Sertleşme

Rehber →

Microsoft Bulut →

elma iOS'u →

BDT Karşılaştırmaları →

Google Workspaces (G Suite) →

Yıkıcı Saldırılar / Silecekler →

Aktif Dizin →

Citrix Xenapp / Xendesktop →

Ağ →

Kubernet'ler →

İstismar Azaltımları →

Github →

Windows →

Linux →

Sıfır Güven →

Rehber

Müthiş Güvenlik Güçlendirmesi

https://github.com/decalage2/awesome-security-hardening →

https://github.com/decalage2/awesome-security-hardening

NCSC'nin Platform Güvenliği Kılavuzu

https://www.ncsc.gov.uk/collection/device-security-guidance →

https://www.ncsc.gov.uk/collection/device-security-guidance

Microsoft Bulut

Başarılı bir şirket içi saldırının ardından bulut altyapısının tehlikeye girmesini önlemeye yönelik Microsoft kılavuzu

https://techcommunity.microsoft.com/t5/azure-active-directory-identity/protecting-microsoft-365-from-on-premises-attacks/ba-p/1751754 →

https://techcommunity.microsoft.com/t5/azure-active-directory-identity/protecting-microsoft-365-from-on-premises-attacks/ba-p/1751754

E3'ten E5'e (yıkıcı derecede pahalı) yükseltmenin sunduğu ek Güvenlik işlevlerine ilişkin inanılmaz derecede yararlı kılavuz

https://frankmcg.com/2020/09/purchased-microsoft-365-e5-now-what/ →

https://frankmcg.com/2020/09/purchased-microsoft-365-e5-now-what/

Azure AD'de hibrit ve bulut dağıtımları için ayrıcalıklı erişimin güvenliğini sağlama

https://docs.microsoft.com/en-us/azure/active-directory/roles/security-planning#ensure-separate-user-accounts-and-mail-forwarding-for-global-administrator-accounts →

https://docs.microsoft.com/en-us/azure/active-directory/roles/security-planning#ensure-separate-user-accounts-and-mail-forwarding-for-global-administrator-accounts

Sertleştirme O365

https://medium.com/falconforce/reducing-your-office365-attack-surface-1073a4d46a7b →

https://medium.com/falconforce/reducing-your-office365-attack-surface-1073a4d46a7b

KOBİ olduğunuzda Office 365'i BEC'den koruyun

https://www.comae.com/posts/keep-office-365-safe-from-bec-when-you-are-an-sme/ →

https://www.comae.com/posts/keep-office-365-safe-from-bec-when-you-are-an-sme/

elma iOS'u

ASD'nin Apple iOS 14 sağlamlaştırma kılavuzu

https://www.cyber.gov.au/acsc/view-all-content/publications/security-configuration-guide-apple-ios-14-devices →

https://www.cyber.gov.au/acsc/view-all-content/publications/security-configuration-guide-apple-ios-14-devices

BDT Karşılaştırmaları

Bunları ticari olarak kullanmak için ücretli bir lisansa ihtiyacınız var

https://www.cisecurity.org/cis-benchmarks/ →

https://www.cisecurity.org/cis-benchmarks/

Google Workspaces (G Suite)

https://fleetdm.com/handbook/security#google-workspace-security →

https://fleetdm.com/handbook/security#google-workspace-security

Google'ın küçük ve büyük işletmelere yönelik kılavuzu

https://support.google.com/a/answer/9211704 →

https://support.google.com/a/answer/9211704

https://support.google.com/a/answer/7587183 →

https://support.google.com/a/answer/7587183

Yıkıcı Saldırılar / Silecekler

Mandiant'ın yıkıcı saldırılara/sileceklere karşı sertleşme rehberi.

