{"version":"1.0","provider_name":"\u0645\u062f\u0648\u0646\u0629 Cyber DZ","provider_url":"https:\/\/cyberdz.dz\/blogs","author_name":"cyber","author_url":"https:\/\/cyberdz.dz\/blogs\/author\/cyber\/","title":"Points de contr\u00f4le Active Directory - \u0645\u062f\u0648\u0646\u0629 Cyber DZ","type":"rich","width":600,"height":338,"html":"<blockquote class=\"wp-embedded-content\" data-secret=\"xZSNHFn4ht\"><a href=\"https:\/\/cyberdz.dz\/blogs\/points-de-controle-active-directory\/\">Points de contr\u00f4le Active Directory<\/a><\/blockquote><iframe sandbox=\"allow-scripts\" security=\"restricted\" src=\"https:\/\/cyberdz.dz\/blogs\/points-de-controle-active-directory\/embed\/#?secret=xZSNHFn4ht\" width=\"600\" height=\"338\" title=\"&#8220;Points de contr\u00f4le Active Directory&#8221; &#8212; \u0645\u062f\u0648\u0646\u0629 Cyber DZ\" data-secret=\"xZSNHFn4ht\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" class=\"wp-embedded-content\"><\/iframe><script>\n\/*! This file is auto-generated *\/\n!function(d,l){\"use strict\";l.querySelector&&d.addEventListener&&\"undefined\"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!\/[^a-zA-Z0-9]\/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret=\"'+t.secret+'\"]'),o=l.querySelectorAll('blockquote[data-secret=\"'+t.secret+'\"]'),c=new RegExp(\"^https?:$\",\"i\"),i=0;i<o.length;i++)o[i].style.display=\"none\";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute(\"style\"),\"height\"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):\"link\"===t.message&&(r=new URL(s.getAttribute(\"src\")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener(\"message\",d.wp.receiveEmbedMessage,!1),l.addEventListener(\"DOMContentLoaded\",function(){for(var e,t,s=l.querySelectorAll(\"iframe.wp-embedded-content\"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute(\"data-secret\"))||(t=Math.random().toString(36).substring(2,12),e.src+=\"#?secret=\"+t,e.setAttribute(\"data-secret\",t)),e.contentWindow.postMessage({message:\"ready\",secret:t},\"*\")},!1)))}(window,document);\n\/\/# sourceURL=https:\/\/cyberdz.dz\/blogs\/wp-includes\/js\/wp-embed.min.js\n<\/script>\n","description":"\u00a0Points de contr\u00f4le Active Directory &nbsp; \u0645\u062d\u062a\u0648\u064a\u0627\u062a \u0627\u0644\u062a\u0646\u0628\u064a\u0647: &#8211; \u062c\u062f\u0648\u0644 \u0645\u0639\u0644\u0648\u0645\u0627\u062a &#8211; \u0627\u0644\u0645\u062e\u0627\u0637\u0631 &#8211; \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0645\u062b\u0623\u062b\u0631\u0629 &#8211; \u0645\u0644\u062e\u0635 \u062d\u0648\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 &#8211; \u0627\u0644\u062d\u0644\u0648\u0644 &#8211; \u0627\u0644\u0645\u0635\u0627\u062f\u0631 \u0645\u0639\u0644\u0648\u0645\u0627\u062a : \u0627\u0644\u0645\u0631\u062c\u0639 CERTFR-2020-DUR-001 \u0627\u0644\u0639\u0646\u0648\u0627\u0646 Points de contr\u00f4le Active Directory \u062a\u0627\u0631\u064a\u062e \u0627\u0644\u0627\u0635\u062f\u0627\u0631 \u0627\u0644\u0623\u0648\u0644 02 juin 2020 \u062a\u0627\u0631\u064a\u062e \u0623\u062e\u0631 \u062a\u062d\u062f\u064a\u062b 16 novembre 2022 \u0627\u0644\u0645\u0635\u0627\u062f\u0631 \u0627\u0644\u0645\u0631\u0641\u0642\u0627\u062a Aucune(s) \u0627\u0644\u0645\u062e\u0627\u0637\u0631: 1 L\u2019annuaire Active Directory pr\u00e9sente des probl\u00e8mes critiques de configuration qui mettent en danger imm\u00e9diat l\u2019ensemble des ressources h\u00e9berg\u00e9es. Des actions correctrices sont \u00e0 prendre dans les plus brefs d\u00e9lais ; 2 L\u2019annuaire Active Directory pr\u00e9sente des lacunes de configuration et de gestion suffisantes pour mettre en danger l\u2019ensemble des ressources h\u00e9berg\u00e9es. Des actions correctrices sont \u00e0 prendre \u00e0 court terme ; 3 L\u2019annuaire Active Directory poss\u00e8de un niveau de s\u00e9curit\u00e9 basique non affaibli depuis son installation ; 4 L\u2019annuaire Active Directory dispose d\u2019un bon niveau de s\u00e9curit\u00e9 ; 5 L\u2019annuaire Active Directory dispose d\u2019un niveau de s\u00e9curit\u00e9 \u00e0 l\u2019\u00e9tat de l\u2019art. \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0645\u062b\u0623\u062b\u0631\u0629: Titre du point de contr\u00f4le et niveau associ\u00e9 ; Identifiant du point de contr\u00f4le ; Description de la vuln\u00e9rabilit\u00e9 ou de l\u2019affaiblissement de s\u00e9curit\u00e9 induit que l\u2019on cherche \u00e0 caract\u00e9riser par le point de contr\u00f4le ; Recommandation \u00e0 appliquer pour valider le point de contr\u00f4le et durcir la configuration de l\u2019annuaire. \u0645\u0644\u062e\u0635 \u0627\u0644\u062b\u063a\u0631\u0629: L\u2019annuaire Active Directory, centre n\u00e9vralgique de la s\u00e9curit\u00e9 des syst\u00e8mes d\u2019information Microsoft, est un \u00e9l\u00e9ment critique permettant la gestion centralis\u00e9e de comptes, de ressources et de permissions. L\u2019obtention de privil\u00e8ges \u00e9lev\u00e9s sur cet annuaire entra\u00eene une prise de contr\u00f4le instantan\u00e9e et compl\u00e8te de toutes les ressources ainsi administr\u00e9es. \u0627\u0644\u062d\u0644\u0648\u0644 \u0645\u0646 \u0647\u062f\u0647 \u0627\u0644\u062b\u063a\u0631\u0629: L\u2019analyse des modes op\u00e9ratoires des attaques r\u00e9centes met en \u00e9vidence une recrudescence du ciblage des annuaires Active Directory, compte tenu de leur r\u00f4le de pierre angulaire de la plupart des syst\u00e8mes d\u2019information. En effet, l\u2019attaquant ayant obtenu des droits \u00e9lev\u00e9s sur l\u2019annuaire peut alors d\u00e9ployer une charge malveillante sur l\u2019ensemble du syst\u00e8me d\u2019information, notamment par GPO ou en utilisant des connexions directes (psexec, wmiexec). Par cons\u00e9quent, le faible niveau de s\u00e9curit\u00e9 des annuaires met en danger les syst\u00e8mes d\u2019information dans leur globalit\u00e9 et fait porter un risque syst\u00e9mique aux organisations. \u0627\u0644\u0645\u0635\u0627\u062f\u0631: &nbsp;","thumbnail_url":"https:\/\/i0.wp.com\/cyberdz.dz\/blogs\/wp-content\/uploads\/sites\/2\/2023\/07\/security-Logo-Design.png?fit=200%2C200&ssl=1","thumbnail_width":200,"thumbnail_height":200}