{"id":34721,"date":"2025-11-21T06:31:15","date_gmt":"2025-11-21T03:31:15","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/"},"modified":"2025-11-21T06:31:15","modified_gmt":"2025-11-21T03:31:15","slug":"mitre-attck-siber-guvenlikte-neden-vazgecilmez","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/","title":{"rendered":"MITRE ATT&#038;CK: Siber G\u00fcvenlikte Neden Vazge\u00e7ilmez?"},"content":{"rendered":"<style>\n    body {\n        font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;\n        line-height: 1.6;\n        color: #333;\n        max-width: 900px;\n        margin: 0 auto;\n        padding: 20px;\n        background-color: #f9f9f9;\n    }\n    h2, h3 {\n        color: #0056b3;\n        border-bottom: 2px solid #eee;\n        padding-bottom: 10px;\n        margin-top: 30px;\n    }\n    h3 {\n        color: #007bff;\n        border-bottom: 1px solid #eee;\n        padding-bottom: 5px;\n        margin-top: 20px;\n    }\n    p {\n        margin-bottom: 15px;\n        text-align: justify;\n    }\n    ul {\n        list-style-type: disc;\n        margin-left: 20px;\n        margin-bottom: 15px;\n    }\n    ol {\n        list-style-type: decimal;\n        margin-left: 20px;\n        margin-bottom: 15px;\n    }\n    pre {\n        background-color: #e9ecef;\n        padding: 15px;\n        border-radius: 5px;\n        overflow-x: auto;\n        margin-bottom: 20px;\n    }\n    code {\n        font-family: 'Consolas', 'Monaco', monospace;\n        color: #d63384;\n    }\n    pre code {\n        color: #000;\n    }\n    table {\n        width: 100%;\n        border-collapse: collapse;\n        margin-bottom: 20px;\n    }\n    th, td {\n        border: 1px solid #ddd;\n        padding: 8px;\n        text-align: left;\n    }\n    th {\n        background-color: #f2f2f2;\n    }\n    .expert-tip {\n        background-color: #e0f7fa;\n        border-left: 5px solid #00bcd4;\n        padding: 15px;\n        margin: 20px 0;\n        border-radius: 4px;\n        font-style: italic;\n        color: #007987;\n    }\n    .case-study {\n        background-color: #f8f9fa;\n        border: 1px solid #dee2e6;\n        padding: 20px;\n        margin: 25px 0;\n        border-radius: 6px;\n    }\n    .case-study h3 {\n        color: #212529;\n        margin-top: 0;\n    }<\/p>\n<p>    \/* Mobil uyumluluk i\u00e7in medya sorgular\u0131 *\/\n    @media (max-width: 768px) {\n        body {\n            padding: 15px;\n        }\n        h2 {\n            font-size: 1.6em;\n        }\n        h3 {\n            font-size: 1.3em;\n        }\n        table {\n            display: block;\n            overflow-x: auto;\n            white-space: nowrap;\n        }\n        table thead, table tbody, table th, table td, table tr {\n            display: block;\n        }\n        table tr {\n            margin-bottom: 10px;\n            border: 1px solid #dee2e6;\n            display: flex;\n            flex-wrap: wrap;\n        }\n        table td {\n            border: none;\n            border-bottom: 1px solid #eee;\n            position: relative;\n            padding-left: 50%;\n            text-align: right;\n            width: 100%;\n        }\n        table td::before {\n            content: attr(data-label);\n            position: absolute;\n            left: 0;\n            width: 45%;\n            padding-left: 10px;\n            font-weight: bold;\n            text-align: left;\n        }\n    }\n    @media (max-width: 480px) {\n        body {\n            font-size: 0.9em;\n        }\n        h2 {\n            font-size: 1.4em;\n        }\n        h3 {\n            font-size: 1.1em;\n        }\n    }\n<\/style>\n<p>G\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k siber g\u00fcvenlik ortam\u0131nda, tehditler her zamankinden daha sofistike ve s\u00fcrekli evrim ge\u00e7iriyor. Peki, geleneksel g\u00fcvenlik yakla\u015f\u0131mlar\u0131 siber sald\u0131r\u0131lar\u0131 neden durdurmakta zorlan\u0131yor ve modern savunmac\u0131lar bu dinamik tehditlere kar\u015f\u0131 nas\u0131l bir ad\u0131m \u00f6ne ge\u00e7ebilir? Bu yaz\u0131m\u0131zda, d\u00fcnya genelinde siber g\u00fcvenlik uzmanlar\u0131n\u0131n vazge\u00e7ilmezi haline gelen MITRE ATT&#038;CK Framework&#8217;\u00fcn derinliklerine inecek, ger\u00e7ek d\u00fcnyadaki etkinli\u011fini ve kurulu\u015flar\u0131n savunma yeteneklerini nas\u0131l radikal bir \u015fekilde d\u00f6n\u00fc\u015ft\u00fcrd\u00fc\u011f\u00fcn\u00fc ke\u015ffedece\u011fiz. Siz de siber g\u00fcvenlik stratejinizi bir \u00fcst seviyeye ta\u015f\u0131mak istiyorsan\u0131z, do\u011fru yerdesiniz.<\/p>\n<p>Bir zamanlar siber g\u00fcvenli\u011fin kalbi, k\u00f6t\u00fc niyetli yaz\u0131l\u0131mlar\u0131 (malware) veya bilinen sald\u0131r\u0131 kal\u0131plar\u0131n\u0131 tespit eden imza tabanl\u0131 sistemler ve g\u00fcvenlik duvarlar\u0131 etraf\u0131nda at\u0131yordu. Ancak teknolojinin ve siber su\u00e7lular\u0131n tekniklerinin h\u0131zla geli\u015fmesiyle birlikte, bu geleneksel y\u00f6ntemler ne yaz\u0131k ki yetersiz kalmaya ba\u015flad\u0131. Geleneksel yakla\u015f\u0131mlar, genellikle bilinen tehditlere kar\u015f\u0131 koruma sa\u011flar; yani bir sald\u0131r\u0131 t\u00fcr\u00fc daha \u00f6nce g\u00f6r\u00fclm\u00fc\u015f ve analiz edilmi\u015fse, buna kar\u015f\u0131 bir &#8220;imza&#8221; olu\u015fturulabilir. Ancak s\u0131f\u0131r g\u00fcn (zero-day) sald\u0131r\u0131lar\u0131, geli\u015fmi\u015f kal\u0131c\u0131 tehditler (APT&#8217;ler) veya hedefli oltalama (spear-phishing) gibi yeni ve bilinmeyen sald\u0131r\u0131 vekt\u00f6rleri ortaya \u00e7\u0131kt\u0131\u011f\u0131nda, bu sistemler genellikle k\u00f6r kal\u0131r.<\/p>\n<p>\u00d6rne\u011fin, bir sald\u0131rgan k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131n\u0131 her seferinde biraz de\u011fi\u015ftirerek (polymorphic malware), antivir\u00fcs yaz\u0131l\u0131mlar\u0131n\u0131n imza tabanl\u0131 alg\u0131lamas\u0131ndan kolayca ka\u00e7abilir. Ayn\u0131 \u015fekilde, g\u00fcvenlik duvarlar\u0131, d\u0131\u015far\u0131dan gelen trafi\u011fi denetlemede etkili olsa da, i\u00e7eriden kaynaklanan tehditleri veya yetkisiz eri\u015fim elde etmi\u015f bir sald\u0131rgan\u0131n a\u011f i\u00e7inde yatay hareketini izlemede s\u0131n\u0131rl\u0131 kal\u0131r. Bu durum, siber g\u00fcvenlik uzmanlar\u0131n\u0131 s\u00fcrekli bir reaktif d\u00f6ng\u00fcn\u00fcn i\u00e7ine iter: Sald\u0131r\u0131 ger\u00e7ekle\u015fir, hasar verilir, sonra analiz edilir ve ancak ondan sonra bir kar\u015f\u0131 \u00f6nlem geli\u015ftirilebilir. Bu, maalesef, \u00e7o\u011fu zaman \u00e7ok ge\u00e7 demektir. Kurulu\u015flar, sadece sald\u0131r\u0131lar\u0131 engellemekle kalmay\u0131p, ayn\u0131 zamanda sald\u0131rganlar\u0131n a\u011flar\u0131na s\u0131zd\u0131ktan sonra neler yapabilece\u011fini anlamak ve buna g\u00f6re proaktif savunmalar in\u015fa etmek zorunda olduklar\u0131n\u0131 fark ettiler. \u0130\u015fte tam da bu noktada, geleneksel savunma duvarlar\u0131n\u0131n \u00f6tesine ge\u00e7erek siber g\u00fcvenlik d\u00fcnyas\u0131na yeni bir soluk getiren bir yakla\u015f\u0131m olan MITRE ATT&#038;CK Framework devreye giriyor. Bu \u00e7er\u00e7eve, sald\u0131rganlar\u0131n hedeflerine ula\u015fmak i\u00e7in kulland\u0131klar\u0131 taktikleri ve teknikleri \u00e7ok daha detayl\u0131 bir \u015fekilde anlamam\u0131z\u0131 sa\u011flayarak, reaktif yerine proaktif bir g\u00fcvenlik duru\u015fu benimsememize yard\u0131mc\u0131 olur.<\/p>\n<p>Geleneksel g\u00fcvenlik anlay\u0131\u015f\u0131n\u0131n bu eksiklikleri, bize sadece &#8220;Ne kadar iyi korundu\u011fumuz?