¡°Î¢ÈíÀ¶ÆÁ¡±ÊÂÎñµÄÆôʾ£º°ü¹ÜӪҵϵͳÇå¾² £¬£¬ £¬£¬»¹µÃ¿¿¡°×Ô¼º¡±£¡
µ¼¶Á
2024Äê7ÔÂ19ÈÕ £¬£¬ £¬£¬È«Çò¶àµØµÄWindowsÓû§·ºÆðÁË´ó×ÚµçÄÔÍ߽⡢À¶ÆÁËÀ»ú¡¢ÎÞ·¨ÖØÐÂÆô¶¯µÄÊÂÎñ¡£ ¡£¡£¡£¹ÊÕϱ¬·¢ºó £¬£¬ £¬£¬È«Çò¶à¸ö¹ú¼ÒºÍµØÇøµÄº½°à¡¢Ò½ÁÆ¡¢ÒøÐС¢½»Í¨µÈÖ÷ÒªÐÐÒµ¾ùÊܵ½²î±ðˮƽµÄÓ°Ïì¡£ ¡£¡£¡£
ÊÂÎñ¾ÓÉ
2024Äê7ÔÂ19ÈÕÆÆÏþ4µã09·Ö £¬£¬ £¬£¬CrowdStrike¹«Ë¾ÏòÆäWindowsÓû§Ðû²¼ÁËÒ»ÏîÖÕ¶ËÇå¾²´«¸ÐÆ÷µÄÉèÖøüС£ ¡£¡£¡£²»ÐÒµÄÊÇ £¬£¬ £¬£¬Õâ´Î¸üÐÂÖаüÀ¨ÁËÒ»¸ö¹ýʧÉèÖà £¬£¬ £¬£¬µ¼Ö¸üб»×°ÖÃºó £¬£¬ £¬£¬ÊÜÓ°ÏìµÄWindows×°±¸×îÏÈ·ºÆðϵͳÍ߽ⲢÏÔʾÀ¶ÆÁ¹ýʧ¡£ ¡£¡£¡£±ðµÄ £¬£¬ £¬£¬Ðí¶àÔÆЧÀÍ¿Í»§µÄWindowsÐéÄâ»úÒ²×°ÖÃÁËCrowdStrikeÇå¾²²úÆ· £¬£¬ £¬£¬ÕâЩÐéÄâ»úÔÚÎüÊÕµ½¹ýʧµÄÉèÖøüкóͬÑùÔâÊÜÁËÀ¶ÆÁ¹ÊÕÏ £¬£¬ £¬£¬Ó°ÏìÏà±ÈPCÀ¶ÆÁÔ½·¢ÑÏÖØ¡£ ¡£¡£¡£
½â¾ö¼Æ»®
¼Æ»®1£º½¨ÒéÊÜÓ°ÏìµÄÓû§½«µçÄÔÆô¶¯µ½Ç徲ģʽ»ò»Ö¸´ÇéÐÎ £¬£¬ £¬£¬µ¼º½ÖÁC:\Windows\System32\drivers\CrowdStrikeĿ¼ £¬£¬ £¬£¬ÕÒµ½Óë¡°C-00000291*.sys¡±Æ¥ÅäµÄÎļþ²¢½«Æäɾ³ý £¬£¬ £¬£¬¼´¿ÉÕý³£Æô¶¯µçÄÔ¡£ ¡£¡£¡£
¼Æ»®2£ºÔÚÇ徲ģʽÏ»á¼ûC:\Windows\System32\drivers\CrowdStrike·¾¶ £¬£¬ £¬£¬ÕÒµ½csagent.sysÎļþ £¬£¬ £¬£¬Í¨¹ýÔÚÆäÎļþÃûºóÔöÌíÊý×ÖºÍ×ÖĸµÄ·½·¨¾ÙÐÐÖØÃüÃû £¬£¬ £¬£¬ÒÔÔÝʱ½ûÓøÃÇý¶¯³ÌÐò¡£ ¡£¡£¡£´ËÒªÁìÄ¿µÄÊÇÈƹýÓÐÎÊÌâµÄÇý¶¯³ÌÐò £¬£¬ £¬£¬´Ó¶ø×èÖ¹À¶ÆÁÎÊÌâ¡£ ¡£¡£¡£?
