A\u011f g\u00fcvenli\u011fi ve izlemesi, g\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda kritik bir \u00f6neme sahiptir. Bu alanda \u00f6ne \u00e7\u0131kan g\u00fc\u00e7l\u00fc ara\u00e7lardan biri de Bro olarak bilinen, \u015fimdiki ad\u0131yla Zeek’tir. Zeek, a\u011f trafi\u011fini derinlemesine analiz eden, y\u00fcksek performansl\u0131, a\u00e7\u0131k kaynakl\u0131 bir a\u011f g\u00fcvenlik monit\u00f6r\u00fcd\u00fcr (NSM). Geleneksel IDS\/IPS sistemlerinin \u00f6tesine ge\u00e7erek, a\u011f\u0131n\u0131zdaki her t\u00fcrl\u00fc etkinli\u011fi (ba\u011flant\u0131lar, DNS sorgular\u0131, HTTP istekleri, SSL\/TLS el s\u0131k\u0131\u015fmalar\u0131 vb.) kapsaml\u0131 bir \u015fekilde kaydeder ve bu verilerden g\u00fcvenlik analistleri i\u00e7in anlaml\u0131 bilgiler \u00e7\u0131kar\u0131r.<\/p>\n
Zeek’in temel g\u00fcc\u00fc, a\u011f trafi\u011fini anlaml\u0131 olaylara d\u00f6n\u00fc\u015ft\u00fcrme yetene\u011finde yatar. Bu olaylar, \u00f6zel bir betik dili (Zeek Script Language) kullan\u0131larak karma\u015f\u0131k analizler ve kural tabanl\u0131 tespitler i\u00e7in i\u015flenebilir. Bu sayede, k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m aktiviteleri, politika ihlalleri, veri s\u0131z\u0131nt\u0131lar\u0131 ve di\u011fer \u015f\u00fcpheli davran\u0131\u015flar gibi tehditler proaktif bir \u015fekilde tespit edilebilir. Ubuntu 16.04, Zeek’in kurulumu i\u00e7in o d\u00f6nemde yayg\u0131n olarak kullan\u0131lan ve bir\u00e7ok sunucu ortam\u0131nda hala mevcut olan sa\u011flam bir i\u015fletim sistemidir. Bu rehberde, Zeek’i (eski ad\u0131yla Bro) Ubuntu 16.04 sisteminize kaynak koddan derleyerek nas\u0131l kuraca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m \u00f6\u011freneceksiniz.<\/p>\n
Zeek kurulumuna ba\u015flamadan \u00f6nce sisteminizin g\u00fcncel oldu\u011fundan ve gerekli ba\u011f\u0131ml\u0131l\u0131klar\u0131n y\u00fckl\u00fc oldu\u011fundan emin olmal\u0131s\u0131n\u0131z. Bu ad\u0131mlar, derleme s\u00fcrecinin sorunsuz ilerlemesi i\u00e7in hayati \u00f6neme sahiptir.<\/p>\n
\u0130lk olarak, Ubuntu sisteminizin paket listesini g\u00fcncelleyin ve mevcut t\u00fcm paketleri en son s\u00fcr\u00fcmlerine y\u00fckseltin:<\/p>\n
sudo apt update\nsudo apt upgrade -y<\/code><\/pre>\nGerekli Ba\u011f\u0131ml\u0131l\u0131klar\u0131n Kurulumu<\/h3>\n
Zeek’i kaynak koddan derlemek i\u00e7in \u00e7e\u015fitli geli\u015ftirme ara\u00e7lar\u0131na ve k\u00fct\u00fcphanelere ihtiyac\u0131m\u0131z olacak. A\u015fa\u011f\u0131daki komut, Zeek’in ba\u015far\u0131l\u0131 bir \u015fekilde derlenmesi i\u00e7in gereken t\u00fcm ba\u011f\u0131ml\u0131l\u0131klar\u0131 y\u00fckleyecektir:<\/p>\n