&#8221; sorusunu de\u011fil, ayn\u0131 zamanda &#8220;Sald\u0131rganlar bize sald\u0131rd\u0131\u011f\u0131nda ne t\u00fcr y\u00f6ntemler kullanacak ve biz onlar\u0131 hangi a\u015famalarda tespit edebiliriz?&#8221; sorusunu sormam\u0131z gerekti\u011fini g\u00f6sterdi. MITRE ATT&#038;CK, tam da bu sorulara yan\u0131t arayan ve siber g\u00fcvenlik profesyonellerine sald\u0131rgan zihniyetini anlama ve buna g\u00f6re savunma stratejileri geli\u015ftirme konusunda paha bi\u00e7ilmez bir ara\u00e7 sunan devrim niteli\u011finde bir kaynakt\u0131r.<\/p>\n<h2>MITRE ATT&#038;CK Framework Nedir ve Temel Kavramlar\u0131 Nelerdir?<\/h2>\n<p>MITRE ATT&#038;CK Framework (Adversarial Tactics, Techniques, and Common Knowledge), siber sald\u0131rganlar\u0131n hedeflerine ula\u015fmak i\u00e7in kulland\u0131klar\u0131 taktikleri, teknikleri ve prosed\u00fcrleri (TTP&#8217;ler) a\u00e7\u0131klayan k\u00fcresel olarak eri\u015filebilir bir bilgi taban\u0131d\u0131r. Temel amac\u0131, savunmac\u0131lara d\u00fc\u015fman zihniyetini anlamalar\u0131, alg\u0131lama yeteneklerini geli\u015ftirmeleri ve g\u00fcvenlik duru\u015flar\u0131n\u0131 g\u00fc\u00e7lendirmeleri i\u00e7in ortak bir dil ve yap\u0131 sa\u011flamakt\u0131r. Geleneksel g\u00fcvenlik yakla\u015f\u0131mlar\u0131n\u0131n aksine, ATT&#038;CK sadece k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlar\u0131 de\u011fil, sald\u0131rgan\u0131n t\u00fcm ya\u015fam d\u00f6ng\u00fcs\u00fc boyunca ger\u00e7ekle\u015ftirdi\u011fi eylemleri detayland\u0131r\u0131r.<\/p>\n<p>ATT&#038;CK, \u00fc\u00e7 ana bile\u015fenden olu\u015fur:<\/p>\n<ul>\n<li><strong>Taktikler (Tactics):<\/strong> Bir sald\u0131rgan\u0131n belirli bir amac\u0131 ger\u00e7ekle\u015ftirmek i\u00e7in kullanabilece\u011fi &#8220;neden&#8221; veya &#8220;hedef&#8221;tir. Bunlar, sald\u0131r\u0131n\u0131n \u00fcst d\u00fczey hedeflerini temsil eder. \u00d6rne\u011fin, ilk eri\u015fim (Initial Access), kimlik bilgisi eri\u015fimi (Credential Access) veya veri s\u0131zd\u0131rma (Exfiltration) gibi hedefler birer taktiktir. ATT&#038;CK \u00e7er\u00e7evesi, sald\u0131r\u0131n\u0131n ya\u015fam d\u00f6ng\u00fcs\u00fcn\u00fc ba\u015ftan sona kapsayan bir dizi takti\u011fi i\u00e7erir.<\/li>\n<li><strong>Teknikler (Techniques):<\/strong> Bir takti\u011fi ger\u00e7ekle\u015ftirmek i\u00e7in sald\u0131rgan\u0131n kullanabilece\u011fi &#8220;nas\u0131l&#8221; veya &#8220;y\u00f6ntem&#8221;dir. Teknikler, taktiklerden daha spesifiktir ve sald\u0131rgan\u0131n ger\u00e7ekle\u015ftirdi\u011fi belirli eylemleri tan\u0131mlar. \u00d6rne\u011fin, &#8220;\u0130lk Eri\u015fim&#8221; takti\u011fi alt\u0131nda &#8220;Spearphishing Link&#8221; (Oltalama Ba\u011flant\u0131s\u0131) veya &#8220;Valid Accounts&#8221; (Ge\u00e7erli Hesaplar) birer teknik olabilir.<\/li>\n<li><strong>Prosed\u00fcrler (Procedures):<\/strong> Tekniklerin ger\u00e7ek d\u00fcnyadaki uygulanmas\u0131d\u0131r. Bunlar, belirli bir tehdit grubunun veya k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131n belirli bir tekni\u011fi nas\u0131l kulland\u0131\u011f\u0131na dair somut ad\u0131mlard\u0131r. \u00d6rne\u011fin, APT29 adl\u0131 bir tehdit grubunun &#8220;Ge\u00e7erli Hesaplar&#8221; tekni\u011fini kullanarak bir kurban\u0131n VPN&#8217;ine nas\u0131l s\u0131zd\u0131\u011f\u0131na dair detaylar bir prosed\u00fcr \u00f6rne\u011fidir. ATT&#038;CK, bu prosed\u00fcrleri ger\u00e7ek d\u00fcnyadaki tehdit istihbarat\u0131 raporlar\u0131ndan ve olay m\u00fcdahale verilerinden derler.<\/li>\n<\/ul>\n<p>Bu \u00fc\u00e7 bile\u015fenin birle\u015fimi, siber g\u00fcvenlik profesyonellerine, sald\u0131rganlar\u0131n sadece ne yapt\u0131\u011f\u0131n\u0131 de\u011fil, neden yapt\u0131\u011f\u0131n\u0131 ve bunu nas\u0131l ger\u00e7ekle\u015ftirdi\u011fini kapsaml\u0131 bir \u015fekilde anlama f\u0131rsat\u0131 sunar. Bu \u00e7er\u00e7eve, sald\u0131rganlar\u0131n s\u00fcrekli de\u011fi\u015fen y\u00f6ntemlerine kar\u015f\u0131 savunmac\u0131lar\u0131n dinamik ve adaptif g\u00fcvenlik stratejileri geli\u015ftirmesini sa\u011flar. Ayr\u0131ca, ATT&#038;CK&#8217;\u0131n a\u00e7\u0131k ve ortak bir dil sunmas\u0131, farkl\u0131 g\u00fcvenlik ekipleri, ara\u00e7lar\u0131 ve kurulu\u015flar aras\u0131nda bilgi payla\u015f\u0131m\u0131n\u0131 ve koordinasyonu kolayla\u015ft\u0131r\u0131r. Bu sayede, g\u00fcvenlik analizleri standartla\u015ft\u0131r\u0131l\u0131r ve k\u00fcresel tehdit istihbarat\u0131 daha etkili bir \u015fekilde kullan\u0131labilir hale gelir.<\/p>\n<p>MITRE ATT&#038;CK, yaln\u0131zca bir sald\u0131rgan davran\u0131\u015flar\u0131 listesi olman\u0131n \u00f6tesinde, siber g\u00fcvenlik d\u00fcnyas\u0131na bir\u00e7ok \u00f6nemli fayda sunar:<\/p>\n<ul>\n<li><strong>Ortak Bir Dil ve Anlay\u0131\u015f:<\/strong> Farkl\u0131 ekipler ve departmanlar aras\u0131nda sald\u0131rgan TTP&#8217;leri hakk\u0131nda ortak bir anlay\u0131\u015f sa\u011flar.<\/li>\n<li><strong>Tehdit Modellemesi:<\/strong> Kurulu\u015flar\u0131n kar\u015f\u0131la\u015fabilece\u011fi tehditleri daha ger\u00e7ek\u00e7i bir \u015fekilde modellemesine yard\u0131mc\u0131 olur.<\/li>\n<li><strong>Savunma G\u00fc\u00e7lendirme:<\/strong> Mevcut g\u00fcvenlik kontrollerinin etkinli\u011fini de\u011ferlendirme ve zay\u0131f noktalar\u0131 belirleme imkan\u0131 sunar.<\/li>\n<li><strong>Tehdit Avc\u0131l\u0131\u011f\u0131 (Threat Hunting):<\/strong> Sald\u0131rgan aktivitesini proaktif olarak aramak i\u00e7in bir yol haritas\u0131 sunar.<\/li>\n<li><strong>Olay M\u00fcdahalesi:<\/strong> Olaylar s\u0131ras\u0131nda sald\u0131r\u0131n\u0131n taktiklerini ve tekniklerini h\u0131zla belirlemeye ve m\u00fcdahale etmeye yard\u0131mc\u0131 olur.<\/li>\n<li><strong>K\u0131rm\u0131z\u0131 Tak\u0131m (Red Team) ve Mor Tak\u0131m (Purple Team) Tatbikatlar\u0131:<\/strong> Ger\u00e7ek\u00e7i sald\u0131r\u0131 senaryolar\u0131 olu\u015fturmak ve savunmalar\u0131 test etmek i\u00e7in bir referans noktas\u0131d\u0131r.<\/li>\n<\/ul>\n<p>ATT&#038;CK&#8217;\u0131n bu kadar etkili olmas\u0131n\u0131n ard\u0131ndaki temel neden, g\u00fcvenlik profesyonellerinin &#8220;bilinmeyeni&#8221; tahmin etmeye \u00e7al\u0131\u015fmak yerine, kan\u0131tlanm\u0131\u015f sald\u0131rgan davran\u0131\u015f kal\u0131plar\u0131na odaklanmas\u0131n\u0131 sa\u011flamas\u0131d\u0131r. Bu sayede, kurulu\u015flar sadece reaktif de\u011fil, ayn\u0131 zamanda proaktif ve \u00f6ng\u00f6r\u00fcl\u00fc bir siber g\u00fcvenlik duru\u015fu benimseyebilirler. Framework&#8217;\u00fcn s\u00fcrekli g\u00fcncellenen ve geni\u015fleyen yap\u0131s\u0131, onu siber g\u00fcvenlik alan\u0131ndaki en g\u00fcncel ve kapsaml\u0131 kaynaklardan biri haline getiriyor.<\/p>\n<h2>ATT&#038;CK Framework Siber Savunman\u0131z\u0131 Nas\u0131l G\u00fc\u00e7lendirir?<\/h2>\n<p>MITRE ATT&#038;CK Framework, siber savunma stratejilerini geleneksel yakla\u015f\u0131mlar\u0131n \u00f6tesine ta\u015f\u0131yarak, kurulu\u015flar\u0131n daha proaktif ve etkili bir g\u00fcvenlik duru\u015fu sergilemesini sa\u011flar. Art\u0131k sadece &#8220;bir sald\u0131r\u0131y\u0131 engelledik mi?&#8221; sorusunun pe\u015finden ko\u015fmak yerine, &#8220;sald\u0131rganlar bize sald\u0131rd\u0131\u011f\u0131nda ne t\u00fcr y\u00f6ntemler kullanacak ve biz onlar\u0131 hangi a\u015famalarda tespit edebiliriz?&#8221; sorusuna yan\u0131t ar\u0131yoruz. Bu b\u00f6l\u00fcm, ATT&#038;CK&#8217;\u0131n g\u00fcvenlik duru\u015funuzu nas\u0131l temelden d\u00f6n\u00fc\u015ft\u00fcrebilece\u011fini somut \u00f6rneklerle a\u00e7\u0131klayacakt\u0131r.<\/p>\n<h3>Tehdit Modellemesi ve Risk De\u011ferlendirmesi Nas\u0131l Yap\u0131l\u0131r?