| CARVIEW |
Trellix??15?N?O???\??Python???W???[???Ǝ㐫?ɂ??Ė?58?????|?W?g?????A???܉??????݂???H?F?Z?L?????e?B?E?A?f?B?b?V???i???^?C???i48?j
McAfee?̃G???^?[?v???C?Y???Ƃ?FireEye?̓????Őݗ????ꂽ?V?????Z?L?????e?B???Trellix??2022?N9??28???A?J???t?@?????X?????X?x?K?X?ŊJ?Â??A?ꕔ???I?????C???Ŕz?M?B???T?[?`????Trellix Advanced Research Center?iARC?j?̐ݗ??\?????BARC??15?N?O?Ɍ??\????Python??tarfile???W???[???ɑ??݂???p?X?g???o?[?T???Ǝ㐫?ɂ??Ė?58???̌??J???|?W?g?????????Ƃ???A???Ȃ????݂??銄???͍??????̂??????Ƃ????B
???̋L???͉??????ł??B????o?^?i?????j????ƑS?Ă????????????܂??B
?@?????T???E?F?A?ɂ???Q???}?????A?Ǝ?i???????Ⴍ?j????˂????s???A?N?Z?X?????₽?Ȃ????A???Ăɔ?ׂ?Ɗ?ƃg?b?v???Z?L?????e?B??̕K?v????F??????悤?ɂȂ??Ă????B???{??ēȒ?????̒??ӊ??N?A???邢?̓O???[?v??Ƃ????悩??̗v???ŁA?Z?L?????e?B??Ɏ??g?܂???Ȃ??Ƃ????w?i?????邾?낤?B
?@???????x?͕ʂ̉ۑ肪???サ?Ă????B??Q??h???A???Ƃւ̉e????}???邽?߂ɂ??܂??܂Ȑ??i???????̂͂??????A?????IT?S???ҁA?Z?L?????e?B?S???҂̕??ׂ????債?Ă???̂??B????͊C?̌??????̕č??ł????l?̂悤???B
?@?č??̃Z?L?????e?B??ƁATrellix??2022?N9??28???ɃJ???t?@?????X?????X?x?K?X?ŊJ?Â??A?ꕔ???I?????C???Ŕz?M?????B???Ђ͓Ǝ??̒??????ʂ܂??Ȃ???A?Z?L?????e?B?^?p???ׂ̑???Ƃ????ۑ?ɂǂ????g?ނׂ????̎w?j???Љ???B
?U???̑????O?ɔ敾????Z?L?????e?B?`?[??
?@Trellix?́AMcAfee?̃G???^?[?v???C?Y???Ƃ?FireEye?̓????Őݗ????ꂽ?V?????Z?L?????e?B??Ƃ??B???Ђ̎??Y?????A?@?B?w?K?iML?j?Z?p?⎩??????g?ݍ??킹??eXtended Detection and Response?iXDR?j???i?????Ɏ??Ƃ?W?J???Ă???B
?@????CEO?̃u???C?A???E?p???}???͊?u???̒??ŁA???݂̃Z?L?????e?B?̓?????4???????B
?@1?́A???Ƃ????Ԋ?Ƃ??^?[?Q?b?g?ɂ????T?C?o?[?U????W?J???Ă??邱?Ƃ??B???̎?i?Ƃ??ĕp?ɂɗp?????Ă???̂??A?U???̓??????B???i??????j???₷???A?????ɂ킽???Đ????\?ȁu?T?v???C?`?F?[???U???v???Ƃ????B?uSolarwinds?̈ꌏ?????????ʂ?A???Ƃ??ʂ̍??Ƃ??U?????邾???łȂ??A???Ԋ?Ƃ??U??????悤?ɂȂ??Ă???v?i?p???}???j
?@2?ڂ́A?U???Ώ۔͈́u?A?^?b?N?T?[?t?F?X?v?̊g?傾?B???{?ł??ߔN??????X???????A?d?q???[???ɂ??U???ɉ????ASMS??p?????u?X?~?b?V???O?v?????????Ă???B
