n<blockquote>\n<p><strong>&ldquo;A\u011f\u0131mda \u015fu anda kim, neyi, neden payla\u015f\u0131yor?&rdquo;<\/strong><\/p>\n<\/blockquote>\n<p>Bu soruya net ve h\u0131zl\u0131 bir cevap veremiyorsan\u0131z,<br>orada <strong>y&ouml;netilmeyen bir risk<\/strong> vard\u0131r.<\/p>\n<p>Kurumsal siber g&uuml;venlik stratejilerinde a\u011f payla\u015f\u0131mlar\u0131 (network shares), genellikle zararl\u0131 yaz\u0131l\u0131mlar veya zay\u0131f parolalar kadar dikkat &ccedil;ekmese de asl\u0131nda <strong>en s\u0131k kar\u015f\u0131la\u015f\u0131lan ve en &ccedil;ok g&ouml;zden ka&ccedil;an<\/strong> risk alanlar\u0131ndan biridir. Bir dosya transferi i&ccedil;in ge&ccedil;ici a&ccedil;\u0131lan klas&ouml;rler veya test ama&ccedil;l\u0131 payla\u015f\u0131lan dizinler, aylar hatta y\u0131llar boyunca <strong>\"sessiz bir a&ccedil;\u0131k kap\u0131\"<\/strong> olarak kalabilmektedir.<\/p>\n<p>A\u011f payla\u015f\u0131mlar\u0131n\u0131n kurumsal g&uuml;venlikteki kritik &ouml;nemi ve bar\u0131nd\u0131rd\u0131\u011f\u0131 temel riskler \u015fu \u015fekilde detayland\u0131r\u0131labilir:<\/p>\n<h3>Kritik &Ouml;nemi ve Y&ouml;netim Gereklili\u011fi<\/h3>\n<p>A\u011f payla\u015f\u0131mlar\u0131 do\u011frudan <strong>veriye eri\u015fim<\/strong> anlam\u0131na geldi\u011fi i&ccedil;in kurumsal stratejinin merkezinde yer almal\u0131d\u0131r. Ger&ccedil;ek g&uuml;venlik, sadece tehditleri engellemek de\u011fil, <strong>kurumun neye sahip oldu\u011funu ve bu verilere kimlerin eri\u015fti\u011fini bilmesidir<\/strong>. E\u011fer bir IT y&ouml;neticisi a\u011fda \"\u015fu anda kimin, neyi, neden payla\u015ft\u0131\u011f\u0131n\u0131\" net bir \u015fekilde a&ccedil;\u0131klayam\u0131yorsa, orada <strong>y&ouml;netilmeyen bir risk<\/strong> mevcuttur.<\/p>\n<h3>Temel Riskler<\/h3>\n<p>Yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f veya a&ccedil;\u0131k unutulmu\u015f a\u011f payla\u015f\u0131mlar\u0131 \u015fu ciddi sorunlara yol a&ccedil;abilir:<\/p>\n<ul>\n<li><strong>Yatay Yay\u0131lma (Lateral Movement):<\/strong> Fidye yaz\u0131l\u0131mlar\u0131n\u0131n (ransomware) a\u011f i&ccedil;erisinde makineler aras\u0131nda kolayca yay\u0131lmas\u0131na zemin haz\u0131rlar.<\/li>\n<li><strong>Yetkisiz Eri\u015fim ve Veri S\u0131z\u0131nt\u0131s\u0131:<\/strong> Hassas dosyalara yetkisiz kullan\u0131c\u0131lar\u0131n ula\u015fmas\u0131na veya i&ccedil; tehditlerin fark edilmeden veri s\u0131zd\u0131rmas\u0131na neden olur.<\/li>\n<li><strong>Loglarda Sessiz Kalma:<\/strong> Bu risklerin &ccedil;o\u011fu sistem loglar\u0131nda alarm &uuml;retmez veya \"ba\u011f\u0131rmaz\"; sadece orada sessizce beklerler.<\/li>\n<li><strong>Uyum Sorunlar\u0131:<\/strong> KVKK ve ISO 27001 gibi yasal denetim ve uyumluluk s&uuml;re&ccedil;lerinde ciddi eksiklikler yarat\u0131r.<\/li>\n<\/ul>\n<h3>En Tehlikeli Payla\u015f\u0131m T&uuml;rleri<\/h3>\n<p>Kaynaklara g&ouml;re en tehlikeli payla\u015f\u0131mlar, <strong>\"kimsenin hat\u0131rlamad\u0131\u011f\u0131 ama herkesin eri\u015febildi\u011fi\"<\/strong> payla\u015f\u0131mlard\u0131r. &Ouml;zellikle \u015funlar y&uuml;ksek risk ta\u015f\u0131r:<\/p>\n<ul>\n<li><strong>\"Everyone\"<\/strong> veya &ccedil;ok geni\u015f gruplara a&ccedil;\u0131k olan dizinler.<\/li>\n<li>Eski projelere ait, i\u015fi bitmi\u015f ancak kapat\u0131lmam\u0131\u015f klas&ouml;rler.<\/li>\n<li>Backup (yedekleme) veya log klas&ouml;rlerinin yanl\u0131\u015fl\u0131kla payla\u015f\u0131ma a&ccedil;\u0131lmas\u0131.<\/li>\n<li>Kullan\u0131c\u0131lar\u0131n kendi profil dizinleri alt\u0131nda manuel olarak a&ccedil;t\u0131\u011f\u0131 payla\u015f\u0131mlar,.<\/li>\n<\/ul>\n<h3>Stratejik Yakla\u015f\u0131m ve Denetim<\/h3>\n<p>A\u011f payla\u015f\u0131mlar\u0131n\u0131n denetimi, \"bir kez yap\u0131ld\u0131 ve bitti\" denilecek bir i\u015f de\u011fildir; bu s&uuml;recin <strong>periyodik, raporlanabilir ve standartla\u015ft\u0131r\u0131lm\u0131\u015f<\/strong> olmas\u0131 gerekir. Tek bir makine &uuml;zerinde <code>net share<\/code> komutuyla yerel g&ouml;r&uuml;n&uuml;rl&uuml;k sa\u011flanabilse de, kurumsal a\u011flarda as\u0131l de\u011fer <strong>Active Directory (domain) seviyesinde g&ouml;r&uuml;n&uuml;rl&uuml;k<\/strong> elde etmektir,. PowerShell gibi ara&ccedil;lar kullan\u0131larak domain genelindeki t&uuml;m a&ccedil;\u0131k SMB payla\u015f\u0131mlar\u0131n\u0131n d&uuml;zenli olarak taranmas\u0131, \"bilmiyordum\" l&uuml;ks&uuml;n&uuml; ortadan kald\u0131rarak g&uuml;venli\u011fi art\u0131r\u0131r,.