<\/h3>\n<p>ATT&#038;CK ile tehdit modellemesi, potansiyel sald\u0131rganlar\u0131n bir kurulu\u015fu hedef al\u0131rken hangi taktikleri ve teknikleri kullanabilece\u011fini tahmin etmeyi i\u00e7erir. Bu sayede, en kritik varl\u0131klar\u0131 korumak ve en olas\u0131 sald\u0131r\u0131 vekt\u00f6rlerine kar\u015f\u0131 savunma geli\u015ftirmek m\u00fcmk\u00fcn olur. Geleneksel risk de\u011ferlendirmeleri genellikle genel g\u00fcvenlik a\u00e7\u0131klar\u0131na odaklan\u0131rken, ATT&#038;CK tabanl\u0131 modelleme, belirli tehdit gruplar\u0131n\u0131n davran\u0131\u015flar\u0131na odaklanarak \u00e7ok daha ger\u00e7ek\u00e7i ve uygulanabilir senaryolar sunar.<\/p>\n<p>\u00d6rne\u011fin, bir kurulu\u015fun finans sekt\u00f6r\u00fcnde faaliyet g\u00f6sterdi\u011fini varsayal\u0131m. Bu durumda, genellikle finansal kazan\u00e7 veya veri s\u0131zd\u0131rma amac\u0131yla hareket eden tehdit gruplar\u0131n\u0131n ATT&#038;CK matrisindeki TTP&#8217;lerini inceleyebiliriz. Bu gruplar\u0131n s\u0131kl\u0131kla kulland\u0131\u011f\u0131 &#8220;\u0130lk Eri\u015fim&#8221; (Initial Access) teknikleri aras\u0131nda &#8220;Spearphishing Attachment&#8221; (Hedefli Oltalama Ekleri) veya &#8220;External Remote Services&#8221; (Harici Uzaktan Eri\u015fim Hizmetleri) bulunabilir. &#8220;Kimlik Bilgisi Eri\u015fimi&#8221; (Credential Access) i\u00e7in &#8220;OS Credential Dumping&#8221; (\u0130\u015fletim Sistemi Kimlik Bilgisi D\u00f6k\u00fcm\u00fc) veya &#8220;Brute Force&#8221; (Kaba Kuvvet) teknikleri \u00f6ne \u00e7\u0131kabilir. Bu bilgiler \u0131\u015f\u0131\u011f\u0131nda, kurulu\u015f hangi tekniklere kar\u015f\u0131 daha zay\u0131f oldu\u011funu ve hangi kontrolleri g\u00fc\u00e7lendirmesi gerekti\u011fini belirleyebilir.<\/p>\n<div class=\"case-study\">\n<h3>Vaka Analizi 1: Bir Finans Kurulu\u015funun Ransomware&#8217;e Kar\u015f\u0131 ATT&#038;CK ile Savunmas\u0131<\/h3>\n<p>B\u00fcy\u00fck bir finans kurulu\u015fu olan &#8220;FinansTech&#8221;, geleneksel g\u00fcvenlik \u00e7\u00f6z\u00fcmlerine ra\u011fmen potansiyel bir fidye yaz\u0131l\u0131m\u0131 (ransomware) tehdidinden endi\u015fe ediyordu. Y\u00f6netim, sald\u0131r\u0131 sonras\u0131 iyile\u015fme maliyetlerinin \u00e7ok y\u00fcksek olaca\u011f\u0131n\u0131n fark\u0131ndayd\u0131 ve proaktif bir yakla\u015f\u0131m benimsemek istiyordu. ATT&#038;CK Framework&#8217;\u00fc kullanarak bir risk de\u011ferlendirmesi yapmaya karar verdiler.<\/p>\n<p>Ekip, yayg\u0131n fidye yaz\u0131l\u0131m\u0131 gruplar\u0131n\u0131n (\u00f6rne\u011fin, Conti, LockBit) genellikle kulland\u0131\u011f\u0131 ATT&#038;CK taktiklerini ve tekniklerini analiz etti. \u00d6ne \u00e7\u0131kanlar \u015funlard\u0131:<\/p>\n<ul>\n<li><strong>Initial Access:<\/strong> Spearphishing Attachment (T1566.001)<\/li>\n<li><strong>Execution:<\/strong> Command and Scripting Interpreter (T1059), PowerShell (T1059.001)<\/li>\n<li><strong>Persistence:<\/strong> Boot or Logon Autostart Execution (T1547)<\/li>\n<li><strong>Defense Evasion:<\/strong> Obfuscated Files or Information (T1027)<\/li>\n<li><strong>Credential Access:<\/strong> OS Credential Dumping (T1003)<\/li>\n<li><strong>Discovery:<\/strong> Network Share Discovery (T1135), System Network Connections Discovery (T1049)<\/li>\n<li><strong>Lateral Movement:<\/strong> Remote Services (T1021), SMB\/Windows Admin Shares (T1021.002)<\/li>\n<li><strong>Impact:<\/strong> Data Encrypted for Impact (T1486)<\/li>\n<\/ul>\n<p>Bu analiz sonucunda, FinansTech ekibi, mevcut g\u00fcvenlik kontrollerinin bu tekniklere kar\u015f\u0131 ne kadar etkili oldu\u011funu bir matris \u00fczerinde i\u015faretledi. Baz\u0131 kritik bo\u015fluklar tespit edildi:<\/p>\n<ol>\n<li>U\u00e7 nokta g\u00fcvenlik \u00e7\u00f6z\u00fcmleri, PowerShell ile gizlenmi\u015f (obfuscated) betik \u00e7al\u0131\u015ft\u0131rmalar\u0131n\u0131 her zaman yakalayam\u0131yordu.<\/li>\n<li>A\u011f i\u00e7i yatay hareketleri izleme ve anomali tespiti konusunda zay\u0131fl\u0131klar vard\u0131.<\/li>\n<li>Kimlik bilgisi d\u00f6k\u00fcm\u00fc (credential dumping) giri\u015fimlerine kar\u015f\u0131 yeterli uyar\u0131 mekanizmalar\u0131 bulunmuyordu.<\/li>\n<\/ol>\n<p>Bu bo\u015fluklar\u0131 kapatmak i\u00e7in FinansTech, EDR (Endpoint Detection and Response) \u00e7\u00f6z\u00fcm\u00fcn\u00fc geli\u015ftirdi, a\u011f i\u00e7i segmentasyonu art\u0131rd\u0131 ve SIEM (Security Information and Event Management) kurallar\u0131n\u0131 &#8220;OS Credential Dumping&#8221; ve &#8220;Network Share Discovery&#8221; gibi teknikleri tespit edecek \u015fekilde g\u00fcncelledi. Ayr\u0131ca, \u00e7al\u0131\u015fanlar\u0131na hedefli oltalama sald\u0131r\u0131lar\u0131na kar\u015f\u0131 fark\u0131ndal\u0131k e\u011fitimleri verdi.<\/p>\n<p>Sonu\u00e7 olarak, FinansTech, ATT&#038;CK sayesinde potansiyel fidye yaz\u0131l\u0131m\u0131 sald\u0131r\u0131lar\u0131n\u0131 \u00e7ok daha erken a\u015famalarda tespit edebilecek ve etkisiz hale getirebilecek proaktif savunmalar in\u015fa etti. Bu, sadece bir sald\u0131y\u0131 \u00f6nlemekle kalmad\u0131, ayn\u0131 zamanda siber g\u00fcvenlik yat\u0131r\u0131m\u0131n\u0131n nereye y\u00f6nlendirilmesi gerekti\u011fini de net bir \u015fekilde g\u00f6sterdi.<\/p>\n<\/div>\n<h3>G\u00fcvenlik Operasyonlar\u0131 Merkezi (SOC) Ekipleri \u0130\u00e7in ATT&#038;CK Ne Anlama Geliyor?<\/h3>\n<p>SOC (Security Operations Center) ekipleri i\u00e7in ATT&#038;CK Framework, operasyonel verimlili\u011fi ve tespit yeteneklerini \u00f6nemli \u00f6l\u00e7\u00fcde art\u0131ran bir rehberdir. Geleneksel olarak, SOC analistleri alarm y\u0131\u011f\u0131nlar\u0131yla bo\u011fu\u015fur ve her bir alarm\u0131 tek tek de\u011ferlendirmeye \u00e7al\u0131\u015f\u0131r. ATT&#038;CK, bu alarmlar\u0131 daha geni\u015f bir sald\u0131r\u0131 ba\u011flam\u0131na oturtarak analistlerin i\u015fini kolayla\u015ft\u0131r\u0131r.<\/p>\n<p>\u00d6ncelikle, ATT&#038;CK, mevcut SIEM veya EDR sistemlerindeki alg\u0131lama kurallar\u0131n\u0131n eksiklerini belirlemek i\u00e7in kullan\u0131labilir. Bir SOC ekibi, ATT&#038;CK matrisindeki her bir tekni\u011fi g\u00f6zden ge\u00e7irerek, &#8220;Bu tekni\u011fi tespit etmek i\u00e7in mevcut bir kural\u0131m\u0131z var m\u0131? Varsa ne kadar etkili?&#8221; sorular\u0131n\u0131 sorabilir. E\u011fer bir teknik i\u00e7in alg\u0131lama kural\u0131 yoksa veya zay\u0131fsa, yeni kuralar olu\u015fturulabilir veya mevcutlar iyile\u015ftirilebilir.<\/p>\n<p>\u00d6rne\u011fin, bir SOC analisti, bir sunucuda beklenmedik bir PowerShell aktivitesi tespit etti\u011finde, ATT&#038;CK&#8217;\u0131 kullanarak bu aktivitenin &#8220;Execution: PowerShell (T1059.001)&#8221; tekni\u011fine kar\u015f\u0131l\u0131k geldi\u011fini hemen anlayabilir. Bu bilgi, analistin ilgili takti\u011fin &#8220;Execution&#8221; (Y\u00fcr\u00fctme) oldu\u011funu ve bir sonraki ad\u0131m\u0131n genellikle &#8220;Persistence&#8221; (Kal\u0131c\u0131l\u0131k) veya &#8220;Defense Evasion&#8221; (Savunmadan Ka\u00e7\u0131nma) olabilece\u011fini tahmin etmesine yard\u0131mc\u0131 olur. Bu sayede, olaya m\u00fcdahale s\u00fcreci h\u0131zlan\u0131r ve daha hedefe y\u00f6nelik hale gelir. Olay m\u00fcdahalesi s\u0131ras\u0131nda, ATT&#038;CK, sald\u0131r\u0131n\u0131n t\u00fcm ya\u015fam d\u00f6ng\u00fcs\u00fcn\u00fc haritaland\u0131rmak ve sald\u0131rgan\u0131n nerede oldu\u011funu, ne yapt\u0131\u011f\u0131n\u0131 ve bir sonraki ad\u0131m\u0131n\u0131n ne olabilece\u011fini anlamak i\u00e7in kritik bir ara\u00e7t\u0131r.