{"id":45809,"date":"2025-05-05T12:15:35","date_gmt":"2025-05-05T09:15:35","guid":{"rendered":"https:\/\/wise.tv\/?p=45809"},"modified":"2025-12-07T15:49:45","modified_gmt":"2025-12-07T12:49:45","slug":"trellix-fx-file-protect","status":"publish","type":"post","link":"https:\/\/wise.tv\/tr\/trellix-fx-file-protect\/","title":{"rendered":"Trellix FX File Protect"},"content":{"rendered":"

Wise TV’ye konu\u015fan Komtera Teknoloji Teknik M\u00fcd\u00fcr\u00fc Ekrem Kolday, Trellix’in FX File Protect dosya g\u00fcvenli\u011fi \u00e7\u00f6z\u00fcm\u00fcn\u00fc anlatt\u0131.<\/p>\n

Kolday \u015funlar\u0131 s\u00f6yledi:
\nG\u00fcn\u00fcm\u00fczde dosya payla\u015f\u0131m alanlar\u0131ndaki “dura\u011fan dosya” diye adland\u0131rd\u0131\u011f\u0131m\u0131z, aktif kullan\u0131lmad\u0131\u011f\u0131 zaman tarama i\u015flemine tabi tutulmayan ya da kurum veya kurulu\u015fumuz i\u00e7in \u00f6zel olarak tasarlanm\u0131\u015f hedef odakl\u0131 sald\u0131r\u0131lar\u0131n tespiti i\u00e7in kullan\u0131lan \u00e7\u00f6z\u00fcmlerin bir\u00e7o\u011fu, normal standart antivir\u00fcs motorlar\u0131 ile yap\u0131lan taramalarla bu zararlar\u0131n tespiti i\u00e7in kullan\u0131lmakta. Ancak Trellix’in bize sundu\u011fu FX File Protect \u00fcr\u00fcn\u00fc, bizlere sandbox yeteneklerinden faydalanarak performansl\u0131 \u00e7al\u0131\u015fma \u00f6zellikleri sunmakta ve dura\u011fan dosya payla\u015f\u0131m alanlar\u0131ndaki hedef odakl\u0131 zararl\u0131 verilerin tespiti i\u00e7in kullan\u0131labilen bir \u00e7\u00f6z\u00fcm olarak kar\u015f\u0131m\u0131za \u00e7\u0131kmakta.<\/p>\n

Dura\u011fan dosyalar, hepimizin sistemlerinde file server olarak adland\u0131rd\u0131\u011f\u0131m\u0131z farkl\u0131 konumlarda bulunabilen, \u00f6rne\u011fin NFS, SharePoint, e\u011fer bulut kullan\u0131yorsak OneDrive ya da Amazon S3 Bucket gibi bir\u00e7ok dosya payla\u015f\u0131m alanlar\u0131nda herkesin kullan\u0131m\u0131na a\u00e7\u0131k dosya t\u00fcrlerini bar\u0131nd\u0131r\u0131yor olabilir. Ancak bu dosyalar\u0131n zararl\u0131 i\u00e7erip i\u00e7ermedi\u011fi ya da bu dosyalar\u0131n bizim ortam\u0131m\u0131z i\u00e7in tasarlanan hedef odakl\u0131 bir zararl\u0131 i\u00e7erip i\u00e7ermedi\u011fini mevcut sistemlerimizde sadece dosyay\u0131 kullan\u0131m s\u0131ras\u0131nda, okuma veya yazma i\u015flemi s\u0131ras\u0131ndaki antivir\u00fcs motorunun bu dosyay\u0131 tespit etme durumuna g\u00f6re anlayabiliriz ya da alg\u0131layabiliriz.<\/p>\n

Bu noktada hedef odakl\u0131 bir sald\u0131r\u0131 ya da bir Zero Day zararl\u0131s\u0131n\u0131n antivir\u00fcs motorlar\u0131 taraf\u0131ndan tespit edilmesi \u00e7ok m\u00fcmk\u00fcn de\u011fil. Trellix’in bize sa\u011flad\u0131\u011f\u0131 File Protect FX diye adland\u0131rd\u0131\u011f\u0131m\u0131z \u00e7\u00f6z\u00fcm\u00fc, bu noktada dura\u011fan dosyalar \u00fczerindeki zararl\u0131lar\u0131n analizi, ileri d\u00fczey zararl\u0131 yaz\u0131l\u0131m analizi anlam\u0131nda olduk\u00e7a de\u011ferli bir \u00e7\u00f6z\u00fcm olarak kar\u015f\u0131m\u0131za \u00e7\u0131k\u0131yor. Yine Trellix’in bir\u00e7ok \u00fcr\u00fcn katman\u0131nda sundu\u011fu gibi fiziksel appliance, sanal appliance ve bulut \u00fczerinde \u00e7al\u0131\u015fan \u00e7\u00f6z\u00fcmleri mevcut. Ortamda fiziksel appliance olarak bir File Protect \u00e7\u00f6z\u00fcm\u00fc tercih etmemiz durumunda, \u00fcr\u00fcn\u00fcn i\u00e7inde kendi ba\u015f\u0131na sandbox \u00f6zelli\u011fi bar\u0131nd\u0131ran bir appliance olarak kar\u015f\u0131m\u0131za \u00e7\u0131kmakta. Ancak ortamda Trellix’in sandbox \u00e7\u00f6z\u00fcm\u00fc olmas\u0131 durumunda, File Protect \u00e7\u00f6z\u00fcm\u00fcn\u00fc sanal appliance olarak al\u0131p sistemimizde sandbox performansl\u0131 \u00e7al\u0131\u015fmas\u0131 ile birlikte entegre ederek ortam\u0131m\u0131zdaki sandbox \u00e7\u00f6z\u00fcm\u00fcn\u00fc daha verimli kullanma imkan\u0131m\u0131z olabilmekte.<\/p>\n

