{"id":100099,"date":"2019-07-16T19:00:36","date_gmt":"2019-07-17T02:00:36","guid":{"rendered":"https:\/\/www.paloaltonetworks.com\/blog\/?p=100099"},"modified":"2022-08-28T21:42:04","modified_gmt":"2022-08-29T04:42:04","slug":"threat-intelligence-for-robust-organization","status":"publish","type":"post","link":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/2019\/07\/threat-intelligence-for-robust-organization\/?lang=ja","title":{"rendered":"\u7d44\u7e54\u306e\u9632\u5fa1\u529b\u3092\u9ad8\u3081\u308b\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u6d3b\u7528"},"content":{"rendered":"<p class=\"p1\">\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5206\u91ce\u3067\u300c\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u300d\u3068\u3044\u3046\u8a00\u8449\u304c\u4e00\u822c\u5316\u3057\u3066\u304d\u3066\u3044\u307e\u3059\u3002\u5b9f\u969b\u306e\u653b\u6483\u306b\u95a2\u3059\u308b\u8a73\u7d30\u306a\u60c5\u5831\u304c\u300c\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u300d\u3068\u3057\u3066\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d9\u30f3\u30c0\u3084 ISAC \u306a\u3069\u60c5\u5831\u5171\u6709\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u306b\u3088\u308a\u5171\u6709\u3055\u308c\u3066\u3044\u308b\u306e\u3067\u3059\u3002\u3053\u3046\u3057\u305f\u60c5\u5831\u3092\u9069\u5207\u306b\u6d3b\u7528\u3059\u308c\u3070\u3001\u8105\u5a01\u306b\u8fc5\u901f\u306b\u5bfe\u5fdc\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002\u305f\u3060\u3057\u3001\u3072\u3068\u304f\u3061\u306b\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u3068\u8a00\u3063\u3066\u3082\u305d\u306e\u5185\u5bb9\u3084\u5b9a\u7fa9\u3001\u5f62\u614b\u306f\u3055\u307e\u3056\u307e\u3067\u3059\u304b\u3089\u3001\u6b63\u3057\u304f\u7406\u89e3\u3057\u3066\u3001\u52b9\u679c\u7684\u306b\u6d3b\u7528\u3057\u306a\u3051\u308c\u3070\u306a\u308a\u307e\u305b\u3093\u3002<\/p>\n<h2 class=\"p2\"><span style=\"font-size: 16pt;\"><b>\u75db\u307f\u306e\u30d4\u30e9\u30df\u30c3\u30c9<\/b><\/span><\/h2>\n<p class=\"p3\">2013 \u5e74\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5c02\u9580\u5bb6\u306e David J. Bianco \u306f\u653b\u6483\u8005\u304c\u6b8b\u3059\u75d5\u8de1 (Indicator\u3001\u30a4\u30f3\u30b8\u30b1\u30fc\u30bf) \u3092 6 \u7a2e\u985e\u306b\u5206\u985e\u3057\u307e\u3057\u305f\u3002\u3053\u308c\u3089\u306e\u75d5\u8de1\u306b\u9632\u5fa1\u5074\u304c\u5bfe\u7b56\u3057\u305f\u5834\u5408\u3001\u653b\u6483\u8005\u306b\u4e0e\u3048\u3089\u308c\u308b\u30c0\u30e1\u30fc\u30b8\u306f\u305d\u308c\u305e\u308c\u306b\u7570\u306a\u308a\u307e\u3059\u3002Bianco \u306f\u653b\u6483\u8005\u306b\u3068\u3063\u3066\u5bfe\u7b56\u3055\u308c\u3066\u3082\u75db\u307f\u306e\u5c0f\u3055\u3044\u3082\u306e\u304b\u3089\u5927\u304d\u3044\u3082\u306e\u306b\u4e26\u3079\u3001<a href=\"http:\/\/detect-respond.blogspot.com\/2013\/03\/the-pyramid-of-pain.html\" rel=\"nofollow,noopener\" ><span class=\"s1\">Pyramid of Pain<\/span>\u00a0(\u75db\u307f\u306e\u30d4\u30e9\u30df\u30c3\u30c9)\u00a0<\/a>\u3068\u3057\u3066\u516c\u958b\u3057\u307e\u3057\u305f (\u56f3 1)\u3002<\/p>\n<figure