<\/p>\n<p>A\u015fa\u011f\u0131da, bir SIEM sisteminde potansiyel bir kimlik bilgisi d\u00f6k\u00fcm\u00fc (credential dumping) tekni\u011fini tespit etmek i\u00e7in ATT&#038;CK odakl\u0131 bir kural \u00f6rne\u011fi verilmi\u015ftir. Bu kural, &#8220;OS Credential Dumping&#8221; (T1003) tekni\u011finin bir varyasyonu olan &#8220;Lsassy&#8221; sald\u0131r\u0131lar\u0131n\u0131 hedef alabilir:<\/p>\n<pre><code>\n<span class=\"comment\">\/\/ \u00d6rnek SIEM Kural\u0131 (Splunk benzeri s\u00f6zdizimi)<\/span>\n<span class=\"keyword\">index<\/span>=windows_eventlogs \n<span class=\"field\">EventCode<\/span>=4688 <span class=\"comment\">\/\/ Yeni i\u015flem olu\u015fturuldu<\/span>\n<span class=\"keyword\">|<\/span> <span class=\"function\">search<\/span> <span class=\"field\">NewProcessName<\/span>=<span class=\"string\">\"lsass.exe\"<\/span> <span class=\"keyword\">AND<\/span> <span class=\"field\">CommandLine<\/span>=<span class=\"string\">\"tasklist\"<\/span> <span class=\"keyword\">OR<\/span> <span class=\"field\">ParentProcessName<\/span>=<span class=\"string\">\"cmd.exe\"<\/span> <span class=\"keyword\">AND<\/span> <span class=\"field\">CommandLine<\/span>=<span class=\"string\">\"*> dump.txt*\"<\/span> <span class=\"comment\">\/\/ Potansiyel lsass d\u00f6k\u00fcm\u00fc veya \u00e7\u0131kt\u0131 y\u00f6nlendirme<\/span>\n<span class=\"keyword\">|<\/span> <span class=\"function\">eval<\/span> mitre_technique = <span class=\"string\">\"T1003 - OS Credential Dumping\"<\/span>\n<span class=\"keyword\">|<\/span> <span class=\"function\">table<\/span> _time, host, NewProcessName, CommandLine, ParentProcessName, mitre_technique\n<span class=\"keyword\">|<\/span> <span class=\"function\">alert<\/span> <span class=\"string\">\"Potansiyel Kimlik Bilgisi D\u00f6k\u00fcm\u00fc Alg\u0131land\u0131 (MITRE ATT&CK T1003)\"<\/span> <span class=\"keyword\">if<\/span> <span class=\"function\">count<\/span> <span class=\"operator\">><\/span> 0\n<\/pre>\n<p><\/code><\/p>\n<p>Bu \u00f6rnekte, kural\u0131n do\u011frudan bir ATT&CK tekni\u011fine at\u0131fta bulunmas\u0131, SOC analistinin alarm\u0131 ald\u0131\u011f\u0131nda ne arayaca\u011f\u0131n\u0131 ve sald\u0131r\u0131n\u0131n hangi a\u015famas\u0131nda oldu\u011funu h\u0131zla anlamas\u0131na yard\u0131mc\u0131 olur. Ayr\u0131ca, bu t\u00fcr kurallar, tehdit istihbarat\u0131 raporlar\u0131ndaki TTP'leri h\u0131zla alg\u0131lama yeteneklerine d\u00f6n\u00fc\u015ft\u00fcrmek i\u00e7in de kullan\u0131labilir. K\u0131sacas\u0131, MITRE ATT&CK Framework, SOC ekiplerine sadece alarmlar\u0131 y\u00f6netmekten \u00f6te, sald\u0131rgan\u0131n niyetini ve y\u00f6ntemlerini anlayarak daha ak\u0131ll\u0131 ve etkili bir \u015fekilde savunma yapma g\u00fcc\u00fc verir.<\/p>\n<h2>Tehdit Avc\u0131l\u0131\u011f\u0131 (Threat Hunting) ve K\u0131rm\u0131z\u0131 Tak\u0131m Tatbikatlar\u0131nda ATT&CK'\u0131n Rol\u00fc Nedir?<\/h2>\n<p>Siber g\u00fcvenlik d\u00fcnyas\u0131nda pasif savunma art\u0131k yeterli de\u011fil. Proaktif bir duru\u015f benimsemek, yani sald\u0131rganlar hedeflerine ula\u015fmadan \u00f6nce onlar\u0131 bulmak, modern g\u00fcvenlik stratejilerinin temelini olu\u015fturuyor. \u0130\u015fte bu noktada MITRE ATT&CK Framework, hem tehdit avc\u0131l\u0131\u011f\u0131 (threat hunting) hem de k\u0131rm\u0131z\u0131 tak\u0131m (red teaming) tatbikatlar\u0131nda paha bi\u00e7ilmez bir rol oynar. Bu iki alan, ATT&CK sayesinde \u00e7ok daha hedef odakl\u0131 ve ger\u00e7ek\u00e7i hale geliyor.<\/p>\n<h3>ATT&CK ile Proaktif Tehdit Avc\u0131l\u0131\u011f\u0131na Ba\u015flang\u0131\u00e7<\/h3>\n<p>Tehdit avc\u0131l\u0131\u011f\u0131, g\u00fcvenlik sistemleri taraf\u0131ndan hen\u00fcz tespit edilmemi\u015f k\u00f6t\u00fc niyetli aktiviteyi proaktif olarak arama s\u00fcrecidir. Bu s\u00fcre\u00e7, \"sald\u0131rganlar sistemimizde olsayd\u0131 ne yap\u0131yor olurlard\u0131?\" sorusuna yan\u0131t arar. MITRE ATT&CK, bu soruyu cevaplamak ve avc\u0131lara bir yol haritas\u0131 sunmak i\u00e7in m\u00fckemmel bir ara\u00e7t\u0131r. Avc\u0131lar, ATT&CK matrisindeki belirli taktik ve tekniklere odaklanarak, hangi veri kaynaklar\u0131na bakmalar\u0131 gerekti\u011fini ve hangi davran\u0131\u015f anomalilerini aramalar\u0131 gerekti\u011fini belirleyebilirler.<\/p>\n<p>Bir tehdit avc\u0131l\u0131\u011f\u0131 operasyonu genellikle \u015fu ad\u0131mlar\u0131 izler:<\/p>\n<ol>\n<li><strong>Varsay\u0131m Olu\u015fturma:<\/strong> Bir tehdit grubunun veya belirli bir sald\u0131r\u0131 tekni\u011finin a\u011f\u0131n\u0131zda aktif olabilece\u011fine dair bir varsay\u0131m olu\u015fturulur. \u00d6rne\u011fin, \"APT28, 'DLL Sideloading' (T1574.002) tekni\u011fini kullanarak kal\u0131c\u0131l\u0131k sa\u011flam\u0131\u015f olabilir.\"<\/li>\n<li><strong>Veri Kaynaklar\u0131n\u0131 Belirleme:<\/strong> Bu varsay\u0131m\u0131 do\u011frulamak veya \u00e7\u00fcr\u00fctmek i\u00e7in hangi loglar\u0131n veya telemetri verilerinin incelenmesi gerekti\u011fi belirlenir. \u00d6rne\u011fin, \"DLL Sideloading\" i\u00e7in olay g\u00fcnl\u00fckleri (Event Logs), Process Monitor kay\u0131tlar\u0131 veya EDR verileri gerekli olabilir.<\/li>\n<li><strong>Sorgu Olu\u015fturma ve Analiz:<\/strong> Belirlenen veri kaynaklar\u0131nda anormallikleri veya beklenen sald\u0131rgan davran\u0131\u015flar\u0131n\u0131 arayan sorgular yaz\u0131l\u0131r ve analiz edilir.<\/li>\n<li><strong>Bulgular\u0131n De\u011ferlendirilmesi:<\/strong> Toplanan veriler \u0131\u015f\u0131\u011f\u0131nda varsay\u0131m do\u011frulan\u0131r veya yeni varsay\u0131mlar olu\u015fturulur.<\/li>\n<\/ol>\n<p>ATT&CK, \u00f6zellikle \"TTP'lerden veriye\" yakla\u015f\u0131m\u0131yla avc\u0131lara yard\u0131mc\u0131 olur. Bir avc\u0131, ilgi duydu\u011fu bir tekni\u011fi se\u00e7er ve ATT&CK'\u0131n ilgili sayfas\u0131nda o tekni\u011fi tespit etmek i\u00e7in hangi veri kaynaklar\u0131n\u0131n (\u00f6rne\u011fin, Process Creation, Network Connections, Registry Access) kullan\u0131labilece\u011fini \u00f6\u011frenir. B\u00f6ylece, anlams\u0131z veri y\u0131\u011f\u0131nlar\u0131 aras\u0131nda kaybolmak yerine, do\u011frudan hedefe y\u00f6nelik ara\u015ft\u0131rmalar yapabilir. Bu, tehdit avc\u0131l\u0131\u011f\u0131n\u0131 \u00e7ok daha verimli ve odakl\u0131 hale getirir.<\/p>\n<pre><code>\n<span class=\"comment\">\/\/ \u00d6rnek bir tehdit avc\u0131l\u0131\u011f\u0131 sorgusu (EDR veya SIEM i\u00e7in pseudo-kod)<\/span>\n<span class=\"keyword\">SELECT<\/span> * <span class=\"keyword\">FROM<\/span> <span class=\"table\">process_events<\/span>\n<span class=\"keyword\">WHERE<\/span> <span class=\"field\">process_name<\/span> = <span class=\"string\">\"cmd.exe\"<\/span> <span class=\"keyword\">OR<\/span> <span class=\"field\">process_name<\/span> = <span class=\"string\">\"powershell.exe\"<\/span>\n<span class=\"keyword\">AND<\/span> <span class=\"field\">parent_process_name<\/span> <span class=\"keyword\">NOT IN<\/span> (<span class=\"string\">\"explorer.exe\"<\/span>, <span class=\"string\">\"svchost.exe\"<\/span>, <span class=\"string\">\"winlogon.exe\"<\/span>) <span class=\"comment\">\/\/ Normal kullan\u0131c\u0131 veya sistem s\u00fcre\u00e7leri d\u0131\u015f\u0131ndaki cmd\/powershell aktivitesi<\/span>\n<span class=\"keyword\">AND<\/span> <span class=\"field\">command_line<\/span> <span class=\"keyword\">LIKE<\/span> <span class=\"string\">\"%base64%\"<\/span> <span class=\"keyword\">OR<\/span> <span class=\"field\">command_line<\/span> <span class=\"keyword\">LIKE<\/span> <span class=\"string\">\"%invoke-expression%\"<\/span> <span class=\"comment\">\/\/ Potansiyel gizlenmi\u015f kod \u00e7al\u0131\u015ft\u0131rma (T1059.001 - PowerShell)<\/span>\n<span class=\"keyword\">LIMIT<\/span> 100 <span class=\"comment\">\/\/ \u0130lk 100 sonucu g\u00f6ster<\/span>\n<\/pre>\n<p><\/code><\/p>\n<p>Bu sorgu, \"Execution: Command and Scripting Interpreter: PowerShell (T1059.001)\" tekni\u011fini tespit etmeye y\u00f6nelik bir tehdit avc\u0131l\u0131\u011f\u0131 \u00f6rne\u011fidir. ATT&CK, avc\u0131lar\u0131n bu t\u00fcr sorgular\u0131 daha bilin\u00e7li bir \u015fekilde olu\u015fturmalar\u0131na yard\u0131mc\u0131 olur.