<\/p>\n<p>A\u011f payla\u015f\u0131mlar\u0131n\u0131n y&ouml;netimi, binan\u0131n giri\u015fine en geli\u015fmi\u015f &ccedil;elik kap\u0131y\u0131 (firewall\/antivir&uuml;s) tak\u0131p, arka taraftaki pencerelerden birini (a&ccedil;\u0131k unutulmu\u015f klas&ouml;r) sonuna kadar a&ccedil;\u0131k b\u0131rakmaya benzer; kap\u0131 ne kadar sa\u011flam olursa olsun, pencereyi bilen biri i&ccedil;eri s\u0131zabilir.<\/p>\n<p>Yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f veya a&ccedil;\u0131k unutulmu\u015f a\u011f payla\u015f\u0131mlar\u0131, kurumsal a\u011flarda genellikle zararl\u0131 yaz\u0131l\u0131mlar veya zay\u0131f parolalar kadar dikkat &ccedil;ekmese de en s\u0131k kar\u015f\u0131la\u015f\u0131lan ve en &ccedil;ok g&ouml;zden ka&ccedil;an g&uuml;venlik risklerinden biridir. Bu payla\u015f\u0131mlar, fark edilmeden aylar hatta y\u0131llar boyunca <strong>\"sessiz bir a&ccedil;\u0131k kap\u0131\"<\/strong> olarak kalabilmektedir.<\/p>\n<p>Kaynaklara g&ouml;re, yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f a\u011f payla\u015f\u0131mlar\u0131n\u0131n neden olabilece\u011fi temel siber riskler \u015funlard\u0131r:<\/p>\n<ul>\n<li><strong>Yetkisiz Veri Eri\u015fimi:<\/strong> Hassas dosyalar\u0131n yetkisi olmayan kullan\u0131c\u0131lar taraf\u0131ndan g&ouml;r&uuml;nt&uuml;lenmesine veya de\u011fi\u015ftirilmesine yol a&ccedil;ar.<\/li>\n<li><strong>Yatay Yay\u0131lma (Lateral Movement):<\/strong> &Ouml;zellikle <strong>fidye yaz\u0131l\u0131mlar\u0131n\u0131n (ransomware)<\/strong> a\u011f i&ccedil;erisinde makineler aras\u0131nda kolayca yay\u0131lmas\u0131na zemin haz\u0131rlar.<\/li>\n<li><strong>\u0130&ccedil; Tehditler:<\/strong> K&ouml;t&uuml; niyetli veya dikkatsiz &ccedil;al\u0131\u015fanlar\u0131n (i&ccedil; tehditlerin), fark edilmeden veri s\u0131zd\u0131rmas\u0131na olanak tan\u0131r.<\/li>\n<li><strong>Denetim ve Uyumluluk Sorunlar\u0131:<\/strong> <strong>KVKK ve ISO 27001<\/strong> gibi yasal d&uuml;zenlemeler ve standartlara uyum konusunda ciddi a&ccedil;\u0131klar yaratarak yasal riskler olu\u015fturur.<\/li>\n<li><strong>G&ouml;r&uuml;nmezlik ve Log Sessizli\u011fi:<\/strong> Bu t&uuml;r risklerin en tehlikeli y&ouml;nlerinden biri, <strong>loglarda \"ba\u011f\u0131rmamas\u0131\"<\/strong> veya sistemlerde otomatik bir alarm &uuml;retmemesidir; risk orada sessizce bekler.<\/li>\n<li><strong>Y&ouml;netilemeyen Risk:<\/strong> E\u011fer bir IT y&ouml;neticisi a\u011fda \"kimin, neyi, neden payla\u015ft\u0131\u011f\u0131n\u0131\" net olarak g&ouml;remiyorsa, bu durum do\u011frudan y&ouml;netilemeyen bir riskin varl\u0131\u011f\u0131na i\u015farettir.<\/li>\n<\/ul>\n<p>&Ouml;zellikle <strong>\"Everyone\"<\/strong> veya &ccedil;ok geni\u015f gruplara a&ccedil;\u0131k dizinler, eski projelere ait unutulmu\u015f klas&ouml;rler, kullan\u0131c\u0131lar\u0131n manuel olarak a&ccedil;t\u0131\u011f\u0131 payla\u015f\u0131mlar ve yanl\u0131\u015fl\u0131kla payla\u015f\u0131lan <strong>yedekleme (backup) veya log klas&ouml;rleri<\/strong> en y&uuml;ksek risk grubunda yer almaktad\u0131r.<\/p>\n<p>Bu durumu bir binan\u0131n g&uuml;venli\u011fine benzetebiliriz: Binan\u0131n giri\u015fine en geli\u015fmi\u015f &ccedil;elik kap\u0131y\u0131 ve g&uuml;venlik kameralar\u0131n\u0131 (firewall ve antivir&uuml;s) yerle\u015ftirseniz bile, arka tarafta kimsenin hat\u0131rlamad\u0131\u011f\u0131 a&ccedil;\u0131k bir pencere (hatal\u0131 a\u011f payla\u015f\u0131m\u0131) b\u0131rakt\u0131\u011f\u0131n\u0131zda, t&uuml;m g&uuml;venlik &ouml;nlemleri i\u015flevsiz kalabilir.<\/p>\n<hr>\n<h2>Neden Network Payla\u015f\u0131mlar\u0131 Tehlikelidir?<\/h2>\n<p>Network payla\u015f\u0131mlar\u0131 do\u011frudan <strong>veriye eri\u015fim<\/strong> anlam\u0131na gelir.<br>Yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f bir payla\u015f\u0131m;<\/p>\n<ul>\n<li>\n<p>Yetkisiz kullan\u0131c\u0131lar\u0131n hassas dosyalara ula\u015fmas\u0131na<\/p>\n<\/li>\n<li>\n<p>Fidye yaz\u0131l\u0131mlar\u0131n\u0131n yatay olarak yay\u0131lmas\u0131na<\/p>\n<\/li>\n<li>\n<p>\u0130&ccedil; tehditlerin fark edilmeden veri s\u0131zd\u0131rmas\u0131na<\/p>\n<\/li>\n<li>\n<p>Denetim ve uyumluluk (KVKK, ISO 27001 vb.) sorunlar\u0131na<\/p>\n<\/li>\n<\/ul>\n<p>neden olabilir.