sudo apt install -y git cmake make gcc g++ libpcap-dev libssl-dev libjson-c-dev bison flex libgeoip-dev swig python-dev curl<\/code><\/pre>\n\ngit<\/code>: Zeek kaynak kodunu GitHub’dan klonlamak i\u00e7in.<\/li>\ncmake<\/code>: Derleme yap\u0131land\u0131rmas\u0131n\u0131 y\u00f6netmek i\u00e7in.<\/li>\nmake<\/code>: Kaynak kodu derlemek i\u00e7in.<\/li>\ngcc<\/code>, g++<\/code>: C\/C++ derleyicileri.<\/li>\nlibpcap-dev<\/code>: A\u011f paketlerini yakalamak i\u00e7in.<\/li>\nlibssl-dev<\/code>: SSL\/TLS deste\u011fi i\u00e7in.<\/li>\nlibjson-c-dev<\/code>: JSON deste\u011fi i\u00e7in.<\/li>\nbison<\/code>, flex<\/code>: Zeek betik dilini ayr\u0131\u015ft\u0131rmak i\u00e7in.<\/li>\nlibgeoip-dev<\/code>: Co\u011frafi konum verilerini kullanmak i\u00e7in (IP adreslerinden \u00fclke bilgisi gibi).<\/li>\nswig<\/code>: Zeek’in Python gibi di\u011fer dillerle entegrasyonu i\u00e7in.<\/li>\npython-dev<\/code>: Python entegrasyonu i\u00e7in gerekli Python geli\u015ftirme dosyalar\u0131.<\/li>\n<\/ul>\nSistem Kaynaklar\u0131<\/h3>\n
Zeek, \u00f6zellikle y\u00fcksek trafikli a\u011flarda \u00e7al\u0131\u015f\u0131rken \u00f6nemli miktarda CPU, RAM ve disk alan\u0131 t\u00fcketebilir. Kurulum yapaca\u011f\u0131n\u0131z sunucunun yeterli kaynaklara sahip oldu\u011fundan emin olun:<\/p>\n
\n- CPU:<\/strong> \u00d6zellikle y\u00fcksek h\u0131zda \u00e7al\u0131\u015fan a\u011flar i\u00e7in birden fazla \u00e7ekirdekli g\u00fc\u00e7l\u00fc bir i\u015flemci \u00f6nerilir.<\/li>\n
- RAM:<\/strong> A\u011f trafi\u011finin hacmine ba\u011fl\u0131 olarak 8GB veya daha fazla RAM idealdir. K\u00fc\u00e7\u00fck ortamlar i\u00e7in 4GB yeterli olabilir.<\/li>\n
- Disk Alan\u0131:<\/strong> Zeek, t\u00fcm a\u011f etkinliklerini loglad\u0131\u011f\u0131 i\u00e7in k\u0131sa s\u00fcrede \u00e7ok fazla disk alan\u0131 kullanabilir. En az 50GB bo\u015f alan bulundurman\u0131z, uzun vadede loglar\u0131 saklamak i\u00e7in ise daha fazla alan ay\u0131rman\u0131z \u00f6nerilir.<\/li>\n<\/ul>\n
Bro\/Zeek Kaynak Kodunu \u0130ndirme ve Derleme<\/h2>\n
Gerekli t\u00fcm ba\u011f\u0131ml\u0131l\u0131klar y\u00fcklendikten sonra, Zeek’in kaynak kodunu indirip derleme i\u015flemine ge\u00e7ebiliriz.<\/p>\n
Zeek Kaynak Kodunu \u0130ndirme<\/h3>\n
Zeek’in en g\u00fcncel kararl\u0131 s\u00fcr\u00fcm\u00fcn\u00fc GitHub deposundan klonlayarak edinebiliriz. Genellikle \/opt<\/code> veya \/usr\/local\/src<\/code> gibi bir dizin bu t\u00fcr kaynak kodlar\u0131 i\u00e7in tercih edilir. Biz \/opt<\/code> dizinini kullanal\u0131m:<\/p>\ncd \/opt\nsudo git clone --recursive https:\/\/github.com\/zeek\/zeek\ncd zeek<\/code><\/pre>\n--recursive<\/code> bayra\u011f\u0131, Zeek’in ihtiya\u00e7 duydu\u011fu t\u00fcm alt mod\u00fclleri de klonlamas\u0131n\u0131 sa\u011flar.<\/p>\nDerleme ve Kurulum<\/h3>\n
Kaynak kodu indirdikten sonra, cmake<\/code> ile derleme yap\u0131land\u0131rmas\u0131n\u0131 olu\u015fturmal\u0131, ard\u0131ndan make<\/code> ile derlemeli ve son olarak make install<\/code> ile sistemi kurmal\u0131y\u0131z.<\/p>\nsudo mkdir build\ncd build\nsudo cmake .. -DCMAKE_INSTALL_PREFIX=\/usr\/local\/zeek -DBROKER_DISABLE_TESTS=ON -DBUILD_SHARED_LIBS=ON\nsudo make -j$(nproc)\nsudo make install<\/code><\/pre>\n\nsudo mkdir build && cd build<\/code>: Derleme dosyalar\u0131n\u0131 ayr\u0131 bir dizinde tutmak iyi bir uygulamad\u0131r.<\/li>\nsudo cmake .. -DCMAKE_INSTALL_PREFIX=\/usr\/local\/zeek -DBROKER_DISABLE_TESTS=ON -DBUILD_SHARED_LIBS=ON<\/code>:\n\n..<\/code>: cmake<\/code>‘e \u00fcst dizindeki (\/opt\/zeek<\/code>) CMakeLists.txt<\/code> dosyas\u0131n\u0131 kullanmas\u0131n\u0131 s\u00f6yler.