¼Æ»®3£ºÍ¨¹ý¹Ù·½²¹¶¡¾ÙÐиüÐÂÓëÐÞ¸´¡£ ¡£¡£¡£
ÎÒÃÇÒªÔõÑù×èÖ¹´ËÀàÍ»·¢ÊÂÎñ£¿£¿£¿£¿
±¾´Î΢ÈíЧÀ͵Ĵó¹æÄ£ÖÐÖ¹ÊÂÎñÔÙ´ÎÇ¿µ÷ÁË£ºÔÚÖØ´óϵͳÇéÐÎÖÐ £¬£¬ £¬£¬AgentÎȹÌÔËÐеÄÖ÷ÒªÐÔ¡£ ¡£¡£¡£AgentÒªÎȹÌÔËÐÐ £¬£¬ £¬£¬²»µ«ÐèÒªÆäÄÚ²¿½á¹¹Éè¼ÆÊʵ± £¬£¬ £¬£¬¸üÒªÇóÆä¾ß±¸Ç¿Ê¢µÄÇý¶¯³ÌÐò £¬£¬ £¬£¬Í¬Ê±²âÊÔÀú³ÌÒ²ÒªºÜÊÇÑÏ¿áºÍÖÜÈ« £¬£¬ £¬£¬È·±£Äܹ»·¢Ã÷ËùÓеÄDZÔÚΣº¦ £¬£¬ £¬£¬½¨ÉèÒ»¸öÔ½·¢¼áʵºÍ¿É¿¿µÄÖÕ¶ËAgentÈí¼þϵͳ¡£ ¡£¡£¡£
ׯÏÐÓÎÏ·ÖÕ¶ËÇå¾²ÈÏÕæÈËÌåÏÖ£ºÇå¾²²úÆ·ÐèÒª×ÔÖ÷¿É¿ØºÍ¸üÍêÉƵÄÍâµØ»¯Ð§ÀÍ¡£ ¡£¡£¡£ÕâÒ»ÊÂÎñÇ¿µ÷Á˶ÔÖÕ¶ËÇå¾²²úÆ·Ò»Á¬Éó²éºÍ²âÊÔµÄÐëÒªÐÔ £¬£¬ £¬£¬²¢Í»ÏÔÁ˹ú²úÇå¾²²úÆ·µÄÓÅÊÆ £¬£¬ £¬£¬ÓÈÆäÊÇÔÚÍâµØ»¯Ð§ÀÍ·½Ãæ¡£ ¡£¡£¡£¹ú²úÇå¾²²úÆ·Äܹ»Ìṩ¸ü¿ìËÙ¡¢¸üÌù½üÊг¡µÄ¿Í»§Ö§³Ö £¬£¬ £¬£¬¿ìËÙÏìÓ¦²¢½â¾ö¿Í»§ÃæÁÙµÄÎÊÌâ £¬£¬ £¬£¬ÕâÔÚÈ«Çò»¯µÄÊÖÒÕÒÀÀµÖÐÌṩÁËÒ»¸ö¿É¿¿µÄ±¾ÍÁ»¯Ì滻ѡÔñ¡£ ¡£¡£¡£
ׯÏÐÓÎÏ·Çå¾²½¨Òé
¹¹½¨Êý¾Ý±¸·Ý»úÖÆ£ºÔöÇ¿Êý¾Ý±¸·Ý»úÖÆ £¬£¬ £¬£¬²¢¾ÙÐа´ÆڵĻָ´²âÊÔÒÔÑéÖ¤±¸·ÝµÄÓÐÓÃÐÔ £¬£¬ £¬£¬Ó¦¶ÔÊý¾Ýɥʧ¡¢ÏµÍ³¹ÊÕÏ»òÆäËûÇå¾²Íþв¡£ ¡£¡£¡£
ÔöÇ¿ÆóÒµÓ¦¼±Ô¤°¸£º½¨ÉèÖÜÈ«µÄÓ¦¼±Ô¤°¸ÏµÍ³ £¬£¬ £¬£¬È·±£ÔÚΣ»£»ú±¬·¢Ê±Äܹ»Ñ¸ËÙ¡¢ÓÐÐòµØ½ÓÄɲ½·¥ £¬£¬ £¬£¬×îС»¯ÊÂÎñ¶ÔÆóÒµÔËÓªºÍÉùÓþµÄÓ°Ïì¡£ ¡£¡£¡£
¶àÔª»¯¹©Ó¦ÉÌÐ×÷£ºÍ¨¹ýÓë¶à¸ö¹©Ó¦É̽¨ÉèÏàÖú¹Øϵ £¬£¬ £¬£¬½µµÍ¶Ô¼òµ¥¹©Ó¦É̵ÄÒÀÀµ £¬£¬ £¬£¬´Ó¶øÌá¸ß¹©Ó¦Á´µÄµ¯ÐÔºÍÎȹÌÐÔ £¬£¬ £¬£¬×èÖ¹Òò¹©Ó¦É̵IJ»¿ÉÔ¤¼ûÎÊÌâµ¼ÖÂÉú²úÖÐÖ¹»ò±¾Ç®ÔöÌí¡£ ¡£¡£¡£
