{"version":"1.0","provider_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","provider_url":"https:\/\/fatihsoysal.com\/blog","author_name":"Fatih Soysal","author_url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/","title":"Bellek Adli Bili\u015fimi: Diske Dokunmayan Sald\u0131r\u0131lar\u0131n S\u0131rlar\u0131","type":"rich","width":600,"height":338,"html":"<blockquote class=\"wp-embedded-content\" data-secret=\"LhVvIEmpiR\"><a href=\"https:\/\/fatihsoysal.com\/blog\/bellek-adli-bilisimi-diske-dokunmayan-saldirilarin-sirlari\/\">Bellek Adli Bili\u015fimi: Diske Dokunmayan Sald\u0131r\u0131lar\u0131n S\u0131rlar\u0131<\/a><\/blockquote><iframe sandbox=\"allow-scripts\" security=\"restricted\" src=\"https:\/\/fatihsoysal.com\/blog\/bellek-adli-bilisimi-diske-dokunmayan-saldirilarin-sirlari\/embed\/#?secret=LhVvIEmpiR\" width=\"600\" height=\"338\" title=\"&#8220;Bellek Adli Bili\u015fimi: Diske Dokunmayan Sald\u0131r\u0131lar\u0131n S\u0131rlar\u0131&#8221; &#8212; Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" data-secret=\"LhVvIEmpiR\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" class=\"wp-embedded-content\"><\/iframe><script>\n\/*! This file is auto-generated *\/\n!function(d,l){\"use strict\";l.querySelector&&d.addEventListener&&\"undefined\"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!\/[^a-zA-Z0-9]\/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret=\"'+t.secret+'\"]'),o=l.querySelectorAll('blockquote[data-secret=\"'+t.secret+'\"]'),c=new RegExp(\"^https?:$\",\"i\"),i=0;i<o.length;i++)o[i].style.display=\"none\";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute(\"style\"),\"height\"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):\"link\"===t.message&&(r=new URL(s.getAttribute(\"src\")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener(\"message\",d.wp.receiveEmbedMessage,!1),l.addEventListener(\"DOMContentLoaded\",function(){for(var e,t,s=l.querySelectorAll(\"iframe.wp-embedded-content\"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute(\"data-secret\"))||(t=Math.random().toString(36).substring(2,12),e.src+=\"#?secret=\"+t,e.setAttribute(\"data-secret\",t)),e.contentWindow.postMessage({message:\"ready\",secret:t},\"*\")},!1)))}(window,document);\n<\/script>\n","description":"G\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k siber g\u00fcvenlik ortam\u0131nda, sald\u0131rganlar her ge\u00e7en g\u00fcn daha sofistike y\u00f6ntemler geli\u015ftirmekte. Eskiden sald\u0131r\u0131lar\u0131n \u00e7o\u011fu, sistemdeki bir dosyaya bula\u015fma veya kal\u0131c\u0131 bir de\u011fi\u015fiklik yapma \u00fczerine kuruluyken, art\u0131k \"diske dokunmayan\" veya \"fileless\" olarak tabir edilen tehditler giderek yayg\u0131nla\u015f\u0131yor. Peki, bu ne anlama geliyor? Basit\u00e7e ifade etmek gerekirse, bu t\u00fcr sald\u0131r\u0131lar sabit diske herhangi bir k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m b\u0131rakmadan, do\u011frudan sistemin belle\u011finde (RAM) \u00e7al\u0131\u015farak faaliyet g\u00f6sterirler. Bu durum, geleneksel disk tabanl\u0131 adli bili\u015fim tekniklerini ve antivir\u00fcs \u00e7\u00f6z\u00fcmlerini i\u015flevsiz hale getirebilir, \u00e7\u00fcnk\u00fc incelenecek fiziksel bir iz b\u0131rak\u0131lmaz. Siber g\u00fcvenlik uzmanlar\u0131 i\u00e7in bu durum b\u00fcy\u00fck bir zorluk te\u015fkil ederken, bellek adli bili\u015fimi (Memory Forensics) tam da bu noktada devreye girerek, sald\u0131rganlar\u0131n g\u00f6lgelerde kalan s\u0131rlar\u0131n\u0131 ayd\u0131nlatmak i\u00e7in kritik bir ara\u00e7 haline gelmi\u015ftir. Bu makale, bellek adli bili\u015fiminin temel prensiplerinden en ileri tekniklerine kadar uzanan geni\u015f bir yelpazeyi ele alarak, diske dokunmayan tehditlere kar\u015f\u0131 nas\u0131l m\u00fccadele edebilece\u011fimizi ad\u0131m ad\u0131m a\u00e7\u0131klayacakt\u0131r."}