<\/p>\n<p>&Uuml;stelik bu risklerin &ccedil;o\u011fu <strong>loglarda ba\u011f\u0131rmaz<\/strong>, alarm &uuml;retmez.<br>Sadece oradad\u0131r&hellip; sessizce.<\/p>\n<hr>\n<h2>Yakla\u015f\u0131m 1: Lokal G&ouml;r&uuml;n&uuml;rl&uuml;k (Tek Makine Kontrol&uuml;)<\/h2>\n<p>Basit ama etkili bir ilk ad\u0131m olarak, \u015f&uuml;pheli herhangi bir Windows makinesinde a\u015fa\u011f\u0131daki komut yeterlidir.<\/p>\n<p><strong>CMD (Run as Administrator):<\/strong><\/p>\n<pre><code class=\"language-cmd\">net share\n<\/code><\/pre>\n<p>Bu komut tek ekranda \u015funlar\u0131 g&ouml;sterir:<\/p>\n<ul>\n<li>\n<p>A&ccedil;\u0131k kullan\u0131c\u0131 payla\u015f\u0131mlar\u0131<\/p>\n<\/li>\n<li>\n<p>Gizli y&ouml;netici payla\u015f\u0131mlar\u0131 (C$, ADMIN$)<\/p>\n<\/li>\n<li>\n<p>Beklenmeyen veya unutulmu\u015f klas&ouml;rler<\/p>\n<\/li>\n<\/ul>\n<p>&Ouml;zellikle <strong>kullan\u0131c\u0131 taraf\u0131ndan manuel a&ccedil;\u0131lm\u0131\u015f<\/strong> payla\u015f\u0131mlar burada h\u0131zl\u0131ca fark edilir.<\/p>\n<p>Bu kontrol, bireysel makineler i&ccedil;in iyi bir ba\u015flang\u0131&ccedil;t\u0131r;<br>ancak kurumsal a\u011flar i&ccedil;in <strong>yeterli de\u011fildir<\/strong>.<\/p>\n<hr>\n<h2>Yakla\u015f\u0131m 2: Domain Genelinde G&ouml;r&uuml;n&uuml;rl&uuml;k (Ger&ccedil;ek Denetim)<\/h2>\n<p>Active Directory ortamlar\u0131nda as\u0131l de\u011fer,<br>lokal de\u011fil <strong>domain seviyesinde g&ouml;r&uuml;n&uuml;rl&uuml;k<\/strong> sa\u011flamakt\u0131r.<\/p>\n<p>Domain Admin yetkileriyle &ccedil;al\u0131\u015ft\u0131r\u0131labilecek &ouml;rnek bir PowerShell yakla\u015f\u0131m\u0131:<\/p>\n<pre><code class=\"language-powershell\">Get-ADComputer -Filter * | ForEach-Object {\n    try {\n        $shares = Get-SmbShare -CimSession $_.Name -ErrorAction SilentlyContinue\n        if ($shares) {\n            [PSCustomObject]@{\n                ComputerName = $_.Name\n                ShareName    = $shares.Name -join ', '\n                Path         = $shares.Path -join ' | '\n            }\n        }\n    } catch {}\n} | Format-Table -AutoSize\n<\/code><\/pre>\n<p>Bu script sayesinde:<\/p>\n<ul>\n<li>\n<p>Domain&rsquo;e ba\u011fl\u0131 t&uuml;m makineler taran\u0131r<\/p>\n<\/li>\n<li>\n<p>A&ccedil;\u0131k SMB payla\u015f\u0131mlar\u0131 listelenir<\/p>\n<\/li>\n<li>\n<p>Hangi makinede, hangi klas&ouml;r&uuml;n payla\u015f\u0131ld\u0131\u011f\u0131 netle\u015fir<\/p>\n<\/li>\n<\/ul>\n<p>Bu noktadan sonra art\u0131k <strong>&ldquo;bilmiyordum&rdquo;<\/strong> deme l&uuml;ks&uuml; yoktur.<\/p>\n<hr>\n<h2>Teknik Not<\/h2>\n<p>Bu komutun &ccedil;al\u0131\u015fabilmesi i&ccedil;in:<\/p>\n<ul>\n<li>\n<p><strong>Active Directory PowerShell mod&uuml;l&uuml; (RSAT)<\/strong> y&uuml;kl&uuml; olmal\u0131d\u0131r<\/p>\n<\/li>\n<li>\n<p>Aksi h&acirc;lde <code>Get-ADComputer<\/code> hatas\u0131 al\u0131n\u0131r<\/p>\n<\/li>\n<\/ul>\n<p>Kurumsal ortamlarda bu mod&uuml;l genellikle Domain Controller veya y&ouml;netim makinelerinde haz\u0131r bulunur.<\/p>\n<hr>\n<h2>En Tehlikeli Payla\u015f\u0131mlar Hangileridir?<\/h2>\n<blockquote>\n<p><strong>&ldquo;En tehlikeli payla\u015f\u0131mlar,<br>kimsenin hat\u0131rlamad\u0131\u011f\u0131 ama herkesin eri\u015febildi\u011fi payla\u015f\u0131mlard\u0131r.&rdquo;<\/strong><\/p>\n<\/blockquote>\n<p>&Ouml;zellikle dikkat edilmesi gerekenler:<\/p>\n<ul>\n<li>\n<p><code>Everyone<\/code> veya geni\u015f gruplara a&ccedil;\u0131k dizinler<\/p>\n<\/li>\n<li>\n<p>Eski projelere ait unutulmu\u015f klas&ouml;rler<\/p>\n<\/li>\n<li>\n<p>Kullan\u0131c\u0131 profil dizinleri alt\u0131ndaki payla\u015f\u0131mlar<\/p>\n<\/li>\n<li>\n<p>Backup veya log klas&ouml;rlerinin yanl\u0131\u015fl\u0131kla payla\u015f\u0131lmas\u0131<\/p>\n<\/li>\n<\/ul>\n<hr>\n<h2>Denetim Tek Seferlik Olmamal\u0131<\/h2>\n<p>Network share kontrolleri;<\/p>\n<ul>\n<li>\n<p>Tek seferlik yap\u0131lan bir i\u015f de\u011fil<\/p>\n<\/li>\n<li>\n<p>&ldquo;Bug&uuml;n bakt\u0131k, tamam&rdquo; denilecek bir konu de\u011fil<\/p>\n<\/li>\n<\/ul>\n<p>Bu s&uuml;re&ccedil;:<\/p>\n<ul>\n<li>\n<p><strong>Periyodik<\/strong><\/p>\n<\/li>\n<li>\n<p><strong>Raporlanabilir<\/strong><\/p>\n<\/li>\n<li>\n<p><strong>Standartla\u015ft\u0131r\u0131lm\u0131\u015f<\/strong><\/p>\n<\/li>\n<\/ul>\n<p>olmal\u0131d\u0131r.