ã¢ãžã¢å€ªå¹³æŽå°åã«ç¹åããè åšã€ã³ããªãžã§ã³ã¹ã®ãããã€ããŒã§ããTeamT5ã¯ãåŒç€ŸThreatVisionãœãªã¥ãŒã·ã§ã³ãšThreatQuotientã®ThreatQãã©ãããã©ãŒã ã®çµ±åãçºè¡šããŸããã ããã«ãããã»ãã¥ãªãã£ããŒã ã¯ã¢ãžã¢å€ªå¹³æŽå°åãç¹ã«äžåœãåæé®®ããããã ããã®ã»ãã¥ãªãã£è åšããã詳ããææ¡ã§ããããã«ãªããŸãã
ã¢ãžã¢å€ªå¹³æŽå°åã®è åšã€ã³ããªãžã§ã³ã¹ã«å¯Ÿããç¬èªã®èŠç¹
TeamT5ã¯ã¢ãžã¢å€ªå¹³æŽå°åãäžå¿ãšããè åšã€ã³ããªãžã§ã³ã¹ã«ãããæåãã©ã³ãã§ããåŒç€Ÿã®ç¹åŸŽã¯ä»¥äžãšãªããŸãïŒ
ã¢ãžã¢å€ªå¹³æŽå°åã«ãããæ»æã®æŠè¡ãæè¡ãæé ïŒTTPïŒã«é¢ããæŽå¯ïŒTeamT5ã¯ãã¢ãžã¢å€ªå¹³æŽå°åã«ãããæ»æã®TTPãšéèŠãªãµã€ããŒããªã·ãŒã«é¢ããå æ¬çãªæŽå¯ããæäŸããäŒæ¥ãçµç¹ããåœå°åããçºçããé²åãç¶ãããµã€ããŒè åšã«ã€ããŠçè§£ã§ãããããæ¯æŽããããŸãã
ã¢ãžã¢å€ªå¹³æŽå°åã«ãããæç¶çæšçåæ»æ(APT)ã®çè§£ãšå¯èŠæ§ã®åäžïŒAPTè åšã°ã«ãŒããšãã®æŽ»åã«é¢ãã詳现ãªèª¿æ»ã¯ãTeamT5ã®äžæ žçãªå°éã§ãããäŒæ¥ãçµç¹ãè åšãäºåã«è»œæžã§ãããããæ¯æŽããããŸãã
éèŠãªè匱æ§ã®æè¡çåæïŒTeamT5ã«ããè匱æ§ã®æè¡çåæã¯ãå©çšç¶æ³ãšåœ±é¿ã®è©äŸ¡ãè¡ããŸããæŽã«ThreatQãã©ãããã©ãŒã ãšç©æ¥µçã«çµ±åããããšã§ãã»ãã¥ãªãã£ããŒã ã¯é²åŸ¡ã«éçšã§ããå®çšçãªã€ã³ããªãžã§ã³ã¹ããæäŸããäŒæ¥ã®ãµã€ããŒã¬ãžãªãšã³ã¹ã®åŒ·åããæ¯æŽããããŸãã
ThreatQã®äœ¿çšã«ããã»ãã¥ãªãã£ãªãã¬ãŒã·ã§ã³ã®åäž
ThreatQuotientã®ThreatQãã©ãããã©ãŒã ã¯ãã»ãã¥ãªãã£ãªãã¬ãŒã·ã§ã³ã«é©åœããããããããå¹ççã广çãªãªãã¬ãŒã·ã§ã³ãå®çŸããŸããåœãã©ãããã©ãŒã ã¯ä»¥äžããæäŸããããŸãïŒ
ã»ãã¥ãªãã£æè¡ã®çµ±åïŒThreatQã¯ãåã»ãã¥ãªãã£æè¡ãçµ±äžãããã€ã³ãã©ã¹ãã©ã¯ãã£ã«ã·ãŒã ã¬ã¹ã«çµ±åãããããã¯ãŒã¢ãããããéçšãšã¯ãŒã¯ãããŒãèªååããŸãã
ã€ã³ã·ãã³ãã®ç¶ç¶çãªåªå é äœä»ãïŒåœãã©ãããã©ãŒã ã«ãããã»ãã¥ãªãã£ããŒã ãäŒæ¥ãçµç¹ã®ãªã¹ã¯ã®ç¶æ³ãšåªå é äœã«åºã¥ããæãé¢é£æ§ã®é«ããµã€ããŒè åšã«ãªãœãŒã¹ãéäžã§ããããã«ãªããŸãã
å æ¬çãªè åšã€ã³ããªãžã§ã³ã¹ã®æŽ»çšïŒTeamT5ã®è åšã€ã³ããªãžã§ã³ã¹ã¯ãThreatQãéããŠååŸã§ãããã©ãããã©ãŒã ããã¬ããŒããæªæã®ããæ»æè ãããã°ã©ã ããµã³ãã«ãã¬ã€ãä»ããªã³ã¯ãªã©ãå©çšã§ããã®ã§ããŠãŒã¶ãŒãšã¯ã¹ããªãšã³ã¹ãåäžãããããšãã§ããŸãã