?@3?ڂ́A?ȑO???瑶?݂????W?I?^?U???̑???ŁA???Ƀ????T???E?F?A???W?I?^?U???̎?@????????A?????E??????Ƃ??????ƂɎ???܂ŁA?????̖??Ԋ?Ƃɐr??ȑ??Q??^???Ă???B
?@?????āA?????̋A???ł????邪?A4?ڂ̃|?C???g???u?Z?L?????e?B?`?[???̔敾?v???B?????ł????Z?L?????e?B?Ɋւ???m???????????l?ނ͕s?????Ă???A?V???ɃZ?L?????e?B?S???҂??ق??̂??A?]?E?????ɎГ??ɂƂǂ܂??Ă??炤?̂?????ƂȂ?A?M???M???̉^?p?????????Ă???P?[?X???????B?u?????ɁA????????????Ȃ??`?ł??܂??܂ȃZ?L?????e?B?@?킩?瑽???̃A???[?g???͂??A?Z?L?????e?B?`?[???͔R???s???Ă????Ԃ??v?ƃp???}???͎w?E?????B
?@Trellix????9000?l?̃Z?L?????e?B???Ƃ?Ώۂɂ??????????ʂ?????A???????????Ԃ͗??t?????Ă???B?҂̂???89???́A?u???݂̃Z?L?????e?B?̓T?C????????Ă???v?A?܂?u?o???o???ȃc?[????e?N?m???W?[?????????Ă???A????????Ă??Ȃ???ԁv?Ɖ????Ƃ????B
?@?p???}????Trellix??CEO?ɏA?C???Ă???A???܂??܂Ȍڋq?ƑΘb???Ă????B???B?̂????Ƃ?CISO?i?ō????Z?L?????e?B?ӔC?ҁj?́u76??ނ̃Z?L?????e?B?c?[?????^?p???Ă???A???̂???30??ނ͏d?????Ă???B?܂?A?????悤?Ȃ??Ƃ?ʂ̒S???҂??ʂ̃c?[???ōs???Ă???A?\?Z?ʂɂ??Ă????Ԃ??B?m???ɃX?^?b?t?͈ꐶ?????????Ă???Ă??邪?A?X?}?[?g?ȏ?Ԃł͂Ȃ??v?Ɩ{????R?炵?????????B
?@???ăy?v?V?R??CISO?߂??o????????p???}???́A???????????͂悭?????ł???Ƃ?????ŁA??w??????̃v???b?V???[?ƋƖ??ɖZ?E????A?S???܂ꂩ???Ă???Z?L?????e?B?S???҂ɑ??A?uXDR?Ƃ????V???v???ȃA?[?L?e?N?`??????Ė??????????A?Z?L?????e?B?I?y???[?V?????iSecOps?j???v?V????v?Ƃ????B
?@?u?????Z?L?????e?B?S???҂???́A???݂?SecOps?́A?R?X?g???????銄?ɂ͌??ʂ??オ?炸?A??????????????Ƃ????s???????ɂ???B?Ȃ??Ȃ炱??܂ł?SecOps?ɂ́AML???Ȃ????A?K?Ȉӎv????ɕK?v?ȃC???T?C?g???A?????????Ȃ????炾?BTrellix?͂??̏?Ԃ?ς??Ă????????v?i?p???}???j
?@???̈?Ƃ???Trellix?́A???A???^?C???ȋ??ЃC???e???W?F???X??IoC?iIndicator of Compromise?j??????ՂƂ??āATrellix Advanced Research Center?iARC?j?̐ݗ??\?????B???S???K?͂̃Z?L?????e?B?A?i???X?g??i???A?U????@??A?N?^?[?̓????????ATrellix??XDR???i?ɔ??f????B
?@?n???P?[???ɔ?????ɂ́A?C?ۏ??????Đi?H??\??????̂??d?v?Ȃ̂Ɠ????悤?ɁA?T?C?o?[?U???ɂ????Ă͓G??m??A?ǂ̂悤?ɍU?????Ă??邩??m?邱?Ƃ??d?v???B?ŐV?̋??Џ??Ƃ??????瓾????R???e?L?X?g???????ď??߂āA???Ђɑ??鏀???𐮂??A?????Ƃ????Ƃ??ɑf?????Ή??ł???B
???傷??T?v???C?`?F?[???̃??X?N?A15?N?O?̐Ǝ㐫?????Ȃ??e??