<\/p>\n<div class=\"expert-tip\">\n    Uzman \u0130pucu: Tehdit avc\u0131l\u0131\u011f\u0131nda, \u00f6zellikle daha az bilinen tekniklere odaklan\u0131n. Sald\u0131rganlar genellikle bilinen savunmalardan ka\u00e7\u0131nmak i\u00e7in ni\u015f TTP'leri kullan\u0131r. ATT&CK matrisini d\u00fczenli olarak tarayarak \"bilinmeyen bilinmeyenleri\" ke\u015ffedebilirsiniz.\n<\/div>\n<h3>K\u0131rm\u0131z\u0131 Tak\u0131m Operasyonlar\u0131n\u0131 ATT&CK ile Nas\u0131l Hizalayabiliriz?<\/h3>\n<p>K\u0131rm\u0131z\u0131 tak\u0131m tatbikatlar\u0131, bir kurulu\u015fun siber g\u00fcvenlik savunmalar\u0131n\u0131n ger\u00e7ek bir sald\u0131rgan\u0131n g\u00f6z\u00fcnden test edilmesidir. Bu tatbikatlar, genellikle \"d\u00fc\u015fman gibi d\u00fc\u015f\u00fcn, d\u00fc\u015fman gibi hareket et\" felsefesini benimser. ATT&CK Framework, k\u0131rm\u0131z\u0131 tak\u0131mlara, hedeflenen tehdit gruplar\u0131n\u0131n veya genel sald\u0131rganlar\u0131n kulland\u0131\u011f\u0131 ger\u00e7ek d\u00fcnya TTP'lerine dayal\u0131 senaryolar olu\u015fturma konusunda m\u00fckemmel bir rehber sunar.<\/p>\n<p>K\u0131rm\u0131z\u0131 tak\u0131m operasyonlar\u0131, ATT&CK sayesinde:<\/p>\n<ol>\n<li><strong>Ger\u00e7ek\u00e7ilik Kazan\u0131r:<\/strong> Sald\u0131rganlar taraf\u0131ndan ger\u00e7ekten kullan\u0131lan taktikler ve teknikler taklit edilir, bu da tatbikat\u0131n kurulu\u015f i\u00e7in daha de\u011ferli olmas\u0131n\u0131 sa\u011flar.<\/li>\n<li><strong>\u00d6l\u00e7\u00fclebilir Hale Gelir:<\/strong> K\u0131rm\u0131z\u0131 tak\u0131m, uygulad\u0131\u011f\u0131 her tekni\u011fi ATT&CK matrisi \u00fczerinde i\u015faretleyebilir. Mavi tak\u0131m (savunma ekibi) ise hangi teknikleri tespit edip engelleyebildi\u011fini i\u015faretleyerek savunma etkinli\u011fini objektif olarak \u00f6l\u00e7ebilir. Bu, mor tak\u0131m (k\u0131rm\u0131z\u0131 ve mavi tak\u0131mlar\u0131n i\u015f birli\u011fi) kavram\u0131n\u0131 g\u00fc\u00e7lendirir.<\/li>\n<li><strong>Bo\u015fluklar\u0131 Belirler:<\/strong> K\u0131rm\u0131z\u0131 tak\u0131m, belirli bir ATT&CK tekni\u011fini ba\u015far\u0131yla uygulayabildi\u011finde ve mavi tak\u0131m bunu tespit edemedi\u011finde, bu, kurulu\u015fun savunmas\u0131nda net bir bo\u015fluk oldu\u011funu g\u00f6sterir. Bu bilgi, g\u00fcvenlik kontrollerini ve alg\u0131lama kurallar\u0131n\u0131 iyile\u015ftirmek i\u00e7in do\u011frudan kullan\u0131labilir.<\/li>\n<\/ol>\n<div class=\"case-study\">\n<h3>Vaka Analizi 2: B\u00fcy\u00fck Bir Perakende \u015eirketinde Red Teaming<\/h3>\n<p>\"PerakendeZinciri\" adl\u0131 b\u00fcy\u00fck bir perakende \u015firketi, siber g\u00fcvenlik duru\u015funu test etmek i\u00e7in ATT&CK tabanl\u0131 bir k\u0131rm\u0131z\u0131 tak\u0131m tatbikat\u0131 yapmaya karar verdi. Ama\u00e7, \u00f6zellikle finansal veri ve m\u00fc\u015fteri bilgilerine y\u00f6nelik potansiyel s\u0131zmalar\u0131 \u00f6nlemekti.<\/p>\n<p>K\u0131rm\u0131z\u0131 tak\u0131m, perakende sekt\u00f6r\u00fcn\u00fc hedef alan bilinen tehdit gruplar\u0131n\u0131n (\u00f6rne\u011fin, FIN6, Magecart gruplar\u0131) ATT&CK profilini inceledi. Hedefleri do\u011frultusunda \u015fu TTP'leri i\u00e7eren bir senaryo olu\u015fturdular:<\/p>\n<ul>\n<li><strong>Initial Access:<\/strong> Valid Accounts (T1078) - Tedarik\u00e7i portal\u0131ndan ele ge\u00e7irilmi\u015f kimlik bilgileriyle giri\u015f.<\/li>\n<li><strong>Execution:<\/strong> Scheduled Task\/Job (T1053.005) - Kal\u0131c\u0131l\u0131k i\u00e7in zamanlanm\u0131\u015f g\u00f6rev olu\u015fturma.<\/li>\n<li><strong>Discovery:<\/strong> System Information Discovery (T1082), Network Share Discovery (T1135) - \u0130\u00e7 a\u011fda ke\u015fif.<\/li>\n<li><strong>Credential Access:<\/strong> Brute Force (T1110) - \u0130\u00e7 sistemlerde zay\u0131f \u015fifrelerin k\u0131r\u0131lmas\u0131.<\/li>\n<li><strong>Lateral Movement:<\/strong> Remote Desktop Protocol (T1021.001) - \u0130\u00e7 a\u011fda ba\u015fka sunuculara ge\u00e7i\u015f.<\/li>\n<li><strong>Exfiltration:<\/strong> Data Compressed (T1002), Exfiltration Over C2 Channel (T1041) - Verilerin s\u0131k\u0131\u015ft\u0131r\u0131lmas\u0131 ve komuta kontrol kanal\u0131 \u00fczerinden d\u0131\u015far\u0131 s\u0131zd\u0131r\u0131lmas\u0131.<\/li>\n<\/ul>\n<p>Tatbikat s\u0131ras\u0131nda, k\u0131rm\u0131z\u0131 tak\u0131m bu teknikleri s\u0131ras\u0131yla uygulamaya \u00e7al\u0131\u015ft\u0131. Mavi tak\u0131m ise, ATT&CK matrisini kullanarak k\u0131rm\u0131z\u0131 tak\u0131m\u0131n hangi teknikleri kulland\u0131\u011f\u0131n\u0131 ve kendi kontrollerinin bunlar\u0131 ne kadar iyi tespit etti\u011fini veya engelledi\u011fini i\u015faretledi. Tatbikat sonunda, PerakendeZinciri, \u00f6zellikle \"Valid Accounts\" ve \"Remote Desktop Protocol\" kullan\u0131larak yap\u0131lan yatay hareketlerin tespitinde zay\u0131f noktalar\u0131 oldu\u011funu belirledi. Ayr\u0131ca, veri s\u0131k\u0131\u015ft\u0131rma ve d\u0131\u015far\u0131 s\u0131zd\u0131rma giri\u015fimlerine y\u00f6nelik alg\u0131lama kurallar\u0131n\u0131n da yeterince olgunla\u015fmad\u0131\u011f\u0131 g\u00f6r\u00fcld\u00fc.<\/p>\n<p>Bu geri bildirimler sayesinde, PerakendeZinciri, kimlik do\u011frulama s\u00fcre\u00e7lerini g\u00fc\u00e7lendirdi (MFA uygulamas\u0131), i\u00e7 a\u011fdaki RDP kullan\u0131m\u0131n\u0131 daha s\u0131k\u0131 denetledi ve SIEM sistemlerine veri s\u0131zd\u0131rma giri\u015fimlerini izleyen yeni alg\u0131lama kurallar\u0131 ekledi. ATT&CK, tatbikat\u0131n sadece bir \"hackleme g\u00f6sterisi\" olmas\u0131n\u0131n \u00f6tesine ge\u00e7erek, somut, \u00f6l\u00e7\u00fclebilir ve aksiyon al\u0131nabilir g\u00fcvenlik iyile\u015ftirmelerine yol a\u00e7mas\u0131n\u0131 sa\u011flad\u0131.<\/p>\n<\/div>\n<p>G\u00f6r\u00fcld\u00fc\u011f\u00fc \u00fczere, ATT&CK Framework, proaktif g\u00fcvenlik stratejilerinin temel ta\u015f\u0131 haline gelmi\u015ftir. Tehdit avc\u0131lar\u0131na bir pusula g\u00f6revi g\u00f6r\u00fcrken, k\u0131rm\u0131z\u0131 tak\u0131mlara da ger\u00e7ek d\u00fcnya tehditlerine dayal\u0131, etkili ve \u00f6l\u00e7\u00fclebilir senaryolar olu\u015fturma imkan\u0131 sunar. Bu entegrasyon, kurulu\u015flar\u0131n siber sald\u0131r\u0131lar kar\u015f\u0131s\u0131nda \u00e7ok daha diren\u00e7li ve adaptif olmas\u0131n\u0131 sa\u011flar.<\/p>\n<h2>MITRE ATT&CK Uygulamas\u0131nda Kar\u015f\u0131la\u015f\u0131lan Zorluklar ve \u00c7\u00f6z\u00fcm \u00d6nerileri Nelerdir?<\/h2>\n<p>MITRE ATT&CK Framework, siber g\u00fcvenlik duru\u015funu g\u00fc\u00e7lendirmek i\u00e7in g\u00fc\u00e7l\u00fc bir ara\u00e7 olsa da, her teknoloji veya \u00e7er\u00e7eve gibi, uygulamas\u0131 s\u0131ras\u0131nda belirli zorluklarla kar\u015f\u0131la\u015fmak m\u00fcmk\u00fcnd\u00fcr. Bu zorluklar\u0131n fark\u0131nda olmak ve proaktif \u00e7\u00f6z\u00fcmler geli\u015ftirmek, ATT&CK'tan en iyi \u015fekilde faydalanman\u0131n anahtar\u0131d\u0131r. Burada, yayg\u0131n zorluklar\u0131 ve bunlar\u0131 a\u015fmak i\u00e7in pratik \u00e7\u00f6z\u00fcm \u00f6nerilerini ele alaca\u011f\u0131z.<\/p>\n<h3>Veri Toplama, Entegrasyon ve Ba\u011flam Eksikli\u011fi<\/h3>\n<p><strong>Zorluk:<\/strong> ATT&CK matrisindeki tekniklerin \u00e7o\u011fu, geni\u015f ve \u00e7e\u015fitli veri kaynaklar\u0131ndan toplanan telemetriye dayan\u0131r. Kurulu\u015flar\u0131n genellikle yeterli veya do\u011fru t\u00fcrde loglama\/telemetri verisine sahip olmamas\u0131, mevcut sistemlerde bu verilerin da\u011f\u0131n\u0131k olmas\u0131 veya farkl\u0131 g\u00fcvenlik \u00e7\u00f6z\u00fcmleri aras\u0131nda entegrasyon eksikli\u011fi ya\u015fanmas\u0131 b\u00fcy\u00fck bir engel te\u015fkil eder. Ayr\u0131ca, toplanan verilerin ATT&CK ba\u011flam\u0131na oturtulmas\u0131, yani bir olay\u0131n hangi TTP ile ilgili oldu\u011funu anlamak da zaman al\u0131c\u0131 olabilir.