<\/p>\n<p>Aksi h&acirc;lde en iyi firewall, en g&uuml;ncel antivir&uuml;s bile<br>i&ccedil;erideki bu <strong>sessiz a&ccedil;\u0131k kap\u0131y\u0131<\/strong> kapatamaz.<\/p>\n<hr>\n<p>Network payla\u015f\u0131mlar\u0131 k&uuml;&ccedil;&uuml;k gibi g&ouml;r&uuml;nen ama etkisi b&uuml;y&uuml;k risklerdir.<br>Ger&ccedil;ek g&uuml;venlik, sadece tehditleri engellemek de\u011fil,<br><strong>neye sahip oldu\u011funuzu ve kimin eri\u015fti\u011fini bilmektir.<\/strong><\/p>\n<p>Bug&uuml;n kendinize \u015fu soruyu sorun:<\/p>\n<blockquote>\n<p><strong>&ldquo;\u015eu anda a\u011f\u0131mda ka&ccedil; payla\u015f\u0131m var ve ben bunlar\u0131n ka&ccedil;\u0131n\u0131 ger&ccedil;ekten biliyorum?&rdquo;<\/strong><\/p>\n<\/blockquote>\n<p>Cevap net de\u011filse,<br>ilk risk zaten ortaya &ccedil;\u0131km\u0131\u015f demektir.<\/p>","excerpt":"Kurumsal a\u011flarda g\u00fcvenlik a\u00e7\u0131klar\u0131 denildi\u011finde akla genellikle\u00a0zararl\u0131 yaz\u0131l\u0131mlar, zay\u0131f parolalar veya g\u00fcncel olmayan sistemler gelir.\nAncak pratikte en s\u0131k kar\u015f\u0131la\u015f\u0131lan \u2014 ve en \u00e7ok g\u00f6zden ka\u00e7an \u2014 risklerden biri a\u00e7\u0131k unutulmu\u015f network payla\u015f\u0131mlar\u0131d\u0131r.","created_at":"2025-12-21 08:55:44","updated_at":"2026-09-23 13:09:30","category_id":7,"view_count":575,"reading_time":9,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-12-21 05:55:44","featured_image":"\/uploads\/images\/2025\/12\/69478bd4b8286_1766296532.png","slug":"network-shares-denetimini-hafife-almayin","category_name":"Cyber Security","category_slug":"cyber-security","category_color":"#10b981"},{"id":132,"title":"UAC G\u00fcvenlik A\u00e7\u0131\u011f\u0131n\u0131 Kapatma: msconfig.exe ve Ayr\u0131cal\u0131k Y\u00fckseltme Riski","content":"<h2>H\u0131zl\u0131 Test: Windows'unuz G\u00fcvenli mi?<\/h2> Windows g\u00fcvenli\u011finizi test etmenin basit bir yolu var: <strong>Windows + R<\/strong> tu\u015flar\u0131na bas\u0131n, <strong>msconfig.exe<\/strong> yaz\u0131n ve ENTER tu\u015funa bas\u0131n. <strong>Sistem Yap\u0131land\u0131rma<\/strong> arac\u0131 do\u011frudan bir g\u00fcvenlik istemi olmadan a\u00e7\u0131ld\u0131 m\u0131? E\u011fer \u00f6yleyse, UAC (Kullan\u0131c\u0131 Hesab\u0131 Denetimi) yap\u0131land\u0131rman\u0131z tehlikeli bir \u015fekilde zay\u0131f demektir. &nbsp; <h2>Neden Bu \u00d6nemli?<\/h2> Bu basit test, Windows sistemlerinizde yayg\u0131n bir g\u00fcvenlik yanl\u0131\u015f yap\u0131land\u0131rmas\u0131n\u0131 ortaya \u00e7\u0131kar\u0131r. Bir\u00e7ok organizasyon hala Windows'un varsay\u0131lan UAC ayarlar\u0131n\u0131 kullan\u0131yor, bu da sald\u0131rganlar\u0131n UAC atlama teknikleri ile yararlanmaya bay\u0131ld\u0131\u011f\u0131 bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131 olu\u015fturuyor. Bu a\u00e7\u0131k, yerel bir sald\u0131rgan\u0131n ayr\u0131cal\u0131klar\u0131n\u0131 y\u00fckseltmesine ve sisteminizde daha fazla kontrol ele ge\u00e7irmesine olanak tan\u0131r - genellikle k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m enfeksiyonlar\u0131nda kritik bir ad\u0131md\u0131r. <h2>Sorun: Varsay\u0131lan UAC Ayarlar\u0131<\/h2> Windows'un varsay\u0131lan UAC davran\u0131\u015f\u0131, \"Windows olmayan ikili dosyalar i\u00e7in onay iste\" olarak ayarlanm\u0131\u015ft\u0131r. Bu ayar \u015fu soruna yol a\u00e7ar: <ul> <li>Windows yerle\u015fik ara\u00e7lar\u0131 (msconfig.exe gibi) bir g\u00fcvenlik istemi g\u00f6stermeden \u00e7al\u0131\u015fabilir.<\/li> <li>Sald\u0131rganlar, sistemdeki bu g\u00fcvenilen Windows arac\u0131n\u0131 kullanarak ayr\u0131cal\u0131klar\u0131n\u0131 gizlice y\u00fckseltebilirler.<\/li> <\/ul> <h2>\u00c7\u00f6z\u00fcm: UAC'yi Sa\u011flamla\u015ft\u0131rma<\/h2> Bu g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131 kapatmak i\u00e7in, yerel grup ilkesi veya domaininizdeki Grup \u0130lkesi Nesneleri (GPO) arac\u0131l\u0131\u011f\u0131yla UAC'yi sa\u011flamla\u015ft\u0131rman\u0131z gerekmektedir. <h3>Ad\u0131m 1: GPO Olu\u015fturma veya D\u00fczenleme<\/h3> <ol> <li><strong>Grup \u0130lkesi Y\u00f6netim Konsolunu<\/strong> (gpmc.msc) a\u00e7\u0131n veya yerel bir bilgisayarda <strong>Yerel Grup \u0130lkesi D\u00fczenleyiciyi<\/strong> (gpedit.msc) a\u00e7\u0131n.