?@???T?[?`?????ARC?ł͊??ɁAWindows??eBPF?iextended Berkeley Packet Filter?j?????p?????o?b?N?h?A??A?uREvil?v?????T???E?F?A???\?z?????A?t?B???G?C?g?Ԃ̎??ԂȂNJ???̒m?????u???O?Ō??\???鑼?A?@???s?@?ւƂ????͂??A?e?C?N?_?E???ɖ𗧂ĂĂ?????Ă???B
?@???T?[?`???ʂ̈???APython??tarfile???W???[???ɑ??݂???p?X?g???o?[?T???̐Ǝ㐫?iCVE-2007-4559?j?Ɋւ??钲?????ʂ??B????́ACVE?ԍ????????ʂ?15?N???O?Ɍ??\???ꂽ?Ǝ㐫?????A?u15?N?O?̂??̐Ǝ㐫???A???Ȃ??e?????y?ڂ??????Ă???v?ƁATrellix?̃v?????V?p???G???W?j?A???Ǝ㐫???T?[?`?f?B???N?^?[?A?_?O?E?}?b?L?[???͏q?ׂ??B
?@???̐Ǝ㐫?̊댯?x?́u??v?ɕ??ނ??????̂ɂ????Ȃ??B?u???????APython tarfile???W???[???̓T?v???C?`?F?[???̈ꕔ?ƂȂ??Ă???A?????ȃt???[?????[?N??ʂ??đ?????Web?A?v???P?[?V?????ɑ傫?ȃC???p?N?g??^???鋰?ꂪ????v?i?}?b?L?[???j?Ƃ????B
?@??????ARC???A??58???̌??J???|?W?g????ΏۂɐƎ??tarfile???W???[???̗L?????????Ƃ???A?S?̂?61???ɓ??????35???????Y?????邱?Ƃ??????????B?u??????????́A?I?[?v???\?[?X?\?t?g?E?F?A?̃v???W?F?N?g?݂̂?Ώۂɂ??????̂ŁA?N???[?Y?h?ȃ\?t?g?E?F?A?ɂ??e????^????\????????B????ŁA???̐????͍U???҂ɂƂ??Ă͏\?????͓I?ȃI?b?Y???v?ƃ}?b?L?[???͌x??????B
?@????܂?ARC?ł́A?A?v???P?[?V??????CVE-2007-4559?̐Ǝ㐫?????݂??邩?ǂ??????J???҂??`?F?b?N?ł???c?[?????J?????AGitHub?Ō??J???Ă????B
?@????́A?????܂ŃT?v???C?`?F?[???U???̈??ɂ????Ȃ??B?}?b?L?[???́uIBM???T?[?`?̃??|?[?g?ɂ??A?U????20?????T?v???C?`?F?[???ɋN?????A??Q?z??446???h???ɏ??Ƃ̐?????????B???????A?T?v???C?`?F?[???U???ł͐N?Q?ɋC?t???܂ŕ??ς?235?????̊??Ԃ???????A???̊ԁA?U???҂??l?b?g???[?N??????????̂????????ƂɂȂ?v?ƁA?\?t?g?E?F?A?T?v???C?`?F?[???ɐ??ރ??X?N???w?E?????B
?@?????Ă??炽?߂āA???????????ǂ̂悤?ȃ??C?u??????R???|?[?l???g?𗘗p???Ă??邩??c?????A?K?ɗ??p?A?Ǘ????Ă??????Ƃ??d?v???Ƃ????B
ML?Z?p?????A?ŐV?̋??Џ??f????XDR?Ŗ??̉?????