https://www.mandiant.com/resources/protect-against-destructive-attacks →

https://www.mandiant.com/resources/protect-against-destructive-attacks

Aktif Dizin

Bloodhound AD'deki gizli ilişkilerin haritasını çıkarır ve Ransomulator bunu görselleştirir

https://bloodhound.readthedocs.io/en/latest/index.html →

https://bloodhound.readthedocs.io/en/latest/index.html

https://github.com/BloodHoundAD/BloodHound →

https://github.com/BloodHoundAD/BloodHound

https://github.com/zeronetworks/BloodHound-Tools/tree/main/Ransomulator →

https://github.com/zeronetworks/BloodHound-Tools/tree/main/Ransomulator

Citrix Xenapp / Xendesktop

https://www.citrix.com/content/dam/citrix/en_us/documents/products-solutions/system-hardening-for-xenapp-and-xendesktop.pdf →

https://www.citrix.com/content/dam/citrix/en_us/documents/products-solutions/system-hardening-for-xenapp-and-xendesktop.pdf

Ağ

NSA/CISA'nın ağ sağlamlaştırma kılavuzu. Biraz eski tarz ve Cisco'ya çok odaklanmış, bu yüzden YMMV

https://media.defense.gov/2022/Mar/01/2002947139/-1/-1/0/CTR_NSA_NETWORK_INFRASTRUCTURE_SECURITY_GUIDANCE_20220301.PDF →

https://media.defense.gov/2022/Mar/01/2002947139/-1/-1/0/CTR_NSA_NETWORK_INFRASTRUCTURE_SECURITY_GUIDANCE_20220301.PDF

Kubernet'ler

NSA/CISA'nın Kubernetes sağlamlaştırma kılavuzu.

https://media.defense.gov/2021/Aug/03/2002820425/-1/-1/0/CTR_Kubernetes_Hardening_Guidance_1.1_20220315.PDF →

https://media.defense.gov/2021/Aug/03/2002820425/-1/-1/0/CTR_Kubernetes_Hardening_Guidance_1.1_20220315.PDF

İstismar Azaltımları

NCC'nin istismar azaltma kütüphanesi

https://github.com/nccgroup/exploit_mitigations →

https://github.com/nccgroup/exploit_mitigations

Github

Github'u güçlendirme kılavuzu. Birçok kuruluşun CI/CD işlem hatlarında kritik öneme sahiptir

https://alsmola.medium.com/securing-github-organizations-9c33c850638 →

https://alsmola.medium.com/securing-github-organizations-9c33c850638

Windows

Microsoft'un Windows Güvenlik Yapılandırma Çerçevesi

https://github.com/microsoft/SecCon-Framework/blob/master/windows-security-configuration-framework.md →

https://github.com/microsoft/SecCon-Framework/blob/master/windows-security-configuration-framework.md

HardeningKitty, Windows'u sertleştirmek için kullanılan bir powershell betiğidir

https://github.com/0x6d69636b/windows_hardening →

https://github.com/0x6d69636b/windows_hardening

Linux

Mandiant'ın Linux Uç Nokta Güçlendirme rehberi

https://www.mandiant.com/sites/default/files/2022-03/wp-linux-endpoint-hardening.pdf →

https://www.mandiant.com/sites/default/files/2022-03/wp-linux-endpoint-hardening.pdf

Sıfır Güven

Orijinal Google 'Beyondcorp' makalesi

https://research.google/pubs/pub43231/ →

https://research.google/pubs/pub43231/

NSA'nın "Sıfır Güven Güvenlik Modelini Benimsetmek" başlıklı makalesi

https://media.defense.gov/2021/Feb/25/2002588479/-1/-1/0/CSI_EMBRACING_ZT_SECURITY_MODEL_UOO115131-21.PDF →

https://media.defense.gov/2021/Feb/25/2002588479/-1/-1/0/CSI_EMBRACING_ZT_SECURITY_MODEL_UOO115131-21.PDF

Microsoft'un Sıfır Güven'e bakışı

https://docs.microsoft.com/en-us/security/zero-trust/ →

https://docs.microsoft.com/en-us/security/zero-trust/