<\/li>\n-DCMAKE_INSTALL_PREFIX=\/usr\/local\/zeek<\/code>: Zeek’in kurulaca\u011f\u0131 dizini belirtir. Bu, Zeek dosyalar\u0131n\u0131 sistem PATH’inden ayr\u0131 tutmak i\u00e7in iyi bir y\u00f6ntemdir.<\/li>\n-DBROKER_DISABLE_TESTS=ON<\/code>: Broker bile\u015feninin testlerini devre d\u0131\u015f\u0131 b\u0131rak\u0131r, derleme s\u00fcresini k\u0131salt\u0131r.<\/li>\n-DBUILD_SHARED_LIBS=ON<\/code>: Payla\u015f\u0131ml\u0131 k\u00fct\u00fcphaneler olu\u015fturulmas\u0131n\u0131 sa\u011flar, bu baz\u0131 eklentiler i\u00e7in gerekli olabilir.<\/li>\n<\/ul>\n<\/li>\nsudo make -j$(nproc)<\/code>: make<\/code> komutu, kaynak kodu derler. -j$(nproc)<\/code> parametresi, sisteminizdeki CPU \u00e7ekirde\u011fi say\u0131s\u0131 kadar paralel derleme i\u015flemi ba\u015flatarak derleme s\u00fcresini h\u0131zland\u0131r\u0131r.<\/li>\nsudo make install<\/code>: Derlenmi\u015f dosyalar\u0131 CMAKE_INSTALL_PREFIX<\/code> ile belirtilen \/usr\/local\/zeek<\/code> dizinine kopyalar.<\/li>\n<\/ul>\nPATH Ortam De\u011fi\u015fkenini Ayarlama<\/h3>\n
Zeek komutlar\u0131n\u0131 (zeekctl<\/code>, zeek<\/code> vb.) her yerden \u00e7al\u0131\u015ft\u0131rabilmek i\u00e7in Zeek’in bin dizinini sistem PATH’ine eklememiz gerekir. Bunu kal\u0131c\u0131 hale getirmek i\u00e7in kullan\u0131c\u0131 profil dosyan\u0131za ekleyebilirsiniz:<\/p>\necho 'export PATH=\/usr\/local\/zeek\/bin:$PATH' >> ~\/.bashrc\nsource ~\/.bashrc<\/code><\/pre>\nBu komutlar, Zeek’in bin dizinini ~\/.bashrc<\/code> dosyan\u0131za ekler ve ard\u0131ndan bu dosyay\u0131 yeniden y\u00fckleyerek de\u011fi\u015fiklikleri mevcut oturumunuza uygular. Yeni bir terminal a\u00e7t\u0131\u011f\u0131n\u0131zda veya oturum a\u00e7t\u0131\u011f\u0131n\u0131zda PATH otomatik olarak ayarlanm\u0131\u015f olacakt\u0131r.<\/p>\nBro\/Zeek Yap\u0131land\u0131rmas\u0131<\/h2>\n
Zeek’i ba\u015far\u0131yla kurduktan sonra, onu a\u011f\u0131n\u0131z\u0131 izlemek i\u00e7in yap\u0131land\u0131rman\u0131z gerekir. Temel yap\u0131land\u0131rma dosyalar\u0131 \/usr\/local\/zeek\/etc\/<\/code> dizininde bulunur.<\/p>\nA\u011f Aray\u00fcz\u00fc Ayarlar\u0131 (node.cfg)<\/h3>\n
Zeek’in hangi a\u011f aray\u00fcz\u00fcn\u00fc dinlemesi gerekti\u011fini belirtmelisiniz. Bu, node.cfg<\/code> dosyas\u0131nda yap\u0131l\u0131r.<\/p>\nsudo nano \/usr\/local\/zeek\/etc\/node.cfg<\/code><\/pre>\nDosyan\u0131n i\u00e7eri\u011fi a\u015fa\u011f\u0131daki gibi g\u00f6r\u00fcnmelidir. Kendi a\u011f aray\u00fcz\u00fcn\u00fcze g\u00f6re interface<\/code> de\u011ferini d\u00fczenleyin. Ubuntu 16.04’te bu genellikle eth0<\/code> veya ens33<\/code> gibi bir isim olabilir. A\u011f aray\u00fcz\u00fcn\u00fcz\u00fc ip a<\/code> veya ifconfig<\/code> komutuyla \u00f6\u011frenebilirsiniz.<\/p>\n[zeek]\ntype=standalone\nhost=localhost\ninterface=eth0 # Kendi a\u011f aray\u00fcz\u00fcn\u00fcz\u00fc buraya yaz\u0131n (\u00f6rne\u011fin: ens33, enp0s3)<\/code><\/pre>\nCtrl+X<\/code>, Y<\/code> ve Enter<\/code> tu\u015flar\u0131na basarak dosyay\u0131 kaydedip kapat\u0131n.<\/p>\nZeekctl Ayarlar\u0131 (zeekctl.cfg)<\/h3>\n