id=\"attachment_100101\" aria-describedby=\"caption-attachment-100101\" style=\"width: 500px\" class=\"wp-caption aligncenter\"><div style=\"max-width:100%\" data-width=\"500\"><span class=\"ar-custom\" style=\"padding-bottom:66.8%;\"><img loading=\"lazy\" decoding=\"async\"  class=\"wp-image-100101 size-large lozad\"  data-src=\"https:\/\/www.paloaltonetworks.com\/blog\/wp-content\/uploads\/2019\/07\/pyramid-500x334.png\" alt=\"\u56f3 1 \u75db\u307f\u306e\u30d4\u30e9\u30df\u30c3\u30c9\u3002\u4e0a\u304b\u3089 TTP\u3001\u30c4\u30fc\u30eb\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30fb\u30db\u30b9\u30c8\u30a2\u30fc\u30c6\u30a3\u30d5\u30a1\u30af\u30c8\u3001\u30c9\u30e1\u30a4\u30f3\u30cd\u30fc\u30e0\u3001IP\u30a2\u30c9\u30ec\u30b9\u3001\u30cf\u30c3\u30b7\u30e5\u5024\u3002\u4e0a\u90e8\u307b\u3069\u75db\u307f\u304c\u5f37\u3044\u3002\" width=\"500\" height=\"334\" srcset=\"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-content\/uploads\/2019\/07\/pyramid-500x334.png 500w, https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-content\/uploads\/2019\/07\/pyramid-230x154.png 230w, https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-content\/uploads\/2019\/07\/pyramid-768x514.png 768w, https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-content\/uploads\/2019\/07\/pyramid-449x300.png 449w, https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-content\/uploads\/2019\/07\/pyramid-60x40.png 60w, https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-content\/uploads\/2019\/07\/pyramid-400x268.png 400w, https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-content\/uploads\/2019\/07\/pyramid-874x584.png 874w, https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-content\/uploads\/2019\/07\/pyramid.png 1002w\" sizes=\"auto, (max-width: 500px) 100vw, 500px\" \/><\/span><\/div><figcaption id=\"caption-attachment-100101\" class=\"wp-caption-text\">\u56f3 1 \u75db\u307f\u306e\u30d4\u30e9\u30df\u30c3\u30c9<\/figcaption><\/figure>\n<p class=\"p3\">\u3053\u306e\u30d4\u30e9\u30df\u30c3\u30c9\u306e\u4e0b\u90e8 3 \u5c64\u300c(\u30d5\u30a1\u30a4\u30eb) \u30cf\u30c3\u30b7\u30e5\u5024\u300d\u3001\u300cIP \u30a2\u30c9\u30ec\u30b9\u300d\u3001\u300c\u30c9\u30e1\u30a4\u30f3\u30cd\u30fc\u30e0\u300d\u306f IoC\u00a0 (Indicator of Compromise\u3001\u4fb5\u5bb3\u306e\u75d5\u8de1) \u3068\u3057\u3066\u3088\u304f\u5171\u6709\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u75d5\u8de1\u306f\u5b9f\u969b\u306e\u653b\u6483\u3067\u4f7f\u7528\u3055\u308c\u305f\u3082\u306e\u3067\u3042\u308b\u3053\u3068\u304c\u591a\u304f\u3001\u6a5f\u68b0\u7684\u306b\u51e6\u7406\u3057\u3084\u3059\u3044\u30c7\u30fc\u30bf\u69cb\u9020\u3092\u3082\u3064\u3053\u3068\u304b\u3089\u3001\u81ea\u52d5\u691c\u51fa\/\u9632\u5fa1\u306b\u5229\u7528\u3059\u308c\u3070\u5927\u304d\u306a\u52b9\u679c\u3092\u767a\u63ee\u3067\u304d\u307e\u3059\u3002\u3057\u304b\u3057\u3053\u308c\u3089 IoC \u306b\u542b\u307e\u308c\u308b\u5185\u5bb9\u306f\u653b\u6483\u8005\u304c\u7c21\u5358\u306b\u5909\u66f4\u3067\u304d\u308b\u306e\u3067\u3001\u9632\u5fa1\u5074\u304c\u4e0e\u3048\u3089\u308c\u308b\u300c\u75db\u307f\u300d\u306f\u3042\u307e\u308a\u5927\u304d\u304f\u3042\u308a\u307e\u305b\u3093\u3002<\/p>\n<p