<\/li> <li>\u015eu ilkeye gidin: <pre><code>Bilgisayar Yap\u0131land\u0131rmas\u0131\\Windows Ayarlar\u0131\\G\u00fcvenlik Ayarlar\u0131\\Yerel \u0130lkeler\\G\u00fcvenlik Se\u00e7enekleri <\/code><\/pre> <\/li> <li>\u015eu ilkeyi bulun: <pre><code>Kullan\u0131c\u0131 Hesab\u0131 Denetimi: Y\u00f6netici Onay Modu'ndaki y\u00f6neticiler i\u00e7in y\u00fckseltme isteminin davran\u0131\u015f\u0131 <\/code><\/pre> <\/li> <\/ol> <h3>Ad\u0131m 2: \u0130lkeyi G\u00fcvenli Ayara De\u011fi\u015ftirme<\/h3> <ol> <li>\u0130lkeyi d\u00fczenleyin ve \u015fu ayar\u0131 se\u00e7in: <pre><code>G\u00fcvenli masa\u00fcst\u00fcnde onay istemi <\/code><\/pre> veya daha y\u00fcksek g\u00fcvenlik i\u00e7in: <pre><code>G\u00fcvenli masa\u00fcst\u00fcnde kimlik bilgileri istemi <\/code><\/pre> <\/li> <li>De\u011fi\u015fiklikleri uygulay\u0131n ve ilke d\u00fczenleyiciyi kapat\u0131n.<\/li> <li>Grup ilkesi g\u00fcncelle\u015ftirmelerini zorlamak i\u00e7in, etkilenen bilgisayarlarda \u015fu komutu \u00e7al\u0131\u015ft\u0131r\u0131n: <pre><code >gpupdate \/force <\/code><\/pre> <\/li> <\/ol> <h3>Ad\u0131m 3: Do\u011frulama<\/h3> De\u011fi\u015fikli\u011finizin ba\u015far\u0131l\u0131 oldu\u011funu do\u011frulamak i\u00e7in: <ol> <li>Windows + R tu\u015flar\u0131na bas\u0131n<\/li> <li>msconfig.exe yaz\u0131n ve ENTER tu\u015funa bas\u0131n<\/li> <li>Bu kez, Sistem Yap\u0131land\u0131rma arac\u0131n\u0131 ba\u015flatmadan \u00f6nce mavi bir UAC g\u00fcvenlik istemi g\u00f6rmelisiniz<\/li> <\/ol> <h2>Etkisi: K\u00fc\u00e7\u00fck De\u011fi\u015fiklik, B\u00fcy\u00fck Fayda<\/h2> Bu basit de\u011fi\u015fiklik, yerel ayr\u0131cal\u0131k y\u00fckseltme sald\u0131r\u0131lar\u0131na kar\u015f\u0131 savunman\u0131z\u0131 \u00f6nemli \u00f6l\u00e7\u00fcde iyile\u015ftirir. Sald\u0131rganlar\u0131n UAC mekanizmas\u0131n\u0131 atlamas\u0131 \u00e7ok daha zor hale gelir ve potansiyel k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m aktiviteleri kullan\u0131c\u0131 taraf\u0131ndan fark edilebilir olur. UAC'yi sa\u011flamla\u015ft\u0131rmak, Windows g\u00fcvenli\u011finizi g\u00fc\u00e7lendirmenin en h\u0131zl\u0131 ve en etkili yollar\u0131ndan biridir. Bu ayar de\u011fi\u015fikli\u011fi: <ul> <li>K\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131n gizlice y\u00fcksek ayr\u0131cal\u0131kl\u0131 eylemleri ger\u00e7ekle\u015ftirmesini engeller<\/li> <li>Kullan\u0131c\u0131lar\u0131, sistemlerinde y\u00fcr\u00fct\u00fclen ayr\u0131cal\u0131kl\u0131 i\u015flemler hakk\u0131nda bilgilendirir<\/li> <li>CIS ve NIST gibi g\u00fcvenlik standartlar\u0131na uyumlulu\u011funuzu art\u0131r\u0131r<\/li> <\/ul> <h2>Di\u011fer UAC Sa\u011flamla\u015ft\u0131rma Ad\u0131mlar\u0131<\/h2> UAC g\u00fcvenli\u011finizi daha da art\u0131rmak i\u00e7in g\u00f6z \u00f6n\u00fcnde bulundurman\u0131z gereken ek ayarlar: <ol> <li><strong>UAC'yi her zaman bildir<\/strong>: <pre><code>Kullan\u0131c\u0131 Hesab\u0131 Denetimi: Kullan\u0131c\u0131 bilgisayarlar\u0131nda de\u011fi\u015fiklik yapt\u0131\u011f\u0131nda bildir <\/code><\/pre> Bunu \"Her zaman bildir\" olarak ayarlay\u0131n.<\/li> <li><strong>Yerel Y\u00f6netici parolas\u0131yla UAC<\/strong>: <pre><code>Kullan\u0131c\u0131 Hesab\u0131 Denetimi: Yerle\u015fik Y\u00f6netici hesab\u0131 i\u00e7in Y\u00f6netici Onay Moduna ge\u00e7i\u015f <\/code><\/pre> Bunu \"Etkin\" olarak ayarlay\u0131n.<\/li> <li><strong>UAC y\u00fckseltmelerini filtrele<\/strong>: <pre><code>Kullan\u0131c\u0131 Hesab\u0131 Denetimi: UIAccess uygulamalar\u0131n\u0131n istem olmadan g\u00fcvenli masa\u00fcst\u00fcne y\u00fckseltmesine izin ver <\/code><\/pre> Bunu \"Devre D\u0131\u015f\u0131\" olarak ayarlay\u0131n.