zeekctl.cfg<\/code> dosyas\u0131, Zeek kontrol komut dosyas\u0131n\u0131n davran\u0131\u015f\u0131n\u0131 yap\u0131land\u0131r\u0131r. Log dizini, e-posta bildirimleri gibi ayarlar\u0131 buradan yapabilirsiniz.<\/p>\nsudo nano \/usr\/local\/zeek\/etc\/zeekctl.cfg<\/code><\/pre>\nA\u015fa\u011f\u0131daki sat\u0131rlar\u0131 kontrol edin ve gerekti\u011finde d\u00fczenleyin:<\/p>\n
\n- Log Dizini:<\/strong> Zeek’in log dosyalar\u0131n\u0131 nereye yazaca\u011f\u0131n\u0131 belirtir. Genellikle
\/usr\/local\/zeek\/logs<\/code> veya daha standart bir konum olan \/var\/log\/zeek<\/code> tercih edilir. E\u011fer \/var\/log\/zeek<\/code> kullanacaksan\u0131z, bu dizini olu\u015fturman\u0131z ve Zeek kullan\u0131c\u0131s\u0131na yazma izni vermeniz gerekebilir.<\/li>\n<\/ul>\n# Log directory\n@redef Zeek::LogDir = \"\/usr\/local\/zeek\/logs\";\nVeya daha standart bir konum i\u00e7in:<\/h2>\n@redef Zeek::LogDir = \"\/var\/log\/zeek\";<\/code><\/pre>\n<\/h2>\n
E\u011fer \/var\/log\/zeek<\/code> kullanmaya karar verirseniz:<\/p>\nsudo mkdir -p \/var\/log\/zeek\nsudo chown -R zeek:zeek \/var\/log\/zeek # Zeek'i hangi kullan\u0131c\u0131 ile \u00e7al\u0131\u015ft\u0131r\u0131yorsan\u0131z o kullan\u0131c\u0131ya yetki verin. Genellikle root ile \u00e7al\u0131\u015f\u0131r.<\/code><\/pre>\nBu rehberde root ile \u00e7al\u0131\u015ft\u0131\u011f\u0131m\u0131z\u0131 varsayarsak, \/usr\/local\/zeek\/logs<\/code> varsay\u0131lan dizin yeterli olacakt\u0131r.<\/p>\n\n- E-posta Bildirimleri:<\/strong> Zeek, belirli olaylar i\u00e7in e-posta bildirimleri g\u00f6nderebilir. Bu \u00f6zelli\u011fi kullanmak isterseniz
email_alarms_to<\/code> sat\u0131r\u0131n\u0131 kendi e-posta adresinizle g\u00fcncelleyebilirsiniz.<\/li>\n<\/ul>\n# Email addresses for alarms\nemail_alarms_to = you@example.com<\/code><\/pre>\nAyarlar\u0131 kaydettikten sonra dosyay\u0131 kapat\u0131n.<\/p>\n
Bro\/Zeek’i \u00c7al\u0131\u015ft\u0131rma ve Test Etme<\/h2>\n
Yap\u0131land\u0131rma tamamland\u0131ktan sonra Zeek’i ba\u015flatabilir ve d\u00fczg\u00fcn \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 kontrol edebiliriz.<\/p>\n
Zeek’i Ba\u015flatma<\/h3>\n
Zeek’i ba\u015flatmak i\u00e7in zeekctl<\/code> komutunu kullan\u0131r\u0131z. \u0130lk \u00e7al\u0131\u015ft\u0131rmada, Zeek’in da\u011f\u0131t\u0131m\u0131n\u0131 (deploy) yapman\u0131z gerekir:<\/p>\nsudo zeekctl deploy<\/code><\/pre>\nBu komut, Zeek yap\u0131land\u0131rmas\u0131n\u0131 derler ve Zeek s\u00fcre\u00e7lerini ba\u015flatmak i\u00e7in gerekli dosyalar\u0131 olu\u015fturur. Daha sonra Zeek’i ba\u015flatabilirsiniz:<\/p>\n
sudo zeekctl start<\/code><\/pre>\nE\u011fer her \u015fey yolundaysa, Zeek a\u011f\u0131n\u0131z\u0131 izlemeye ba\u015flayacakt\u0131r.<\/p>\n
Durumu Kontrol Etme<\/h3>\n
Zeek’in durumunu kontrol etmek i\u00e7in a\u015fa\u011f\u0131daki komutu kullan\u0131n:<\/p>\n
sudo zeekctl status<\/code><\/pre>\n\u00c7\u0131kt\u0131da zeek<\/code> s\u00fcrecinin running<\/code> oldu\u011funu g\u00f6rmelisiniz.<\/p>\nLoglar\u0131 Kontrol Etme<\/h3>\n