Baz\u0131 \u00f6rnek senaryolara bakacak olursak, \u00f6zellikle d\u0131\u015f d\u00fcnyadan ya da korumal\u0131 a\u011f olarak adland\u0131rd\u0131\u011f\u0131m\u0131z intranet diye adland\u0131rd\u0131\u011f\u0131m\u0131z farkl\u0131 a\u011flar aras\u0131nda dosya transferi yapma i\u015flemlerinde genelde dosyalar\u0131n g\u00fcvenli olup olmad\u0131\u011f\u0131 konusunda \u00e7ok fazla kontrol yap\u0131lamamakta. Ancak Trellix’in FX File Protect \u00fcr\u00fcn\u00fcn\u00fcn bize sundu\u011fu \u00f6zellikler sayesinde dosya payla\u015f\u0131m portal\u0131 ya da file serverlar\u0131m\u0131z\u0131n taran\u0131p g\u00fcvenli veya g\u00fcvensiz klas\u00f6rler halinde tutuluyor olmas\u0131, bu dosyalar\u0131n ileri d\u00fczey zararl\u0131 yaz\u0131l\u0131m analizine tabi tutulup g\u00fcvenli olarak adland\u0131rd\u0131\u011f\u0131m\u0131z dosyalar\u0131n kurumumuzda dola\u015f\u0131ma sunuluyor olmas\u0131 ya da kullan\u0131c\u0131lar\u0131n kullan\u0131m\u0131na sunuluyor olmas\u0131 bize olduk\u00e7a basit ancak \u00e7ok \u00f6nemli kritik dosyalarla ilgili ileri d\u00fczey zararl\u0131 yaz\u0131l\u0131m analizi yap\u0131ld\u0131ktan sonra temiz dosyan\u0131n sistem a\u011f\u0131m\u0131zda, kurum a\u011f\u0131m\u0131zda kullan\u0131labiliyor olmas\u0131n\u0131 sa\u011flayabilmek.<\/p>\n

Bu senaryolar\u0131 geli\u015ftirme ve art\u0131rma \u015fans\u0131m\u0131z var. Yine \u00f6zellikle d\u0131\u015f d\u00fcnyadan \u00e7ok fazla dosya transferi olan lokasyonlarda ya da m\u00fc\u015fterilerde dosyalar\u0131n sistemimize dahil edilmeden \u00f6ncesinde bir tarama i\u015flemine tabi tutulmas\u0131 \u00e7ok fazla m\u00fcmk\u00fcn olmamakta. Ancak File Protect \u00fcr\u00fcn\u00fc sayesinde, \u00fcr\u00fcn\u00fcn g\u00fcvenli olarak klas\u00f6rlere y\u00fcklenmesi sonras\u0131 ileri d\u00fczey zararl\u0131 yaz\u0131l\u0131m analizine tabi tutulup g\u00fcvenli dosyalar\u0131n kurum a\u011f\u0131m\u0131za dahil ediliyor olmas\u0131 s\u00f6z konusu olabilmekte. Bu anlatt\u0131\u011f\u0131m konular\u0131n hepsi File Protect \u00fcr\u00fcn\u00fc sayesinde otomatik zamanlanm\u0131\u015f tarama g\u00f6revleri veya dosya t\u00fcrlerini belirleme \u015feklinde farkl\u0131 senaryolarla \u015fekillendirilebilir.<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"Wise TV’ye konu\u015fan Komtera Teknoloji Teknik M\u00fcd\u00fcr\u00fc Ekrem Kolday, Trellix’in FX File Protect dosya g\u00fcvenli\u011fi \u00e7\u00f6z\u00fcm\u00fcn\u00fc anlatt\u0131. Kolday […]\n","protected":false},"author":1749,"featured_media":45901,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[7020,6935,6725,6866,6178,3421],"tags":[6923],"class_list":["post-45809","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cozum-videolari","category-security","category-veri-guvenligi","category-bulut-guvenligi","category-dijital-donusum","category-yazilim-videolari","tag-trellix"],"acf":[],"_links":{"self":[{"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/posts\/45809","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/users\/1749"}],"replies":[{"embeddable":true,"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/comments?post=45809"}],"version-history":[{"count":0,"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/posts\/45809\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/media\/45901"}],"wp:attachment":[{"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/media?parent=45809"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/categories?post=45809"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wise.tv\/tr\/wp-json\/wp\/v2\/tags?post=45809"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}