åæ¹ãã©ãããã©ãŒã ã®çµ±åã«ãããµããŒã
TeamT5 - ThreatVisionã®è åšã€ã³ããªãžã§ã³ã¹ThreatQãã©ãããã©ãŒã ã¯çµ±åã«ããã以äžã®ãµããŒãããæäŸãããŸãïŒ
APT IOCïŒãŠãŒã¶ãŒã¯APT IOCïŒæç¶çæšçåæ»æäŸµå®³ææšïŒã掻çšããŠæ»æã鲿¢ãã»ãã¥ãªãã£é²åŸ¡ã®ç¯å²ãæ¡å€§ããããšãå¯èœã§ãããã«è¿ éãã€å¹æçãªè åšè©äŸ¡ãè¡ããŸãã
ãªã¢ã«ã¿ã€ã ã®ã€ã³ããªãžã§ã³ã¹ïŒåäžã®APTã€ã³ã·ãã³ãã®æŠèŠãšæè¡çåæããæäŸããŸããã¢ã¯ã»ã¹ããããšã§å³åº§ã«ã¬ããŒããååŸã§ããååãªæ å ±ã«åºã¥ããã»ãã¥ãªãã£å¯Ÿçãå®è¡ã§ããŸãã
è匱æ§ã¬ããŒãïŒè匱æ§ã®æè¡çåæãå©çšç¶æ³ãšåœ±é¿ã®è©äŸ¡ãèšèŒãããŠãããã»ãã¥ãªãã£ããŒã ã«é²åŸ¡åŒ·åã®ããã®ãã€ã¬ãã«ã§å®çšçãªã€ã³ããªãžã§ã³ã¹ããæäŸããŸãã
ThreatQuotientã«ã€ããŠ
ThreatQuotientã¯ãåããŒã¿ãœãŒã¹ãããŒã«ãããŒã ãçµ±åããè åšã®æ€ç¥ãšå¯Ÿå¿ãå éããããšã§ãã»ãã¥ãªãã£éçšã®æ¹åãè¡ã£ãŠããŸããThreatQuotientã®ããŒã¿é§ååã»ãã¥ãªãã£ãªãã¬ãŒã·ã§ã³ãã©ãããã©ãŒã ã¯ãæ¢åã®ããã»ã¹ããã¯ãããžãŒãçµ±äžãããã¯ãŒã¯ã¹ããŒã¹ã«çµ±åããããšã§ãã»ãã¥ãªãã£ã€ã³ã·ãã³ãã®åªå é äœä»ããèªååãååã«ãã£ãŠãéããããªãœãŒã¹ã®æå€§æŽ»çšãæ¯æŽããæææ±ºå®ã®éäžããæ¯æŽããŠããŸããããã«ããããã€ãºã®åæžãåªå 床ã®é«ãè åšã®å®çŸ©ã¥ãã粟床ã®é«ãããŒã¿ã«ããããã»ã¹ã®èªååãå¯èœã«ãªããŸãã
æ¥çããªãŒãããThreatQuotientã®ããŒã¿ç®¡çãååãèªååæ©èœã¯ãã€ã³ã·ãã³ã察å¿ãè åšæ€çŽ¢ãã¹ãã¢ãã£ãã·ã³ã°ãã¢ã©ãŒãåé¡ãè匱æ§ã®åªå é äœä»ããè åšã€ã³ããªãžã§ã³ã¹ãã©ãããã©ãŒã ãªã©ãè€æ°ã®ãŠãŒã¹ã±ãŒã¹ããµããŒãããŠããŸãã
ThreatQuotient瀟ã¯ãç±³åœããŒãžãã¢å·åéšã«æ¬ç€Ÿã眮ãããšãŒããããäžæ±ãåã¢ããªã«ãã¢ãžã¢å€ªå¹³æŽå°åã§åœéçãªäºæ¥ãå±éããŠããŸãã詳现ã«ã€ããŠã¯ãå ¬åŒãµã€ããã芧ãã ããã https://www.threatq.com/
TeamT5ã«ã€ããŠ
TeamT5ã¯ãã¢ãžã¢å€ªå¹³æŽå°åã®ãµã€ããŒæ»æè ã«é¢ããæ¯é¡ãªãç¥èãæã€ããããã¯ã©ã¹ã®ãµã€ããŒè åšã¢ããªã¹ãã§æ§æãããŠããŸããå°ççã»æåçãªåŒ·ã¿ã掻ãããäžçäžã®ã客æ§ã«ãµã€ããŒè åšã¬ããŒããšè åšãã³ãã£ã³ã°ããŒã«ããæäŸããŠããŸãã
TeamT5ãšThreatQuotient ThreatQãã©ãããã©ãŒã ã®çµ±åããã³ææ°ã¢ããããŒãã«é¢ãã詳现ã¯ã以äžãã芧ãã ããã ThreatVisionã¯ThreatQ Marketplaceã®ããŒãžã«ãããŸãã