<\/p>\n<p><strong>\u00c7\u00f6z\u00fcm \u00d6nerisi:<\/strong><\/p>\n<ul>\n<li><strong>Kapsaml\u0131 Loglama ve Telemetri:<\/strong> \u00d6ncelikle, kritik sistemlerden ve u\u00e7 noktalardan (EDR \u00e7\u00f6z\u00fcmleri arac\u0131l\u0131\u011f\u0131yla) gerekli telemetri verilerini (\u00f6rne\u011fin, i\u015flem olu\u015fturma, a\u011f ba\u011flant\u0131lar\u0131, kay\u0131t defteri de\u011fi\u015fiklikleri) toplad\u0131\u011f\u0131n\u0131zdan emin olun. Microsoft Sysmon gibi ara\u00e7lar, Windows ortam\u0131nda zengin olay g\u00fcnl\u00fckleri sa\u011flamak i\u00e7in \u00e7ok de\u011ferlidir.<\/li>\n<li><strong>Merkezi Log Y\u00f6netimi (SIEM):<\/strong> T\u00fcm bu verileri tek bir merkezi SIEM veya log y\u00f6netim platformunda birle\u015ftirin. Bu, korelasyon ve analiz i\u00e7in temel olu\u015fturur.<\/li>\n<li><strong>Veri Zenginle\u015ftirme:<\/strong> Toplanan verilere ba\u011flam katmak i\u00e7in kimlik bilgisi, varl\u0131k bilgisi ve tehdit istihbarat\u0131 gibi ek verilerle zenginle\u015ftirin.<\/li>\n<li><strong>ATT&CK Haritalama Ara\u00e7lar\u0131:<\/strong> G\u00fcvenlik \u00e7\u00f6z\u00fcmlerinizin (EDR, SIEM) ATT&CK uyumlulu\u011funu kontrol edin. Bir\u00e7ok modern \u00e7\u00f6z\u00fcm, alg\u0131lamalar\u0131n\u0131 do\u011frudan ATT&CK teknikleriyle e\u015fleyebilir. Aksi takdirde, MITRE'\u0131n kendi ATT&CK Navigator arac\u0131 gibi a\u00e7\u0131k kaynakl\u0131 ara\u00e7lar\u0131 kullanarak manuel haritalama yapabilirsiniz.<\/li>\n<\/ul>\n<h3>Personel E\u011fitimi ve Uzmanl\u0131k Eksikli\u011fi<\/h3>\n<p><strong>Zorluk:<\/strong> ATT&CK Framework'\u00fcn karma\u015f\u0131kl\u0131\u011f\u0131 ve s\u00fcrekli g\u00fcncellenen yap\u0131s\u0131, g\u00fcvenlik ekiplerinin bu \u00e7er\u00e7eveyi tam olarak anlamas\u0131n\u0131 ve etkin bir \u015fekilde kullanmas\u0131n\u0131 zorla\u015ft\u0131rabilir. Analistlerin, her tekni\u011fin ne anlama geldi\u011fini, hangi veri kaynaklar\u0131n\u0131 gerektirdi\u011fini ve nas\u0131l tespit edilece\u011fini bilmesi gerekir. Bu d\u00fczeyde uzmanl\u0131k, \u00f6zellikle k\u00fc\u00e7\u00fck veya orta \u00f6l\u00e7ekli kurulu\u015flarda bulunmayabilir.<\/p>\n<p><strong>\u00c7\u00f6z\u00fcm \u00d6nerisi:<\/strong><\/p>\n<ul>\n<li><strong>Kapsaml\u0131 E\u011fitim Programlar\u0131:<\/strong> G\u00fcvenlik ekiplerinize d\u00fczenli ATT&CK e\u011fitimleri sa\u011flay\u0131n. Bu e\u011fitimler, teorik bilgiyi ve pratik uygulamay\u0131 (\u00f6rne\u011fin, ATT&CK Navigator ile senaryo olu\u015fturma) i\u00e7ermelidir.<\/li>\n<li><strong>Dahili Bilgi Payla\u015f\u0131m\u0131:<\/strong> ATT&CK \u00fczerine bir \"topluluk prati\u011fi\" olu\u015fturarak bilgi ve deneyim payla\u015f\u0131m\u0131n\u0131 te\u015fvik edin. Haftal\u0131k toplant\u0131lar veya dahili wikiler bu konuda yard\u0131mc\u0131 olabilir.<\/li>\n<li><strong>Sertifikasyon ve Kurslar:<\/strong> Ekip \u00fcyelerinin ATT&CK ile ilgili sertifikasyon programlar\u0131na (\u00f6rne\u011fin, SANS SEC599: Defending Against APT with ATT&CK) kat\u0131lmas\u0131n\u0131 destekleyin.<\/li>\n<li><strong>Mentorluk:<\/strong> Deneyimli ATT&CK kullan\u0131c\u0131lar\u0131n\u0131n, daha az deneyimli ekip \u00fcyelerine rehberlik etmesini sa\u011flay\u0131n.<\/li>\n<\/ul>\n<h3>Kaynak K\u0131s\u0131tlamalar\u0131 ve \u00d6nceliklendirme<\/h3>\n<p><strong>Zorluk:<\/strong> ATT&CK matrisi y\u00fczlerce teknik i\u00e7erir ve her birini ayn\u0131 anda ele almaya \u00e7al\u0131\u015fmak, s\u0131n\u0131rl\u0131 insan ve finansal kaynaklara sahip kurulu\u015flar i\u00e7in imkans\u0131zd\u0131r. Her tekni\u011fi tespit etmek ve savunmak i\u00e7in gerekli ara\u00e7lar\u0131 ve s\u00fcre\u00e7leri olu\u015fturmak \u00f6nemli yat\u0131r\u0131mlar gerektirebilir.<\/p>\n<p><strong>\u00c7\u00f6z\u00fcm \u00d6nerisi:<\/strong><\/p>\n<ul>\n<li><strong>Tehdit \u0130stihbarat\u0131na Dayal\u0131 \u00d6nceliklendirme:<\/strong> Kurulu\u015funuzun kar\u015f\u0131 kar\u015f\u0131ya oldu\u011fu en olas\u0131 ve en y\u0131k\u0131c\u0131 tehditleri (\u00f6rne\u011fin, sekt\u00f6r\u00fcn\u00fcze \u00f6zg\u00fc APT'ler veya yayg\u0131n fidye yaz\u0131l\u0131mlar\u0131) belirlemek i\u00e7in tehdit istihbarat\u0131n\u0131 kullan\u0131n. Bu tehdit gruplar\u0131n\u0131n kulland\u0131\u011f\u0131 ATT&CK tekniklerine \u00f6ncelik verin.<\/li>\n<li><strong>Risk Temelli Yakla\u015f\u0131m:<\/strong> En kritik varl\u0131klar\u0131n\u0131z\u0131 ve i\u015f s\u00fcre\u00e7lerinizi hedefleyebilecek tekniklere odaklan\u0131n. \"Bu teknik ba\u015far\u0131l\u0131 olursa bize en b\u00fcy\u00fck zarar\u0131 ne verir?\" sorusunu sorun.<\/li>\n<li><strong>Mevcut Kontrollerle Haritalama:<\/strong> Mevcut g\u00fcvenlik kontrollerinizi ATT&CK matrisine haritalay\u0131n. Hangi teknikleri zaten tespit etti\u011finizi veya engelledi\u011finizi g\u00f6r\u00fcn. Ard\u0131ndan, en \u00e7ok bo\u015flu\u011fun oldu\u011fu ve riskin y\u00fcksek oldu\u011fu alanlara odaklan\u0131n.<\/li>\n<li><strong>A\u015famal\u0131 Uygulama:<\/strong> ATT&CK'\u0131 tek seferde tamamen uygulamaya \u00e7al\u0131\u015fmak yerine, k\u00fc\u00e7\u00fck, y\u00f6netilebilir par\u00e7alara ay\u0131r\u0131n. \u00d6rne\u011fin, \u00f6nce \"Initial Access\" takti\u011fine odaklan\u0131n, ard\u0131ndan \"Execution\" ve sonra di\u011ferlerine ge\u00e7in.<\/li>\n<\/ul>\n<div class=\"expert-tip\">\n    Uzman \u0130pucu: ATT&CK uygulaman\u0131za ba\u015flarken, hemen y\u00fczlerce tekni\u011fi kapsamak yerine, \u00f6nce en kritik 20 tekni\u011fi (\u00f6rne\u011fin, CISA'n\u0131n \"Top 20 Critical Security Controls\" gibi kaynaklardan ilham alarak) belirleyin ve bunlar\u0131n alg\u0131lama ve \u00f6nleme yeteneklerinizi test edin. Bu, h\u0131zl\u0131 kazan\u0131mlar elde etmenizi ve ekibinizin motivasyonunu art\u0131rman\u0131z\u0131 sa\u011flar.\n<\/div>\n<p>Bu zorluklar\u0131n \u00fcstesinden gelmek, ATT&CK Framework'\u00fcn tam potansiyelini ortaya \u00e7\u0131karmak i\u00e7in kritik \u00f6neme sahiptir. Sab\u0131r, s\u00fcrekli \u00f6\u011frenme ve stratejik \u00f6nceliklendirme ile kurulu\u015flar, bu g\u00fc\u00e7l\u00fc \u00e7er\u00e7eveyi etkili bir \u015fekilde benimseyebilir ve siber savunmalar\u0131n\u0131 \u00f6nemli \u00f6l\u00e7\u00fcde g\u00fc\u00e7lendirebilirler.<\/p>\n<h2>Sonu\u00e7: MITRE ATT&CK Neden Modern Siber G\u00fcvenli\u011fin Temel Ta\u015f\u0131?<\/h2>\n<p>Siber g\u00fcvenlikte, tehditlerin karma\u015f\u0131kl\u0131\u011f\u0131 ve h\u0131z\u0131 kar\u015f\u0131s\u0131nda geleneksel, reaktif yakla\u015f\u0131mlar\u0131n yetersiz kald\u0131\u011f\u0131 art\u0131k bir s\u0131r de\u011fil. \u0130\u015fte tam bu noktada MITRE ATT&CK Framework, sadece bir referans noktas\u0131 olmaktan \u00e7ok \u00f6te, siber g\u00fcvenlik profesyonelleri i\u00e7in bir rehber, bir ortak dil ve bir yol haritas\u0131 sunarak ger\u00e7ek anlamda bir devrim yaratm\u0131\u015ft\u0131r. Bu makale boyunca ele ald\u0131\u011f\u0131m\u0131z gibi, ATT&CK, kurulu\u015flar\u0131n siber sald\u0131rganlar\u0131n d\u00fc\u015f\u00fcnce yap\u0131s\u0131n\u0131 ve eylemlerini anlamalar\u0131n\u0131, mevcut savunmalar\u0131n\u0131 proaktif olarak test etmelerini ve g\u00fcvenlik duru\u015flar\u0131n\u0131 bilin\u00e7li bir \u015fekilde g\u00fc\u00e7lendirmelerini sa\u011flar.<\/p>\n<p>ATT&CK'\u0131n ba\u015far\u0131s\u0131n\u0131n ard\u0131ndaki temel neden, siber g\u00fcvenlik d\u00fcnyas\u0131na sa\u011flad\u0131\u011f\u0131 benzersiz de\u011fer \u00f6nerisidir:<\/p>\n<ul>\n<li><strong>Ortak Bir Dil:<\/strong> Siber g\u00fcvenlik ekibinden \u00fcst y\u00f6netime, farkl\u0131 seviyelerdeki payda\u015flar\u0131n sald\u0131rgan davran\u0131\u015flar\u0131 hakk\u0131nda ayn\u0131 dili konu\u015fmas\u0131n\u0131 sa\u011flar, b\u00f6ylece daha etkili ileti\u015fim ve koordinasyon te\u015fvik edilir.