Zeek, a\u011f trafi\u011fini analiz ettik\u00e7e \u00e7e\u015fitli log dosyalar\u0131 olu\u015fturur. Bu loglar varsay\u0131lan olarak \/usr\/local\/zeek\/logs\/current\/<\/code> dizininde bulunur. current<\/code> sembolik bir ba\u011flant\u0131d\u0131r ve en son log dizinine i\u015faret eder.<\/p>\nls -l \/usr\/local\/zeek\/logs\/current\/<\/code><\/pre>\nBurada conn.log<\/code>, http.log<\/code>, dns.log<\/code> gibi dosyalar\u0131 g\u00f6rmelisiniz. Bu dosyalar, Zeek’in a\u011f trafi\u011fini ba\u015far\u0131yla yakalay\u0131p analiz etti\u011finin bir g\u00f6stergesidir. Log dosyalar\u0131n\u0131n i\u00e7eri\u011fini g\u00f6r\u00fcnt\u00fclemek i\u00e7in tail -f<\/code> komutunu kullanabilirsiniz:<\/p>\ntail -f \/usr\/local\/zeek\/logs\/current\/conn.log<\/code><\/pre>\n\u015eimdi ba\u015fka bir terminalden veya ayn\u0131 makineden internete y\u00f6nelik basit bir trafik olu\u015fturun (\u00f6rne\u011fin, ping google.com<\/code>, curl example.com<\/code>, web taray\u0131c\u0131n\u0131zdan bir siteye gidin). Log dosyas\u0131nda yeni kay\u0131tlar\u0131n belirdi\u011fini g\u00f6rmelisiniz.<\/p>\nZeek’i Durdurma<\/h3>\n
Zeek’i durdurmak i\u00e7in:<\/p>\n
sudo zeekctl stop<\/code><\/pre>\nEk Bilgiler ve \u0130pu\u00e7lar\u0131<\/h2>\n\u0130zleme Modu (Promiscuous Mode)<\/h3>\n
Zeek’in a\u011fdaki t\u00fcm trafi\u011fi g\u00f6rebilmesi i\u00e7in a\u011f aray\u00fcz\u00fcn\u00fcn “promiscuous mode” (izleme modu) a\u00e7\u0131k olmas\u0131 gerekir. Genellikle Zeek, bu modu otomatik olarak a\u00e7maya \u00e7al\u0131\u015f\u0131r. Ancak baz\u0131 durumlarda manuel olarak ayarlaman\u0131z gerekebilir. Aray\u00fcz\u00fcn\u00fcz\u00fcn izleme modunda olup olmad\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in:<\/p>\n
ip link show eth0 # veya kendi aray\u00fcz ad\u0131n\u0131z<\/code><\/pre>\n\u00c7\u0131kt\u0131da PROMISC<\/code> bayra\u011f\u0131n\u0131 g\u00f6rmelisiniz. E\u011fer g\u00f6rm\u00fcyorsan\u0131z, manuel olarak a\u00e7may\u0131 deneyebilirsiniz:<\/p>\nsudo ip link set dev eth0 promisc on<\/code><\/pre>\nPerformans Optimizasyonu<\/h3>\n\n- NIC Offloading:<\/strong> A\u011f kart\u0131n\u0131z\u0131n donan\u0131m bo\u015faltma (checksum offloading, large receive offloading vb.) \u00f6zelliklerini kapatmak, Zeek’in daha do\u011fru ve eksiksiz paket yakalamas\u0131na yard\u0131mc\u0131 olabilir. Bu ayarlar genellikle
ethtool<\/code> ile yap\u0131l\u0131r.<\/li>\n- BPF Filtreleri:<\/strong> Sadece belirli bir trafi\u011fi izlemek istiyorsan\u0131z, Zeek’i Berkeley Packet Filter (BPF) filtreleriyle yap\u0131land\u0131rabilirsiniz. Bu, gereksiz trafi\u011fi atarak Zeek’in kaynak kullan\u0131m\u0131n\u0131 azalt\u0131r. \u00d6rne\u011fin, sadece HTTP trafi\u011fini izlemek i\u00e7in
node.cfg<\/code> dosyan\u0131za pcap_filter = \"port 80\"<\/code> ekleyebilirsiniz.<\/li>\n- Donan\u0131m:<\/strong> Y\u00fcksek h\u0131zl\u0131 (10Gbps+) a\u011flar i\u00e7in \u00f6zel a\u011f kartlar\u0131 (\u00f6rne\u011fin, Intel X520\/X540 serisi) ve yeterli CPU\/RAM \u00f6nemlidir.<\/li>\n<\/ul>\n
G\u00fcncelleme<\/h3>\n