?@Trellix XDR?́AMcAfee??FireEye????p?????????i?Q???x?[?X?ɁA?G???h?|?C???g?ɉ????A?l?b?g???[?N?A?N???E?h?A???[???Ȃǂ???f?[?^?????W???AML????g???Ď????I?ɉ?͂??????A?Z?L?????e?B?^?p???x??????B
?@???i?ō??ӔC?҂߂?A?p???i?E???[?T?????́A?u??葽???̍U???ƁA?e?????[?N?????܂??đ?????????f?o?C?X?A?L????A?^?b?N?T?[?t?F?X?Ƃ??????v??????A???݂̃Z?L?????e?B?S???҂͕??G???Ɏ?芪????Ă???BTrellix?͂???܂ł̃|?C???g?\?????[?V?????ɐV???ȃ??C???[??????1?lj?????̂ł͂Ȃ??A???????ꂽ?G???^?[?v???C?Y?v???b?g?t?H?[???????v?Əq?ׂ??B
?@Trellix XDR?̓????̈?́AML?Z?p????g???đΉ??A?C???܂ł??????????A?l??s???̒??ł??^?p?ł???悤?ɂ??邱?Ƃ??Ƃ????B????ɕ??L???p?[?g?i?[?ƘA?g???A???܂??܂ȃ??\?[?X????f?[?^?????W???A1?̓??????ꂽ?R???\?[????ʂ??ď?c???ł???悤?Ɏx??????Ƃ????B
?@Trellix??XDR??ARC?̃i???b?W??g?ݍ??킹?邱?Ƃɂ???āA?u?G???ǂ????痈?āA?????^?[?Q?b?g?ɂ??Ă??邩?v?Ƃ??????R???e?L?X?g?܂??Ȃ???V?X?e???????S?i????낤?j?????A???悢???????ł???B????ɁA?u?ǂ̃}?V???????????????v?u?????u???b?N???????v?Ƃ??????????????A???m???邾???łȂ??A?v???C?u?b?N??p???ĕ??????߂⒲???܂ł????????ł???悤?ɂȂ?Ƃ????B
?@?u?v???b?g?t?H?[???ɃR???e?L?X?g?????????A?????????邱?ƂŁA???X?|???X?ɗv???鎞?Ԃ?Z?k???A?Z?L?????e?B?^?p?ۂ????????ł???B?܂?A??菭?Ȃ????\?[?X?ł?葽???̂??Ƃ?B???ł??A?܂???ߐ??̑??łȂ??Ĕ??h?~?Ɍ??????T?C?N???????Ƃ??ł???v?i?p???}???j
?@???Ђ?Trellix XDR???A?X?^?e?B?b?N?ȃc?[???ł͂Ȃ??A??Ƃ??ꂼ??̊??⎖??ɍ??킹?ăJ?X?^?}?C?Y??p?[?\?i???C?Y???\?ȃv???b?g?t?H?[???Ƃ??Ē???B???m??Ή??ɂƂǂ܂炸?????t?F?[?Y?܂Ŏ????????邱?ƂŁA?u?K???I???_??ŁA?w?K????????A?w???????Z?L?????e?B?x?Ƃ????R???Z?v?g??????????v?Ƃ????B
?֘A?L??
OSS?̃T?v???C?`?F?[???A?Ǝ㐫?ɉۑ肠??
?I?[?v???\?[?X?\?t?g?E?F?A?͋????A???v?̂ǂ?????啝?ȐL?т??????Ă???B???????Ǝ㐫?̊Ǘ??Ɏ?_??????B?\?t?g?E?F?A?T?v???C?`?F?[???Ǘ??v???b?g?t?H?[??????|????Sonatype?????\?????N???????̕??ɂ??A?l?C?̍????v???W?F?N?g?ł?葽???̐Ǝ㐫?????????Ă???B
?č??ł͊??ɕW?????̗???A???{??Ƃ??Ή??𔗂???uSBOM?v?Ƃ?
?uSBOM?v???傫?Ȓ??ڂ𗁂тĂ???B????????SBOM?Ƃ͉??Ȃ̂??낤???B?Ȃ??č??͑哝?̗߂ł???????グ???̂??B???{??Ƃ͑Ή?????K?v??????̂??B?ǂ??Ή???????????B?????ł́AOSS?̃T?v???C?`?F?[???Ǘ??Ɋւ???A?ڂ?3??ڂƂ??āASBOM?????????B
BPF?̃A?[?L?e?N?`???A???߃Z?b?g?AcBPF??eBPF?̈Ⴂ
Linux?ɂ????闘?p???}???ɑ????Ă???uBerkeley Packet Filter?iBPF?j?v?ɂ??āA??b???牞?p?܂ŕ??L???Љ??A?ځB????́ALinux?ŗp??????BPF?̃A?[?L?e?N?`???Ȃǂ????????B
Copyright © ITmedia, Inc. All Rights Reserved.
?A?C?e?B???f?B?A????̂??m?点
??IT eBook
???ڂ̃e?[?}
?ҏW??????̂??m?点
RSS?ɂ???
?A?C?e?B???f?B?AID?ɂ???
???[???}?K?W???o?^
??IT?̃??[???}?K?W???́A ???????A???ׂĖ????ł??B???Ѓ??[???}?K?W???????w?ǂ????????B
ITmedia?̓A?C?e?B???f?B?A??????Ђ̓o?^???W?ł??B
???f?B?A?ꗗ | ????SNS | ?L???ē? | ???₢???킹 | ?v???C?o?V?[?|???V?[ | RSS | ?^?c??? | ?̗p??? | ??????