<\/li>\n<li><strong>Proaktif Savunma:<\/strong> Sald\u0131rganlar\u0131n taktik ve tekniklerini \u00f6nceden bilerek, kurulu\u015flar sald\u0131r\u0131lar ger\u00e7ekle\u015fmeden \u00f6nce zay\u0131f noktalar\u0131n\u0131 tespit edebilir ve savunmalar\u0131n\u0131 g\u00fc\u00e7lendirebilirler. Bu, reaktif olmaktan proaktif olmaya ge\u00e7i\u015f demektir.<\/li>\n<li><strong>\u00d6l\u00e7\u00fclebilir \u0130yile\u015ftirme:<\/strong> G\u00fcvenlik kontrollerinin hangi ATT&CK tekniklerini kapsad\u0131\u011f\u0131n\u0131 ve hangilerini kapsamad\u0131\u011f\u0131n\u0131 net bir \u015fekilde g\u00f6sterir. Bu sayede, g\u00fcvenlik yat\u0131r\u0131mlar\u0131 daha stratejik ve hedef odakl\u0131 hale gelir, ROI (yat\u0131r\u0131m getirisi) \u00f6l\u00e7\u00fclebilir.<\/li>\n<li><strong>Geli\u015fmi\u015f Tehdit Avc\u0131l\u0131\u011f\u0131 ve K\u0131rm\u0131z\u0131 Tak\u0131m Yetenekleri:<\/strong> Tehdit avc\u0131lar\u0131na spesifik TTP'leri aramak i\u00e7in somut ipu\u00e7lar\u0131 sunarken, k\u0131rm\u0131z\u0131 tak\u0131mlar\u0131n da ger\u00e7ek d\u00fcnya senaryolar\u0131na dayal\u0131 daha etkili tatbikatlar yapmas\u0131na olanak tan\u0131r.<\/li>\n<\/ul>\n<p>Ger\u00e7ek d\u00fcnya senaryolar\u0131nda g\u00f6rd\u00fc\u011f\u00fcm\u00fcz gibi, bir finans kurulu\u015funun fidye yaz\u0131l\u0131mlar\u0131na kar\u015f\u0131 savunmas\u0131ndan, perakende \u015firketinin k\u0131rm\u0131z\u0131 tak\u0131m tatbikatlar\u0131na kadar, ATT&CK, g\u00fcvenlik ekiplerine sadece bir sald\u0131r\u0131y\u0131 tespit etmekle kalmay\u0131p, ayn\u0131 zamanda sald\u0131r\u0131n\u0131n nedenini, nas\u0131l\u0131n\u0131 ve bir sonraki ad\u0131m\u0131n\u0131 anlama g\u00fcc\u00fc verir. Elbette, veri toplama, personel e\u011fitimi ve kaynak y\u00f6netimi gibi zorluklar mevcuttur; ancak do\u011fru stratejilerle ve a\u015famal\u0131 bir yakla\u015f\u0131mla bu engeller a\u015f\u0131labilir.<\/p>\n<p>Sonu\u00e7 olarak, MITRE ATT&CK Framework, modern siber g\u00fcvenli\u011fin vazge\u00e7ilmez bir par\u00e7as\u0131d\u0131r. Siber tehdit manzaras\u0131 s\u00fcrekli evrildik\u00e7e, ATT&CK gibi adaptif ve kapsaml\u0131 bir \u00e7er\u00e7eveye sahip olmak, kurulu\u015flar\u0131n sadece hayatta kalmas\u0131n\u0131 de\u011fil, ayn\u0131 zamanda bu zorlu ortamda geli\u015fmesini de sa\u011flayacakt\u0131r. Unutmay\u0131n, d\u00fc\u015fman\u0131 tan\u0131mak, zaferin ilk ad\u0131m\u0131d\u0131r. ATT&CK, bize d\u00fc\u015fman\u0131 en iyi \u015fekilde tan\u0131ma f\u0131rsat\u0131n\u0131 sunar.<\/p>\n<h2>S\u0131k\u00e7a Sorulan Sorular<\/h2>\n<h3>MITRE ATT&CK sadece b\u00fcy\u00fck kurulu\u015flar i\u00e7in mi ge\u00e7erlidir?<\/h3>\n<p>Hay\u0131r, kesinlikle de\u011fil. MITRE ATT&CK'\u0131n temel prensipleri ve metodolojisi, her boyuttan kurulu\u015f i\u00e7in uygulanabilir. K\u00fc\u00e7\u00fck ve orta \u00f6l\u00e7ekli i\u015fletmeler (KOB\u0130'ler) bile, matristeki en yayg\u0131n ve riskli tekniklere odaklanarak (\u00f6rne\u011fin, Initial Access, Execution), s\u0131n\u0131rl\u0131 kaynaklarla bile g\u00fcvenlik duru\u015flar\u0131n\u0131 \u00f6nemli \u00f6l\u00e7\u00fcde g\u00fc\u00e7lendirebilirler. ATT&CK Navigator gibi ara\u00e7lar, kaynaklar\u0131 k\u0131s\u0131tl\u0131 olanlar i\u00e7in bile ba\u015flang\u0131\u00e7 noktas\u0131 olabilir.<\/p>\n<h3>ATT&CK Framework, di\u011fer g\u00fcvenlik standartlar\u0131yla (ISO 27001, NIST CSF) nas\u0131l bir ili\u015fkiye sahiptir?<\/h3>\n<p>MITRE ATT&CK, di\u011fer g\u00fcvenlik standartlar\u0131 (ISO 27001, NIST CSF, PCI DSS) ile \u00e7at\u0131\u015fmaz, aksine onlar\u0131 tamamlar ve zenginle\u015ftirir. Bu standartlar genellikle \"ne yap\u0131lmas\u0131 gerekti\u011fini\" (\u00f6rne\u011fin, \"eri\u015fim kontrol\u00fc uygulay\u0131n\") genel d\u00fczeyde belirtirken, ATT&CK \"sald\u0131rganlar\u0131n bunu nas\u0131l atlayabilece\u011fini\" veya \"bu kontrol\u00fcn hangi teknikleri etkiledi\u011fini\" \u00e7ok daha detayl\u0131 bir \u015fekilde a\u00e7\u0131klar. ATT&CK, mevcut g\u00fcvenlik kontrollerinizin belirli sald\u0131r\u0131 tekniklerine kar\u015f\u0131 ne kadar etkili oldu\u011funu somut olarak de\u011ferlendirmenize yard\u0131mc\u0131 olarak, standartlar\u0131n gerektirdi\u011fi g\u00fcvenlik hedeflerine ula\u015fman\u0131z\u0131 kolayla\u015ft\u0131r\u0131r.<\/p>\n<h3>ATT&CK matrisi ne s\u0131kl\u0131kla g\u00fcncellenir?<\/h3>\n<p>MITRE ATT&CK Framework, siber tehdit ortam\u0131n\u0131n s\u00fcrekli de\u011fi\u015fen dinamiklerine ayak uydurmak amac\u0131yla d\u00fczenli olarak g\u00fcncellenir. Genellikle y\u0131lda iki kez (genellikle Nisan ve Ekim aylar\u0131nda) b\u00fcy\u00fck g\u00fcncellemeler yay\u0131nlan\u0131r. Bu g\u00fcncellemeler yeni taktikleri, teknikleri, tehdit gruplar\u0131n\u0131 ve yaz\u0131l\u0131mlar\u0131 i\u00e7erir. Bu d\u00fczenli g\u00fcncellemeler, \u00e7er\u00e7eveyi s\u00fcrekli olarak ilgili ve g\u00fcncel tutar, b\u00f6ylece g\u00fcvenlik profesyonelleri her zaman en son sald\u0131rgan davran\u0131\u015flar\u0131 hakk\u0131nda bilgi sahibi olabilir.<\/p>\n<h3>ATT&CK'\u0131 uygulamak i\u00e7in hangi ara\u00e7lara ihtiyac\u0131m var?<\/h3>\n<p>ATT&CK'\u0131 uygulamak i\u00e7in \u00f6zel bir \"ATT&CK arac\u0131\"na ihtiyac\u0131n\u0131z yoktur, ancak mevcut g\u00fcvenlik ara\u00e7lar\u0131n\u0131z\u0131n ve s\u00fcre\u00e7lerinizin ATT&CK ile uyumlu olmas\u0131 b\u00fcy\u00fck fayda sa\u011flar. Ba\u015flang\u0131\u00e7 i\u00e7in \u015funlar \u00f6nerilir:<\/p>\n<ul>\n<li><strong>Merkezi Log Y\u00f6netimi\/SIEM:<\/strong> Geni\u015f veri toplama ve korelasyon i\u00e7in.<\/li>\n<li><strong>U\u00e7 Nokta Alg\u0131lama ve Yan\u0131t (EDR) \u00c7\u00f6z\u00fcm\u00fc:<\/strong> U\u00e7 noktadaki davran\u0131\u015flar\u0131 izlemek ve TTP'leri tespit etmek i\u00e7in.<\/li>\n<li><strong>Tehdit \u0130stihbarat\u0131 Platformu:<\/strong> Sekt\u00f6re \u00f6zel tehditler ve TTP'ler hakk\u0131nda bilgi almak i\u00e7in.<\/li>\n<li><strong>ATT&CK Navigator:<\/strong> ATT&CK matrisini g\u00f6rselle\u015ftirmek, analiz etmek ve kendi haritalamalar\u0131n\u0131z\u0131 olu\u015fturmak i\u00e7in \u00fccretsiz bir ara\u00e7.<\/li>\n<li><strong>Otomasyon ve Orkestrasyon (SOAR) Ara\u00e7lar\u0131:<\/strong> ATT&CK tabanl\u0131 olay m\u00fcdahale s\u00fcre\u00e7lerini otomatikle\u015ftirmek i\u00e7in.<\/li>\n<\/ul>\n<p>\u00d6nemli olan, elinizdeki ara\u00e7lar\u0131 ATT&CK perspektifiyle kullanarak g\u00fcvenlik duru\u015funuzu de\u011ferlendirmek ve iyile\u015ftirmektir.<\/p>\n","protected":false},"excerpt":{"rendered":"G\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k siber g\u00fcvenlik ortam\u0131nda, tehditler her zamankinden daha sofistike ve s\u00fcrekli evrim ge\u00e7iriyor. Peki, geleneksel g\u00fcvenlik yakla\u015f\u0131mlar\u0131&hellip;","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"post-34721","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-genel","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.5 (Yoast SEO v25.3.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>MITRE ATT&amp;CK: Siber G\u00fcvenlikte Neden Vazge\u00e7ilmez?