Zeek’i yeni bir s\u00fcr\u00fcme g\u00fcncellemek i\u00e7in, kaynak kodu klonlad\u0131\u011f\u0131n\u0131z dizine gidip git pull<\/code> yaparak en son de\u011fi\u015fiklikleri \u00e7ekebilir, ard\u0131ndan yukar\u0131daki derleme ve kurulum ad\u0131mlar\u0131n\u0131 tekrarlayabilirsiniz:<\/p>\ncd \/opt\/zeek\nsudo git pull --recursive\ncd build\nsudo cmake .. -DCMAKE_INSTALL_PREFIX=\/usr\/local\/zeek -DBROKER_DISABLE_TESTS=ON -DBUILD_SHARED_LIBS=ON\nsudo make -j$(nproc)\nsudo make install\nsudo zeekctl deploy\nsudo zeekctl restart<\/code><\/pre>\nLog Y\u00f6netimi ve Entegrasyon<\/h3>\n
Zeek’in \u00fcretti\u011fi loglar olduk\u00e7a hacimli olabilir. Bu loglar\u0131 etkili bir \u015fekilde y\u00f6netmek i\u00e7in:<\/p>\n
\n- Log Rotation:<\/strong>
logrotate<\/code> gibi ara\u00e7larla Zeek loglar\u0131n\u0131 d\u00fczenli olarak s\u0131k\u0131\u015ft\u0131r\u0131p ar\u015fivleyebilir veya silebilirsiniz. Zeek’in kendi loglama mekanizmas\u0131 da vard\u0131r, ancak ek bir y\u00f6netim faydal\u0131 olabilir.<\/li>\n- SIEM Entegrasyonu:<\/strong> Zeek loglar\u0131 genellikle JSON veya TSV (Tab Separated Values) format\u0131nda \u00fcretilir. Bu formatlar, Splunk, ELK Stack (Elasticsearch, Logstash, Kibana) veya di\u011fer SIEM (Security Information and Event Management) \u00e7\u00f6z\u00fcmlerine kolayca entegre edilebilir. Bu, Zeek verilerini di\u011fer g\u00fcvenlik olaylar\u0131yla korele etmenizi sa\u011flar.<\/li>\n<\/ul>\n
Sonu\u00e7 ve S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h2>\n
Bu rehberde, Ubuntu 16.04 i\u015fletim sistemi \u00fczerinde Zeek’i (eski ad\u0131yla Bro) kaynak koddan nas\u0131l kuraca\u011f\u0131n\u0131z\u0131, temel yap\u0131land\u0131rmalar\u0131 nas\u0131l yapaca\u011f\u0131n\u0131z\u0131 ve sistemi nas\u0131l test edece\u011finizi ad\u0131m ad\u0131m \u00f6\u011frendiniz. Zeek, a\u011f g\u00fcvenli\u011fi izlemesi ve analizi i\u00e7in inan\u0131lmaz derecede g\u00fc\u00e7l\u00fc ve esnek bir ara\u00e7t\u0131r. Kurulumun ard\u0131ndan, Zeek’in geni\u015f betik k\u00fct\u00fcphanesini ve \u00f6zelle\u015ftirme yeteneklerini ke\u015ffetmek, a\u011f\u0131n\u0131zdaki tehditleri daha etkin bir \u015fekilde tespit etmenizi sa\u011flayacakt\u0131r.<\/p>\n
SSS (S\u0131k\u00e7a Sorulan Sorular)<\/h3>\nBro ve Zeek aras\u0131ndaki fark nedir?<\/h4>\n
Bro, 2018 y\u0131l\u0131nda “Zeek” olarak yeniden markaland\u0131r\u0131ld\u0131. \u0130sim de\u011fi\u015fikli\u011finin nedeni, markan\u0131n daha geni\u015f bir kitleye ula\u015fmas\u0131n\u0131 sa\u011flamak ve ismin olumsuz \u00e7a\u011fr\u0131\u015f\u0131mlar\u0131n\u0131 gidermekti. Temelde ayn\u0131 yaz\u0131l\u0131md\u0131r; Zeek, Bro’nun devam\u0131 ve daha geli\u015fmi\u015f s\u00fcr\u00fcm\u00fcd\u00fcr.<\/p>\n
Zeek’i neden Ubuntu 16.04’e kurmal\u0131y\u0131m? Daha yeni s\u00fcr\u00fcmler varken?<\/h4>\n
Ubuntu 16.04, art\u0131k EOL (End-of-Life) olmas\u0131na ra\u011fmen, baz\u0131 eski sistemlerde, \u00f6zel projelerde veya belirli uyumluluk gereksinimleri olan ortamlarda hala kullan\u0131l\u0131yor olabilir. Bu rehber, bu t\u00fcr senaryolarda Zeek kurulumuna ihtiya\u00e7 duyan kullan\u0131c\u0131lar i\u00e7in haz\u0131rlanm\u0131\u015ft\u0131r. Yeni kurulumlar i\u00e7in her zaman daha g\u00fcncel ve desteklenen bir i\u015fletim sistemi (\u00f6rne\u011fin Ubuntu 20.04 veya 22.04) kullanman\u0131z \u00f6nerilir.<\/p>\n