<\/li> <\/ol> Bu UAC sa\u011flamla\u015ft\u0131rma ad\u0131mlar\u0131, sistemlerinizin g\u00fcvenli\u011fini \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131racak ve potansiyel ayr\u0131cal\u0131k y\u00fckseltme vekt\u00f6rlerini azaltacakt\u0131r. <h2>Sonu\u00e7<\/h2> UAC ayarlar\u0131, Windows g\u00fcvenlik mimarisinin kritik bir bile\u015fenidir, ancak varsay\u0131lan yap\u0131land\u0131rmalar genellikle g\u00fcvenlikten \u00e7ok kullan\u0131m kolayl\u0131\u011f\u0131 i\u00e7in optimize edilmi\u015ftir. Bu basit GPO de\u011fi\u015fikli\u011fi ile, g\u00fcvenli\u011finizi \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131rabilir ve yayg\u0131n bir ayr\u0131cal\u0131k y\u00fckseltme vekt\u00f6r\u00fcn\u00fc ortadan kald\u0131rabilirsiniz. Windows g\u00fcvenli\u011fini sa\u011flamla\u015ft\u0131rmaya y\u00f6nelik bu kolay ad\u0131m, siber sald\u0131r\u0131lar\u0131n zincirleme reaksiyonunu k\u0131rmada da etkilidir. K\u00fc\u00e7\u00fck bir de\u011fi\u015fiklik, b\u00fcy\u00fck bir fark yarat\u0131r. <hr \/> <em>Not: Bu blog yaz\u0131s\u0131 yaln\u0131zca bilgilendirme ama\u00e7l\u0131d\u0131r. Her organizasyon, kendi i\u015f ihtiya\u00e7lar\u0131na ve risk tolerans\u0131na uygun g\u00fcvenlik ayarlar\u0131n\u0131 belirlemelidir.<\/em>","excerpt":"H\u0131zl\u0131 Test: Windows'unuz G\u00fcvenli mi? Windows g\u00fcvenli\u011finizi test etmenin basit bir yolu var: Windows + R tu\u015flar\u0131na bas\u0131n, msconfig.exe yaz\u0131n...","created_at":"2025-04-03 12:40:46","updated_at":"2026-09-08 00:21:47","category_id":7,"view_count":787,"reading_time":5,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-04-03 12:40:46","featured_image":"resimyok.jpg","slug":"uac-guvenlik-acigini-kapatma-msconfig-exe-ve-ayricalik-yukseltme-riski","category_name":"Cyber Security","category_slug":"cyber-security","category_color":"#10b981"},{"id":134,"title":"Windows G\u00fcvenlik Temelleri: G\u00fcvenli Bir Altyap\u0131 \u0130\u00e7in Kritik Bile\u015fen","content":"G\u00fcn\u00fcm\u00fcz\u00fcn siber tehdit ortam\u0131nda, Windows altyap\u0131n\u0131z\u0131 g\u00fcvence alt\u0131na almak her zamankinden daha kritik hale geldi. Microsoft'un G\u00fcvenlik Temelleri (Security Baselines), bu zorlu g\u00f6revi \u00f6nemli \u00f6l\u00e7\u00fcde kolayla\u015ft\u0131ran en de\u011ferli ara\u00e7lardan biridir. Bu temel g\u00fcvenlik yap\u0131land\u0131rmalar\u0131, organizasyonunuzu yayg\u0131n sald\u0131r\u0131lara kar\u015f\u0131 korumak i\u00e7in tasarlanm\u0131\u015f, Microsoft'un onlarca y\u0131ll\u0131k g\u00fcvenlik deneyiminden dam\u0131t\u0131lm\u0131\u015f en iyi uygulamalar\u0131 temsil eder. Ancak, bir\u00e7ok BT profesyoneli bu g\u00fc\u00e7l\u00fc ara\u00e7lar\u0131 kullanm\u0131yor veya etkin bir \u015fekilde uygulayam\u0131yor. Bu blog yaz\u0131s\u0131nda, G\u00fcvenlik Temelleri'nin ne oldu\u011funu, neden \u00f6nemli olduklar\u0131n\u0131 ve bunlar\u0131 kurulu\u015funuzda g\u00fcvenli bir \u015fekilde nas\u0131l uygulayabilece\u011finizi inceleyece\u011fiz. <h2>G\u00fcvenlik Temelleri Nedir?<\/h2> Microsoft G\u00fcvenlik Temelleri, Windows i\u015fletim sistemlerini ve di\u011fer Microsoft \u00fcr\u00fcnlerini g\u00fcvence alt\u0131na almak i\u00e7in Microsoft taraf\u0131ndan \u00f6nerilen yap\u0131land\u0131rma ayarlar\u0131n\u0131n kapsaml\u0131 bir koleksiyonudur. Bu temeller: <ul> <li>Grup \u0130lkesi veya Microsoft Intune arac\u0131l\u0131\u011f\u0131yla merkezi olarak y\u00f6netilebilir<\/li> <li>Y\u00fczlerce g\u00fcvenlik ayar\u0131n\u0131 i\u00e7erir<\/li> <li>Windows, Microsoft Defender, Edge, Office ve di\u011fer Microsoft \u00fcr\u00fcnleri i\u00e7in mevcuttur<\/li> <li>Microsoft taraf\u0131ndan d\u00fczenli olarak g\u00fcncellenir<\/li> <li>\u00dccretsiz olarak kullan\u0131labilir (baz\u0131 daha kat\u0131 versiyonlar\u0131 \u00fccretli olabilir)<\/li> <\/ul> <h2>Microsoft Security Compliance Toolkit 1.0<\/h2> <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=55319\">https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=55319<\/a> Microsoft, g\u00fcvenlik temellerini uygulamak ve y\u00f6netmek i\u00e7in Security Compliance Toolkit (SCT) 1.0'\u0131 sunmaktad\u0131r. Bu ara\u00e7 seti, a\u015fa\u011f\u0131daki bile\u015fenleri i\u00e7erir: <ol> <li><strong>G\u00fcvenlik Temeli ZIP Dosyalar\u0131<\/strong>: Windows 11, Windows Server 2022, Windows 10 ve di\u011fer \u00fcr\u00fcnler i\u00e7in temel g\u00fcvenlik yap\u0131land\u0131rmalar\u0131<\/li> <li><strong>Policy Analyzer<\/strong>: Mevcut politikalar\u0131 g\u00fcvenlik temelleriyle kar\u015f\u0131la\u015ft\u0131rman\u0131z\u0131 sa\u011flayan g\u00fc\u00e7l\u00fc bir ara\u00e7<\/li> <li><strong>LGPO (Local Group Policy Object) Arac\u0131<\/strong>: Grup ilkesi ayarlar\u0131n\u0131 d\u0131\u015fa ve i\u00e7e aktarmak i\u00e7in komut sat\u0131r\u0131 yard\u0131mc\u0131 program\u0131<\/li> <li><strong>SetObjectSecurity<\/strong>: Nesnelerin g\u00fcvenlik tan\u0131mlay\u0131c\u0131lar\u0131n\u0131 yap\u0131land\u0131rmak i\u00e7in ek ara\u00e7lar<\/li> <\/ol> <h2>Dikkat: G\u00fcvenlik Temelleri Zorluklar Yaratabilir!