<\/title>\n<meta name=\"description\" content=\"G\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k siber g\u00fcvenlik ortam\u0131nda, tehditler her zamankinden daha sofistike ve s\u00fcrekli evrim ge\u00e7iriyor. Peki, geleneksel g\u00fcvenlik yakla\u015f\u0131mlar\u0131 siber sald\u0131r\u0131lar\u0131 neden durdurmakta zorlan\u0131yor ve modern savunmac\u0131lar bu dinamik tehditlere kar\u015f\u0131 nas\u0131l bir ad\u0131m \u00f6ne ge\u00e7ebilir? Bu yaz\u0131m\u0131zda, d\u00fcnya genelinde siber g\u00fcvenlik uzmanlar\u0131n\u0131n vazge\u00e7ilmezi haline gelen MITRE ATT&amp;CK Framework&#039;\u00fcn derinliklerine inecek, ger\u00e7ek d\u00fcnyadaki etkinli\u011fini ve kurulu\u015flar\u0131n savunma yeteneklerini nas\u0131l radikal bir \u015fekilde d\u00f6n\u00fc\u015ft\u00fcrd\u00fc\u011f\u00fcn\u00fc ke\u015ffedece\u011fiz. Siz de siber g\u00fcvenlik stratejinizi bir \u00fcst seviyeye ta\u015f\u0131mak istiyorsan\u0131z, do\u011fru yerdesiniz.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"MITRE ATT&amp;CK: Siber G\u00fcvenlikte Neden Vazge\u00e7ilmez?\" \/>\n<meta property=\"og:description\" content=\"G\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k siber g\u00fcvenlik ortam\u0131nda, tehditler her zamankinden daha sofistike ve s\u00fcrekli evrim ge\u00e7iriyor. Peki, geleneksel g\u00fcvenlik yakla\u015f\u0131mlar\u0131 siber sald\u0131r\u0131lar\u0131 neden durdurmakta zorlan\u0131yor ve modern savunmac\u0131lar bu dinamik tehditlere kar\u015f\u0131 nas\u0131l bir ad\u0131m \u00f6ne ge\u00e7ebilir? Bu yaz\u0131m\u0131zda, d\u00fcnya genelinde siber g\u00fcvenlik uzmanlar\u0131n\u0131n vazge\u00e7ilmezi haline gelen MITRE ATT&amp;CK Framework&#039;\u00fcn derinliklerine inecek, ger\u00e7ek d\u00fcnyadaki etkinli\u011fini ve kurulu\u015flar\u0131n savunma yeteneklerini nas\u0131l radikal bir \u015fekilde d\u00f6n\u00fc\u015ft\u00fcrd\u00fc\u011f\u00fcn\u00fc ke\u015ffedece\u011fiz. Siz de siber g\u00fcvenlik stratejinizi bir \u00fcst seviyeye ta\u015f\u0131mak istiyorsan\u0131z, do\u011fru yerdesiniz.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-21T03:31:15+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"28 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"MITRE ATT&#038;CK: Siber G\u00fcvenlikte Neden Vazge\u00e7ilmez?\",\"datePublished\":\"2025-11-21T03:31:15+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/\"},\"wordCount\":5415,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/\",\"name\":\"MITRE ATT&CK: Siber G\u00fcvenlikte Neden Vazge\u00e7ilmez?\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-11-21T03:31:15+00:00\",\"description\":\"G\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k siber g\u00fcvenlik ortam\u0131nda, tehditler her zamankinden daha sofistike ve s\u00fcrekli evrim ge\u00e7iriyor. Peki, geleneksel g\u00fcvenlik yakla\u015f\u0131mlar\u0131 siber sald\u0131r\u0131lar\u0131 neden durdurmakta zorlan\u0131yor ve modern savunmac\u0131lar bu dinamik tehditlere kar\u015f\u0131 nas\u0131l bir ad\u0131m \u00f6ne ge\u00e7ebilir? Bu yaz\u0131m\u0131zda, d\u00fcnya genelinde siber g\u00fcvenlik uzmanlar\u0131n\u0131n vazge\u00e7ilmezi haline gelen MITRE ATT&CK Framework'\u00fcn derinliklerine inecek, ger\u00e7ek d\u00fcnyadaki etkinli\u011fini ve kurulu\u015flar\u0131n savunma yeteneklerini nas\u0131l radikal bir \u015fekilde d\u00f6n\u00fc\u015ft\u00fcrd\u00fc\u011f\u00fcn\u00fc ke\u015ffedece\u011fiz. Siz de siber g\u00fcvenlik stratejinizi bir \u00fcst seviyeye ta\u015f\u0131mak istiyorsan\u0131z, do\u011fru yerdesiniz.\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"MITRE ATT&#038;CK: Siber G\u00fcvenlikte Neden Vazge\u00e7ilmez?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"MITRE ATT&CK: Siber G\u00fcvenlikte Neden Vazge\u00e7ilmez?","description":"G\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k siber g\u00fcvenlik ortam\u0131nda, tehditler her zamankinden daha sofistike ve s\u00fcrekli evrim ge\u00e7iriyor. Peki, geleneksel g\u00fcvenlik yakla\u015f\u0131mlar\u0131 siber sald\u0131r\u0131lar\u0131 neden durdurmakta zorlan\u0131yor ve modern savunmac\u0131lar bu dinamik tehditlere kar\u015f\u0131 nas\u0131l bir ad\u0131m \u00f6ne ge\u00e7ebilir? Bu yaz\u0131m\u0131zda, d\u00fcnya genelinde siber g\u00fcvenlik uzmanlar\u0131n\u0131n vazge\u00e7ilmezi haline gelen MITRE ATT&CK Framework'\u00fcn derinliklerine inecek, ger\u00e7ek d\u00fcnyadaki etkinli\u011fini ve kurulu\u015flar\u0131n savunma yeteneklerini nas\u0131l radikal bir \u015fekilde d\u00f6n\u00fc\u015ft\u00fcrd\u00fc\u011f\u00fcn\u00fc ke\u015ffedece\u011fiz. Siz de siber g\u00fcvenlik stratejinizi bir \u00fcst seviyeye ta\u015f\u0131mak istiyorsan\u0131z, do\u011fru yerdesiniz.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/","og_locale":"tr_TR","og_type":"article","og_title":"MITRE ATT&CK: Siber G\u00fcvenlikte Neden Vazge\u00e7ilmez?","og_description":"G\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k siber g\u00fcvenlik ortam\u0131nda, tehditler her zamankinden daha sofistike ve s\u00fcrekli evrim ge\u00e7iriyor. Peki, geleneksel g\u00fcvenlik yakla\u015f\u0131mlar\u0131 siber sald\u0131r\u0131lar\u0131 neden durdurmakta zorlan\u0131yor ve modern savunmac\u0131lar bu dinamik tehditlere kar\u015f\u0131 nas\u0131l bir ad\u0131m \u00f6ne ge\u00e7ebilir? Bu yaz\u0131m\u0131zda, d\u00fcnya genelinde siber g\u00fcvenlik uzmanlar\u0131n\u0131n vazge\u00e7ilmezi haline gelen MITRE ATT&CK Framework'\u00fcn derinliklerine inecek, ger\u00e7ek d\u00fcnyadaki etkinli\u011fini ve kurulu\u015flar\u0131n savunma yeteneklerini nas\u0131l radikal bir \u015fekilde d\u00f6n\u00fc\u015ft\u00fcrd\u00fc\u011f\u00fcn\u00fc ke\u015ffedece\u011fiz. Siz de siber g\u00fcvenlik stratejinizi bir \u00fcst seviyeye ta\u015f\u0131mak istiyorsan\u0131z, do\u011fru yerdesiniz.","og_url":"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-11-21T03:31:15+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"28 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"MITRE ATT&#038;CK: Siber G\u00fcvenlikte Neden Vazge\u00e7ilmez?","datePublished":"2025-11-21T03:31:15+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/"},"wordCount":5415,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/","url":"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/","name":"MITRE ATT&CK: Siber G\u00fcvenlikte Neden Vazge\u00e7ilmez?","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-11-21T03:31:15+00:00","description":"G\u00fcn\u00fcm\u00fcz\u00fcn karma\u015f\u0131k siber g\u00fcvenlik ortam\u0131nda, tehditler her zamankinden daha sofistike ve s\u00fcrekli evrim ge\u00e7iriyor. Peki, geleneksel g\u00fcvenlik yakla\u015f\u0131mlar\u0131 siber sald\u0131r\u0131lar\u0131 neden durdurmakta zorlan\u0131yor ve modern savunmac\u0131lar bu dinamik tehditlere kar\u015f\u0131 nas\u0131l bir ad\u0131m \u00f6ne ge\u00e7ebilir? Bu yaz\u0131m\u0131zda, d\u00fcnya genelinde siber g\u00fcvenlik uzmanlar\u0131n\u0131n vazge\u00e7ilmezi haline gelen MITRE ATT&CK Framework'\u00fcn derinliklerine inecek, ger\u00e7ek d\u00fcnyadaki etkinli\u011fini ve kurulu\u015flar\u0131n savunma yeteneklerini nas\u0131l radikal bir \u015fekilde d\u00f6n\u00fc\u015ft\u00fcrd\u00fc\u011f\u00fcn\u00fc ke\u015ffedece\u011fiz. Siz de siber g\u00fcvenlik stratejinizi bir \u00fcst seviyeye ta\u015f\u0131mak istiyorsan\u0131z, do\u011fru yerdesiniz.","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/mitre-attck-siber-guvenlikte-neden-vazgecilmez\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"MITRE ATT&#038;CK: Siber G\u00fcvenlikte Neden Vazge\u00e7ilmez?"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/34721","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=34721"}],"version-history":[{"count":0,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/34721\/revisions"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=34721"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=34721"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=34721"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}