class=\"p3\">\u4e00\u65b9\u3001\u30d4\u30e9\u30df\u30c3\u30c9\u306e\u4e0a\u90e8 3 \u5c64\u306f\u653b\u6483\u8005\u3084\u8105\u5a01\u306e\u3075\u308b\u307e\u3044\u306b\u95a2\u3059\u308b\u3082\u306e\u3067\u3059\u3002\u3075\u308b\u307e\u3044\u306f\u7c21\u5358\u306b\u306f\u5909\u3048\u3089\u308c\u306a\u3044\u305f\u3081\u3001\u9632\u5fa1\u5074\u306b\u5bfe\u5fdc\u3055\u308c\u3066\u3057\u307e\u3046\u3068\u653b\u6483\u8005\u306b\u3068\u3063\u3066\u306f\u975e\u5e38\u306b\u300c\u75db\u307f\u300d\u304c\u5927\u304d\u304f\u306a\u308a\u307e\u3059\u3002\u3064\u307e\u308a\u653b\u6483\u8005\u306e\u3075\u308b\u307e\u3044\u3092\u5b66\u3073\u3001\u8fc5\u901f\u306b\u5bfe\u5fdc\u3059\u308b\u3053\u3068\u3067\u7d44\u7e54\u306e\u9632\u885b\u529b\u3092\u9ad8\u3081\u308b\u3053\u3068\u304c\u3067\u304d\u308b\u306e\u3067\u3059\u3002<\/p>\n<h2 class=\"p2\"><span style=\"font-size: 16pt;\"><b>\u653b\u6483\u8005\u306e\u3075\u308b\u307e\u3044<\/b><\/span><\/h2>\n<p class=\"p3\">\u653b\u6483\u8005\u306e\u3075\u308b\u307e\u3044\u3092\u7406\u89e3\u3059\u308b\u305f\u3081\u306e\u6709\u76ca\u306a\u60c5\u5831\u6e90\u306e\u4e00\u3064\u3068\u3057\u3066\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d9\u30f3\u30c0\u304c\u63d0\u4f9b\u3059\u308b\u8105\u5a01\u60c5\u5831\u3092\u6d3b\u7528\u3067\u304d\u307e\u3059\u3002<a href=\"https:\/\/www.paloaltonetworks.jp\/company\/in-the-news\" rel=\"nofollow,noopener\" ><span class=\"s1\">\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u30c1\u30fc\u30e0 Unit 42<\/span> <\/a>\u306f\u653b\u6483\u8005\u306e\u3075\u308b\u307e\u3044\u3068 IoC \u3092\u542b\u3093\u3060\u30ec\u30dd\u30fc\u30c8\u3092\u5e74\u9593 100 \u672c\u7a0b\u5ea6\u516c\u958b\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<h2 class=\"p2\"><span style=\"font-size: 14pt;\"><b>MITRE ATT&amp;CK&#x2122; \u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af<\/b><\/span><\/h2>\n<p class=\"p3\">Unit 42 \u306a\u3069\u306e\u30ec\u30dd\u30fc\u30c8\u306b\u542b\u307e\u308c\u308b\u300c\u5b9f\u969b\u306e\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u3068\u3089\u308c\u305f\u884c\u52d5\u3084\u30c6\u30af\u30cb\u30c3\u30af\u300d\u3092\u5206\u985e\u3057\u3066\u8a18\u8ff0\u3059\u308b\u305f\u3081\u306e\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u306e\u3072\u3068\u3064\u306b<a href=\"https:\/\/attack.mitre.org\/\" rel=\"nofollow,noopener\" ><span class=\"s1\">ATT&amp;CK&#x2122;\u00a0<\/span><\/a>\u304c\u3042\u308a\u307e\u3059\u3002ATT&amp;CK \u306f\u3001\u8106\u5f31\u6027\u306e\u8b58\u5225\u306b\u5229\u7528\u3055\u308c\u308b CVE \u756a\u53f7\u3092\u63a1\u756a\u3057\u3066\u3044\u308b\u975e\u55b6\u5229\u56e3\u4f53 MITRE \u793e\u304c\u5c0e\u5165\u3057\u305f\u3082\u306e\u3067\u3059\u3002\u73fe\u5728\u306fMac \u3084\u3001Linux\u3001\u30e2\u30d0\u30a4\u30eb\u306a\u3069\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u5225\u306b\u3082\u4f5c\u6210\u3055\u308c\u3066\u304a\u308a\u3001\u6700\u3082\u591a\u3044 Windows \u7528\u3067\u306f\u672c\u7a3f\u57f7\u7b46\u6642\u70b9\u3067 12 \u306e\u30ab\u30c6\u30b4\u30ea\u3001\u306e\u3079 314 \u306e\u30c6\u30af\u30cb\u30c3\u30af\u304c\u5206\u985e\u3055\u308c\u3066\u3044\u307e\u3059 (\u56f3 2)\u3002<\/p>\n<figure id=\"attachment_100114\" aria-describedby=\"caption-attachment-100114\" style=\"width: 500px\" class=\"wp-caption aligncenter\"><div style=\"max-width:100%\" data-width=\"500\"><span class=\"ar-custom\" style=\"padding-bottom:75.6%;\"><img loading=\"lazy\" decoding=\"async\"  class=\"wp-image-100114 size-large lozad\"  data-src=\"https:\/\/www.paloaltonetworks.com\/blog\/wp-content\/uploads\/2019\/07\/ATTACK-500x378.png\" alt=\"\u56f3 2 ATT&amp;CK \u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af Windows\u7528\u30de\u30c8\u30ea\u30c3\u30af\u30b9\" width=\"500\" height=\"378\" srcset=\"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-content\/uploads\/2019\/07\/ATTACK-500x378.png 500w, https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-content\/uploads\/2019\/07\/ATTACK-230x174.png 230w, https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-content\/uploads\/2019\/07\/ATTACK-768x580.png 768w, https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-content\/uploads\/2019\/07\/ATTACK-397x300.png 397w, https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-content\/uploads\/2019\/07\/ATTACK-53x40.png 53w, https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-content\/uploads\/2019\/07\/ATTACK-874x660.png 874w, https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-content\/uploads\/2019\/07\/ATTACK.png 1569w\" sizes=\"auto, (max-width: 500px) 100vw, 500px\" \/><\/span><\/div><figcaption id=\"caption-attachment-100114\" class=\"wp-caption-text\">\u56f3 2 ATT&amp;CK \u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af Windows\u7528\u30de\u30c8\u30ea\u30c3\u30af\u30b9<\/figcaption><\/figure>\n<p class=\"p3\">\u305f\u3068\u3048\u3070\u3001Unit 42 \u304c\u5831\u544a\u3057\u305f\u9ad8\u5ea6\u306a\u6a19\u7684\u578b\u653b\u6483\u30b0\u30eb\u30fc\u30d7 <a href=\"https:\/\/www.paloaltonetworks.jp\/company\/in-the-news\/2019\/darkhydrus-delivers-new-trojan-that-can-use-google-drive-for-c2-communications\" rel=\"nofollow,noopener\" ><span class=\"s1\">DarkHydrus<\/span><\/a> \u306e\u5229\u7528\u3059\u308b\u30c6\u30af\u30cb\u30c3\u30af\u3084\u30c4\u30fc\u30eb\u306f ATT&amp;CK \u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u3067\u6574\u7406\u3057\u305f\u3082\u306e\u304c <a href=\"https:\/\/attack.mitre.org\/groups\/G0079\/\" rel=\"nofollow,noopener\" ><span class=\"s1\">https:\/\/attack.mitre.org\/groups\/G0079\/<\/span><\/a> \u306b\u307e\u3068\u3081\u3089\u308c\u3066\u3044\u307e\u3059\u3002\u4eee\u306b\u3053\u3053\u306b\u8a18\u8f09\u3055\u308c\u3066\u3044\u308b\u30c6\u30af\u30cb\u30c3\u30af\u3084\u30c4\u30fc\u30eb\u304c\u81ea\u7d44\u7e54\u3067\u767a\u898b\u3055\u308c\u305f\u5834\u5408 <span