<\/h2> G\u00fcvenlik temelleri son derece de\u011ferli olsa da, bunlar\u0131 dikkatsizce uygulamak ciddi sorunlara yol a\u00e7abilir. Neden? \u00c7\u00fcnk\u00fc \u00e7o\u011fu i\u015fletme ortam\u0131, g\u00fcvenlik temelleri taraf\u0131ndan varsay\u0131lan olarak devre d\u0131\u015f\u0131 b\u0131rak\u0131lan eski protokollere ve zay\u0131f kriptografik algoritmalara ba\u011f\u0131ml\u0131d\u0131r. G\u00fcvenlik temelleri taraf\u0131ndan genellikle devre d\u0131\u015f\u0131 b\u0131rak\u0131lan baz\u0131 unsurlar \u015funlard\u0131r: <ul> <li>RC4 \u015fifreleme<\/li> <li>LM Hashleri<\/li> <li>NTLM kimlik do\u011frulama<\/li> <li>DES \u015fifreleme<\/li> <li>Eski TLS s\u00fcr\u00fcmleri (1.0 ve 1.1)<\/li> <li>SMBv1 protokol\u00fc<\/li> <li>PowerShell v2<\/li> <li>Ve daha fazlas\u0131...<\/li> <\/ul> Bu ayarlar\u0131n devre d\u0131\u015f\u0131 b\u0131rak\u0131lmas\u0131, eski uygulamalar\u0131n \u00e7al\u0131\u015fmay\u0131 durdurmas\u0131na, kimlik do\u011frulama sorunlar\u0131na ve hatta kritik i\u015f s\u00fcre\u00e7lerinin kesintiye u\u011framas\u0131na neden olabilir. <h2>\u00c7\u00f6z\u00fcm: Policy Analyzer ile G\u00fcvenli Uygulama<\/h2> G\u00fcvenlik temellerini g\u00fcvenli bir \u015fekilde uygulamak i\u00e7in en \u00f6nemli ara\u00e7, Microsoft Security Compliance Toolkit'in bir par\u00e7as\u0131 olan Policy Analyzer'd\u0131r. Bu ara\u00e7, mevcut politikalar\u0131n\u0131z\u0131 Microsoft'un \u00f6nerdi\u011fi g\u00fcvenlik temelleriyle kar\u015f\u0131la\u015ft\u0131rman\u0131z\u0131 sa\u011flar. <h3>Policy Analyzer'\u0131n Kullan\u0131m\u0131:<\/h3> <ol> <li><strong>Microsoft Security Compliance Toolkit 1.0'\u0131 \u0130ndirin<\/strong>: <ul> <li>Microsoft'un resmi web sitesinden \u00fccretsiz olarak indirilebilir<\/li> <li>\u00d6zellikle PolicyAnalyzer.zip ve ilgili Security Baseline ZIP dosyalar\u0131n\u0131 indirin<\/li> <\/ul> <\/li> <li><strong>Policy Analyzer'\u0131 Ba\u015flat\u0131n<\/strong>: <ul> <li>Ara\u00e7, ba\u015flamak i\u00e7in olduk\u00e7a basit bir aray\u00fcz sunar<\/li> <li>\"Add...\" d\u00fc\u011fmesiyle istedi\u011finiz g\u00fcvenlik temelini ekleyin (\u00f6rn. Windows Server 2022 Security Baseline)<\/li> <\/ul> <\/li> <li><strong>Mevcut Politikalar\u0131n\u0131zla Kar\u015f\u0131la\u015ft\u0131r\u0131n<\/strong>: <ul> <li>\"Compare to Effective State\" se\u00e7ene\u011fi, \u00f6nerilen temelleri sisteminizdeki mevcut ayarlarla kar\u015f\u0131la\u015ft\u0131r\u0131r<\/li> <li>Bu, de\u011fi\u015fiklikler yapmadan \u00f6nce potansiyel etkiyi g\u00f6rmenizi sa\u011flar<\/li> <\/ul> <\/li> <li><strong>\u00c7ak\u0131\u015fmalar\u0131 ve Farkl\u0131l\u0131klar\u0131 \u0130nceleyin<\/strong>: <ul> <li>K\u0131rm\u0131z\u0131 \"CONFLICT\" etiketleri, \u00f6zellikle dikkat edilmesi gereken \u00e7ak\u0131\u015fmalar\u0131 g\u00f6sterir<\/li> <li>Sa\u011f panelde, her politikan\u0131n ayr\u0131nt\u0131l\u0131 a\u00e7\u0131klamas\u0131n\u0131 g\u00f6rebilirsiniz<\/li> <\/ul> <\/li> <li><strong>Etki Analizi Ger\u00e7ekle\u015ftirin<\/strong>: <ul> <li>De\u011fi\u015ftirilecek her politika i\u00e7in, bu de\u011fi\u015fikli\u011fin ortam\u0131n\u0131z \u00fczerindeki etkisini de\u011ferlendirin<\/li> <li>Hangi uygulamalar\u0131n veya hizmetlerin etkilenebilece\u011fini belirleyin<\/li> <\/ul> <\/li> <\/ol> <h2>Ba\u015far\u0131l\u0131 Bir Uygulama \u0130\u00e7in \u0130pu\u00e7lar\u0131<\/h2> G\u00fcvenlik temellerini etkili bir \u015fekilde uygulamak i\u00e7in baz\u0131 \u00f6nemli ipu\u00e7lar\u0131: <ol> <li><strong>Bunu Bir Proje Olarak Ele Al\u0131n<\/strong>: <ul> <li>G\u00fcvenlik temellerini uygulamak, h\u0131zl\u0131 bir d\u00fczeltme de\u011fil, kapsaml\u0131 bir projedir<\/li> <li>Yeterli zaman ve kaynaklar\u0131 ay\u0131r\u0131n<\/li> <\/ul> <\/li> <li><strong>A\u015famal\u0131 Yakla\u015f\u0131m Benimseyin<\/strong>: <ul> <li>T\u00fcm temeli bir