Kurulumdan sonra Zeek \u00e7al\u0131\u015fm\u0131yor veya log \u00fcretmiyor, ne yapmal\u0131y\u0131m?<\/h4>\n
\u015eu ad\u0131mlar\u0131 kontrol edin:<\/p>\n
\nsudo zeekctl status<\/code> komutuyla Zeek s\u00fcre\u00e7lerinin \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 kontrol edin.<\/li>\n\/usr\/local\/zeek\/etc\/node.cfg<\/code> dosyas\u0131ndaki interface<\/code> ayar\u0131n\u0131n do\u011fru oldu\u011fundan ve Zeek’in dinlemesi gereken a\u011f aray\u00fcz\u00fcn\u00fc g\u00f6sterdi\u011finden emin olun.<\/li>\n- A\u011f aray\u00fcz\u00fcn\u00fcn izleme modunda (promiscuous mode) oldu\u011fundan emin olun (
sudo ip link set dev eth0 promisc on<\/code>).<\/li>\n\/usr\/local\/zeek\/logs\/current\/reporter.log<\/code> ve stderr.log<\/code> dosyalar\u0131n\u0131 kontrol ederek hata mesajlar\u0131 aray\u0131n.<\/li>\n- Yeterli disk alan\u0131 olup olmad\u0131\u011f\u0131n\u0131 kontrol edin.<\/li>\n
- Selinux veya AppArmor gibi g\u00fcvenlik mod\u00fcllerinin Zeek’i engellemedi\u011finden emin olun. Gerekirse ge\u00e7ici olarak devre d\u0131\u015f\u0131 b\u0131rak\u0131p tekrar deneyin.<\/li>\n<\/ol>\n
Zeek’in loglar\u0131 nerede depolan\u0131r?<\/h4>\n
Varsay\u0131lan olarak, Zeek loglar\u0131 \/usr\/local\/zeek\/logs\/<\/code> dizininde, her da\u011f\u0131t\u0131m i\u00e7in tarih-saat damgal\u0131 bir alt dizinde (\u00f6rn. 2023-10-27_15-30-00\/<\/code>) saklan\u0131r. \/usr\/local\/zeek\/logs\/current<\/code> sembolik ba\u011flant\u0131s\u0131 her zaman en son log dizinine i\u015faret eder. Bu konum \/usr\/local\/zeek\/etc\/zeekctl.cfg<\/code> dosyas\u0131ndaki @redef Zeek::LogDir<\/code> ayar\u0131 ile de\u011fi\u015ftirilebilir.<\/p>\nDaha fazla a\u011f trafi\u011fi izlemek i\u00e7in Zeek performans\u0131n\u0131 nas\u0131l art\u0131rabilirim?<\/h4>\n
Performans\u0131 art\u0131rmak i\u00e7in \u015funlar\u0131 yapabilirsiniz:<\/p>\n
\n- Daha g\u00fc\u00e7l\u00fc CPU ve daha fazla RAM’e sahip bir sunucu kullan\u0131n.<\/li>\n
- \u00d6zel a\u011f kartlar\u0131 (\u00f6rne\u011fin, Intel X520\/X540) kullan\u0131n ve NIC offloading \u00f6zelliklerini devre d\u0131\u015f\u0131 b\u0131rak\u0131n.<\/li>\n
- BPF filtreleri kullanarak sadece ilgilendi\u011finiz trafi\u011fi izleyin.<\/li>\n
- Y\u00fcksek trafikli a\u011flar i\u00e7in Zeek’i k\u00fcmelenmi\u015f bir ortamda (cluster) birden fazla Zeek d\u00fc\u011f\u00fcm\u00fc ile \u00e7al\u0131\u015ft\u0131r\u0131n.<\/li>\n
- Loglar\u0131 h\u0131zl\u0131 yazma yetene\u011fine sahip SSD\/NVMe diskler kullan\u0131n.<\/li>\n<\/ul>\n
<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Giri\u015f: Bro (\u015eimdiki Ad\u0131yla Zeek) Nedir ve Neden \u00d6nemlidir?\nA\u011f g\u00fcvenli\u011fi ve izlemesi, g\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda kritik bir \u00f6neme sah","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"post-36432","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-genel","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\n