class=\"s1\">DarkHydrus<\/span> \u304c\u95a2\u4e0e\u3057\u3066\u3044\u308b\u53ef\u80fd\u6027\u304c\u8003\u3048\u3089\u308c\u308b\u3053\u3068\u306b\u306a\u308a\u307e\u3059\u3002\u307e\u305f\u81ea\u7d44\u7e54\u304c\u540c\u30b0\u30eb\u30fc\u30d7\u306e\u30bf\u30fc\u30b2\u30c3\u30c8\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3068\u5224\u65ad\u3057\u305f\u5834\u5408\u3001\u3053\u308c\u3089\u306e\u30c6\u30af\u30cb\u30c3\u30af\u3084\u30c4\u30fc\u30eb\u306b\u30d7\u30ed\u30a2\u30af\u30c6\u30a3\u30d6\u306b\u5bfe\u5fdc\u3059\u308b\u3053\u3068\u3067\u9632\u5fa1\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u9ad8\u307e\u308a\u307e\u3059\u3002<\/p>\n<h2 class=\"p2\"><span style=\"font-size: 16pt;\"><b>\u307e\u3068\u3081<\/b><\/span><\/h2>\n<p class=\"p3\">\u300c\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u300d\u306b\u306f\u5927\u304d\u304f\u5206\u3051\u30662\u7a2e\u985e\u3042\u308a\u307e\u3059\u3002\u300c\u653b\u6483\u306e\u75d5\u8de1\u3068\u3057\u3066\u6b8b\u3055\u308c\u305f IoC \u3092\u4f7f\u3044\u3001\u81ea\u52d5\u7684\u306b\u691c\u51fa\u30fb\u9632\u5fa1\u3092\u884c\u3046\u3053\u3068\u300d\u3001\u305d\u3057\u3066\u300c\u653b\u6483\u8005\u306e\u3075\u308b\u307e\u3044\u306b\u95a2\u3059\u308b\u60c5\u5831\u3092\u6d3b\u7528\u3057\u3001\u30d7\u30ed\u30a2\u30af\u30c6\u30a3\u30d6\u306a\u5bfe\u7b56\u3092\u884c\u3046\u3053\u3068\u300d\u3067\u3059\u3002\u3055\u307e\u3056\u307e\u306a\u6a5f\u95a2\u304c\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u3092\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u4e0a\u3067\u516c\u958b\u3057\u3066\u3044\u307e\u3059\u306e\u3067\u3001\u3053\u308c\u3089\u3092\u6709\u52b9\u6d3b\u7528\u3057\u3066\u7d44\u7e54\u306e\u9632\u5fa1\u529b\u3092\u9ad8\u3081\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5206\u91ce\u3067\u300c\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u300d\u3068\u3044\u3046\u8a00\u8449\u304c\u4e00\u822c\u5316\u3057\u3066\u304d\u3066\u3044\u307e\u3059\u3002\u5b9f\u969b\u306e\u653b\u6483\u306b\u95a2\u3059\u308b\u8a73\u7d30\u306a\u60c5\u5831\u304c\u300c\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u300d\u3068\u3057\u3066\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d9\u30f3\u30c0\u3084 ISAC \u306a\u3069\u60c5\u5831\u5171\u6709\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u306b\u3088\u308a\u5171\u6709\u3055\u308c\u3066\u3044\u308b\u306e\u3067\u3059\u3002\u3053\u3046\u3057\u305f\u60c5\u5831\u3092\u9069\u5207\u306b\u6d3b\u7528\u3059\u308c\u3070\u3001\u8105\u5a01\u306b\u8fc5\u901f\u306b\u5bfe\u5fdc\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002\u305f\u3060\u3057\u3001\u3072\u3068\u304f\u3061\u306b\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u3068\u8a00\u3063\u3066\u3082\u305d\u306e\u5185\u5bb9\u3084\u5b9a\u7fa9\u3001\u5f62\u614b\u306f\u3055\u307e\u3056\u307e\u3067\u3059\u304b\u3089\u3001\u6b63\u3057\u304f\u7406\u89e3\u3057\u3066\u3001\u52b9\u679c\u7684\u306b\u6d3b\u7528\u3057\u306a\u3051\u308c\u3070\u306a\u308a\u307e\u305b\u3093\u3002 \u75db\u307f\u306e\u30d4\u30e9\u30df\u30c3\u30c9 2013 \u5e74\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5c02\u9580\u5bb6\u306e David J. Bianco \u306f\u653b\u6483\u8005\u304c\u6b8b\u3059\u75d5\u8de1 (Indicator\u3001\u30a4\u30f3\u30b8\u30b1\u30fc\u30bf) \u3092 6 \u7a2e\u985e\u306b\u5206\u985e\u3057\u307e\u3057\u305f\u3002\u3053\u308c\u3089\u306e\u75d5\u8de1\u306b\u9632\u5fa1\u5074\u304c\u5bfe\u7b56\u3057\u305f\u5834\u5408\u3001\u653b\u6483\u8005\u306b\u4e0e\u3048\u3089\u308c\u308b\u30c0\u30e1\u30fc\u30b8\u306f\u305d\u308c\u305e\u308c\u306b\u7570\u306a\u308a\u307e\u3059\u3002Bianco \u306f\u653b\u6483\u8005\u306b\u3068\u3063\u3066\u5bfe\u7b56\u3055\u308c\u3066\u3082\u75db\u307f\u306e\u5c0f\u3055\u3044\u3082\u306e\u304b\u3089\u5927\u304d\u3044\u3082\u306e\u306b\u4e26\u3079\u3001Pyramid of Pain\u00a0(\u75db\u307f\u306e\u30d4\u30e9\u30df\u30c3\u30c9)\u00a0\u3068\u3057\u3066\u516c\u958b\u3057\u307e\u3057\u305f (\u56f3 1)\u3002 \u3053\u306e\u30d4\u30e9\u30df\u30c3\u30c9\u306e\u4e0b\u90e8 3 \u5c64\u300c(\u30d5\u30a1\u30a4\u30eb) \u30cf\u30c3\u30b7\u30e5\u5024\u300d\u3001\u300cIP \u30a2\u30c9\u30ec\u30b9\u300d\u3001\u300c\u30c9\u30e1\u30a4\u30f3\u30cd\u30fc\u30e0\u300d\u306f IoC\u00a0 (Indicator of Compromise\u3001\u4fb5\u5bb3\u306e\u75d5\u8de1) \u3068\u3057\u3066\u3088\u304f\u5171\u6709\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u75d5\u8de1\u306f\u5b9f\u969b\u306e\u653b\u6483\u3067\u4f7f\u7528\u3055\u308c\u305f\u3082\u306e\u3067\u3042\u308b\u3053\u3068\u304c\u591a\u304f\u3001\u6a5f\u68b0\u7684\u306b\u51e6\u7406\u3057\u3084\u3059\u3044\u30c7\u30fc\u30bf\u69cb\u9020\u3092\u3082\u3064\u3053\u3068\u304b\u3089\u3001\u81ea\u52d5\u691c\u51fa\/\u9632\u5fa1\u306b\u5229\u7528\u3059\u308c\u3070\u5927\u304d\u306a\u52b9\u679c\u3092\u767a\u63ee\u3067\u304d\u307e\u3059\u3002\u3057\u304b\u3057\u3053\u308c\u3089 IoC \u306b\u542b\u307e\u308c\u308b\u5185\u5bb9\u306f\u653b\u6483\u8005\u304c\u7c21\u5358\u306b\u5909\u66f4\u3067\u304d\u308b\u306e\u3067\u3001\u9632\u5fa1\u5074\u304c\u4e0e\u3048\u3089\u308c\u308b\u300c\u75db\u307f\u300d\u306f\u3042\u307e\u308a\u5927\u304d\u304f\u3042\u308a\u307e\u305b\u3093\u3002 \u4e00\u65b9\u3001\u30d4\u30e9\u30df\u30c3\u30c9\u306e\u4e0a\u90e8 &hellip;<\/p>\n","protected":false},"author":403,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[6975,6958,6877],"tags":[8837],"coauthors":[4360],"class_list":["post-100099","post","type-post","status-publish","format-standard","hentry","category-secure-the-enterprise-2","category-secure-the-future-2","category-6877","tag-letter-from-cso"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/100099","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/users\/403"}],"replies":[{"embeddable":true,"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/comments?post=100099"}],"version-history":[{"count":5,"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/100099\/revisions"}],"predecessor-version":[{"id":100127,"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/100099\/revisions\/100127"}],"wp:attachment":[{"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/media?parent=100099"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/categories?post=100099"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/tags?post=100099"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/coauthors?post=100099"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}