Ó¦ÓøüкóÖãºÑÓ³Ù¸ßΣº¦Ó¦ÓøüÐÂʱ¼ä £¬£¬ £¬£¬´Ó¶ø½µµÍ¸üпÉÄÜ´øÀ´µÄΣº¦ £¬£¬ £¬£¬È·±£ÏµÍ³µÄÎȹÌÐԺͿɿ¿ÐÔ¡£ ¡£¡£¡£
»Ò¶ÈÉý¼¶£ºÔÚ¾ÙÐвúÆ·´ó¹æÄ£Éý¼¶Ç° £¬£¬ £¬£¬½«ÐµÄÈí¼þ°æ±¾°²ÅŸøһС²¿·ÖÓû§»òϵͳ £¬£¬ £¬£¬È»ºóÖð²½À©´óµ½¸üÆÕ±éµÄÓû§ÈºÌå £¬£¬ £¬£¬ïÔÌа汾¿ÉÄÜ´øÀ´µÄΣº¦ £¬£¬ £¬£¬È·±£Èí¼þ¸üеÄƽÎȹý¶ÉºÍϵͳµÄÎȹÌÐÔ¡£ ¡£¡£¡£
¼ÓËÙ¹ú²ú»¯Ìæ»»£ºïÔ̶ÔÍⲿ¹©Ó¦É̵ÄÒÀÀµ £¬£¬ £¬£¬ÔöÇ¿×ÔÖ÷¿É¿ØÄÜÁ¦ £¬£¬ £¬£¬Í¬Ê±¿ìËÙÏìÓ¦ÍâµØÊг¡µÄÐèÇóºÍ¹æÔòת±ä £¬£¬ £¬£¬¹¹½¨¸üΪÎȹ̵ÄÍøÂçÇå¾²·ÀµØ¡£ ¡£¡£¡£
ÖÕ¶ËÇå¾² £¬£¬ £¬£¬Ò»Ö±ÊÇÆóÒµÕûÌåÍøÂçÇå¾²·À»¤ÏµÍ³ÖеÄÖ÷Òª»·½Ú¡£ ¡£¡£¡£¶àÄêÀ´ £¬£¬ £¬£¬×¯ÏÐÓÎϷʼÖÕ¼á³ÖÊÖÒÕ¹¥¹ØÓëÁ¢Òì £¬£¬ £¬£¬ÒÔÇáÁ¿»¯ÀíÄî¾ÙÐÐÖÕ¶ËÇå¾²²úÆ·Éè¼Æ £¬£¬ £¬£¬ÊµÏÖ¸ßЧÎȹ̵ÄÇå¾²·À»¤ £¬£¬ £¬£¬Í¨¹ýÇáÇý»òÎÞÇýģʽ¼ò»¯°²ÅÅ £¬£¬ £¬£¬ïÔÌ×ÊÔ´ÏûºÄ £¬£¬ £¬£¬²¢×èÖ¹ÓëÏÖÓÐÇý¶¯µÄ³åÍ» £¬£¬ £¬£¬Í¬Ê±¼á³Ö¼à¿ØµÄÎÞаÐԺͿɿ¿ÐÔ¡£ ¡£¡£¡£
ÔÚ¿ª·¢Àú³ÌÖÐ £¬£¬ £¬£¬ÍŶÓ×ñÕÕDevSecOpsµÄ¸ß±ê×¼ÑÏÒªÇó £¬£¬ £¬£¬½«Çå¾²ÈÚÈëÿ¸ö¿ª·¢½×¶Î £¬£¬ £¬£¬¹¹½¨Æð×ÝÉîµÄÇå¾²ÑÐÔËÖÎÀíϵͳ £¬£¬ £¬£¬ÌáÉý²úÆ·µÄÇå¾²ÐÔºÍÏìÓ¦ÄÜÁ¦¡£ ¡£¡£¡£±ðµÄ £¬£¬ £¬£¬Í¨¹ýÖÜÈ«µÄ×Ô¶¯»¯²âÊÔºÍÏ꾡µÄÇå¾²²âÊÔ £¬£¬ £¬£¬ÈçSAST£¨¾²Ì¬Ó¦ÓóÌÐòÇå¾²²âÊÔ£©¡¢DAST£¨¶¯Ì¬Ó¦ÓóÌÐòÇå¾²²âÊÔ£©ºÍÉø͸²âÊÔ £¬£¬ £¬£¬È·±£²úÆ·ÔÚÐû²¼Ç°µÖ´ï¸ßÖÊÁ¿±ê×¼ £¬£¬ £¬£¬Á¦ÕùΪ¿Í»§ÌṩÎȹ̡¢¸ßЧ¡¢¿É¿¿µÄÖÕ¶ËÇå¾²·ÀÓùÄÜÁ¦¡£ ¡£¡£¡£
×¢£ºÍ¼Æ¬ÈªÔ´ÓÚÍøÂç
¾©¹«Íø°²±¸ 11010802026257ºÅ