Giri\u015f: Bro (\u015eimdiki Ad\u0131yla Zeek) Nedir ve Neden \u00d6nemlidir? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Giri\u015f: Bro (\u015eimdiki Ad\u0131yla Zeek) Nedir ve Neden \u00d6nemlidir?\" \/>\n<meta property=\"og:description\" content=\"Giri\u015f: Bro (\u015eimdiki Ad\u0131yla Zeek) Nedir ve Neden \u00d6nemlidir? A\u011f g\u00fcvenli\u011fi ve izlemesi, g\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda kritik bir \u00f6neme sah\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-16T19:41:42+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"13 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Giri\u015f: Bro (\u015eimdiki Ad\u0131yla Zeek) Nedir ve Neden \u00d6nemlidir?\",\"datePublished\":\"2025-12-16T19:41:42+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/\"},\"wordCount\":2163,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/\",\"name\":\"Giri\u015f: Bro (\u015eimdiki Ad\u0131yla Zeek) Nedir ve Neden \u00d6nemlidir? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-12-16T19:41:42+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Giri\u015f: Bro (\u015eimdiki Ad\u0131yla Zeek) Nedir ve Neden \u00d6nemlidir?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Giri\u015f: Bro (\u015eimdiki Ad\u0131yla Zeek) Nedir ve Neden \u00d6nemlidir? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/","og_locale":"tr_TR","og_type":"article","og_title":"Giri\u015f: Bro (\u015eimdiki Ad\u0131yla Zeek) Nedir ve Neden \u00d6nemlidir?","og_description":"Giri\u015f: Bro (\u015eimdiki Ad\u0131yla Zeek) Nedir ve Neden \u00d6nemlidir? A\u011f g\u00fcvenli\u011fi ve izlemesi, g\u00fcn\u00fcm\u00fcz\u00fcn dijital d\u00fcnyas\u0131nda kritik bir \u00f6neme sah","og_url":"https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-12-16T19:41:42+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"13 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Giri\u015f: Bro (\u015eimdiki Ad\u0131yla Zeek) Nedir ve Neden \u00d6nemlidir?","datePublished":"2025-12-16T19:41:42+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/"},"wordCount":2163,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/","url":"https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/","name":"Giri\u015f: Bro (\u015eimdiki Ad\u0131yla Zeek) Nedir ve Neden \u00d6nemlidir? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-12-16T19:41:42+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/giris-bro-simdiki-adiyla-zeek-nedir-ve-neden-onemlidir\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Giri\u015f: Bro (\u015eimdiki Ad\u0131yla Zeek) Nedir ve Neden \u00d6nemlidir?"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/36432","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=36432"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/36432\/revisions"}],"predecessor-version":[{"id":36433,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/36432\/revisions\/36433"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=36432"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=36432"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=36432"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}