seferde uygulamak yerine, ad\u0131m ad\u0131m ilerleyin<\/li> <li>\u00d6nce d\u00fc\u015f\u00fck etkili de\u011fi\u015fikliklerle ba\u015flay\u0131n<\/li> <\/ul> <\/li> <li><strong>Test Ortam\u0131nda Do\u011frulay\u0131n<\/strong>: <ul> <li>\u00dcretim ortam\u0131na uygulamadan \u00f6nce mutlaka bir test ortam\u0131nda kapsaml\u0131 testler yap\u0131n<\/li> <li>\u00d6zellikle eski uygulamalar\u0131 test edin<\/li> <\/ul> <\/li> <li><strong>Geri D\u00f6n\u00fc\u015f Plan\u0131 Olu\u015fturun<\/strong>: <ul> <li>Her de\u011fi\u015fiklik i\u00e7in bir geri alma stratejiniz olsun<\/li> <li>Grup \u0130lkesi yedeklerini saklay\u0131n<\/li> <\/ul> <\/li> <li><strong>Belgelendirme Yap\u0131n<\/strong>: <ul> <li>Hangi politikalar\u0131n uyguland\u0131\u011f\u0131n\u0131 ve hangilerinin neden hari\u00e7 tutuldu\u011funu belgelendirin<\/li> <li>Bu, gelecekteki denetimler i\u00e7in \u00e7ok de\u011ferli olacakt\u0131r<\/li> <\/ul> <\/li> <\/ol> <h2>\u00d6zel Dikkat Gerektiren Yayg\u0131n Ayarlar<\/h2> A\u015fa\u011f\u0131daki g\u00fcvenlik temeli ayarlar\u0131 genellikle sorunlara neden olabilir, dolay\u0131s\u0131yla \u00f6zel dikkat gerektirir: <ol> <li><strong>TLS Yap\u0131land\u0131rmas\u0131<\/strong>: <ul> <li>Eski TLS 1.0\/1.1 protokollerini devre d\u0131\u015f\u0131 b\u0131rakmak, eski web uygulamalar\u0131n\u0131 etkileyebilir<\/li> <li>\u00d6nce bir envanter olu\u015fturun ve etkilenen sistemleri tespit edin<\/li> <\/ul> <\/li> <li><strong>SMB Protokol\u00fc<\/strong>: <ul> <li>SMBv1'i devre d\u0131\u015f\u0131 b\u0131rakmak, eski dosya payla\u015f\u0131mlar\u0131n\u0131 etkileyebilir<\/li> <li>\u00d6zellikle eski NAS cihazlar\u0131, yaz\u0131c\u0131lar ve taray\u0131c\u0131larla ilgili sorunlar ya\u015fanabilir<\/li> <\/ul> <\/li> <li><strong>PowerShell K\u0131s\u0131tlamalar\u0131<\/strong>: <ul> <li>Script Block Logging ve Constrained Language Mode gibi \u00f6zellikler, eski betikleri bozabilir<\/li> <li>Betiklerinizi \u00f6nceden test edin<\/li> <\/ul> <\/li> <li><strong>Credentials Guard<\/strong>: <ul> <li>Bu g\u00fc\u00e7l\u00fc \u00f6zellik, kimlik bilgilerini korur ancak baz\u0131 uzak masa\u00fcst\u00fc ve y\u00f6netim ara\u00e7lar\u0131yla \u00e7ak\u0131\u015fabilir<\/li> <\/ul> <\/li> <li><strong>Virtualization-Based Security<\/strong>: <ul> <li>G\u00f6rselde g\u00f6rd\u00fc\u011f\u00fcm\u00fcz \"HypervisorEnforcedCodeIntegrity\" gibi sanalla\u015ft\u0131rma tabanl\u0131 g\u00fcvenlik \u00f6zellikleri, baz\u0131 s\u00fcr\u00fcc\u00fcler ve uygulamalarla uyumsuzluk g\u00f6sterebilir<\/li> <\/ul> <\/li> <\/ol> <h2>Sonu\u00e7<\/h2> Windows G\u00fcvenlik Temelleri, dijital altyap\u0131n\u0131z\u0131 g\u00fcvence alt\u0131na almak i\u00e7in en g\u00fc\u00e7l\u00fc ara\u00e7lardan biridir. Ancak, bunlar\u0131 etkili bir \u015fekilde uygulamak dikkatli planlama, test ve a\u015famal\u0131 bir yakla\u015f\u0131m gerektirir. Microsoft'un Policy Analyzer gibi ara\u00e7lar\u0131 kullanarak, g\u00fcvenlik temellerinin potansiyel etkisini de\u011ferlendirebilir ve ortam\u0131n\u0131z i\u00e7in g\u00fcvenli bir ge\u00e7i\u015f plan\u0131 olu\u015fturabilirsiniz. G\u00fcvenlik temellerini uygulamak zaman ve \u00e7aba gerektirir, ancak sonu\u00e7 - daha g\u00fcvenli, daha standartla\u015ft\u0131r\u0131lm\u0131\u015f ve daha savunulabilir bir BT altyap\u0131s\u0131 - kesinlikle bu \u00e7abaya de\u011fer. <hr \/> <em>Not: Bu blog yaz\u0131s\u0131 yaln\u0131zca bilgilendirme ama\u00e7l\u0131d\u0131r. Kurulu\u015funuzda g\u00fcvenlik temelleri uygulamadan \u00f6nce, her zaman kapsaml\u0131 test yapman\u0131z\u0131 ve kendi i\u015f gereksinimlerinizi g\u00f6z \u00f6n\u00fcnde bulundurman\u0131z\u0131 \u00f6neririz.<\/em>","excerpt":"G\u00fcn\u00fcm\u00fcz\u00fcn siber tehdit ortam\u0131nda, Windows altyap\u0131n\u0131z\u0131 g\u00fcvence alt\u0131na almak her zamankinden daha kritik hale geldi. Microsoft'un G\u00fcvenlik...","created_at":"2025-04-03 11:36:12","updated_at":"2026-09-07 22:39:47","category_id":6,"view_count":759,"reading_time":6,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-04-03 11:36:12","featured_image":"resimyok.jpg","slug":"windows-guvenlik-temelleri-guvenli-bir-altyapi-icin-kritik-bilesen","category_name":"Sistem","category_slug":"sistem","category_color":"#3b82f6"}]