8827Ì«Ñô¼¯ÍÅÎÞÇýAgent£ºÊØ»¤Öն˰²È«£¬£¬£¬£¬£¬£¬£¬£¬Ô¤·ÀCrowdStrikeÀ¶ÆÁΣ»£»£»£»£»£»£»ú
°ä²¼¹¦·ò 2024-07-22ý½é£º
ÊýÖÇ»¯Ê±ÆÚ£¬£¬£¬£¬£¬£¬£¬£¬Öն˰²È«µÄ³ÁÒªÐÔ²»ÑÔ¶øÓ÷¡£¡£¡£¡£¡£¡£¡£¡£2024Äê7ÔÂ19ÈÕ£¬£¬£¬£¬£¬£¬£¬£¬Ò»³¡ÓÉCrowdStrikeÅäÖøüÐÂÒý·¢µÄÈ«ÇòÀ¶ÆÁΣ»£»£»£»£»£»£»ú£¬£¬£¬£¬£¬£¬£¬£¬²»½ö¶³öÁËAgent²»±äÐÔÔÚ¸´ÔÓϵͳ»·¾³ÖеĴàÈõÐÔ£¬£¬£¬£¬£¬£¬£¬£¬Ò²ÎªÓû§¼°°²È«³§ÉÌÇÃÏìÁ˾¯ÖÓ¡£¡£¡£¡£¡£¡£¡£¡£8827Ì«Ñô¼¯ÍÅÖÂÁ¦ÓÚ´òÔì²»±ä¡¢¿¿µÃסµÄÖն˰²È«²úÆ·£¬£¬£¬£¬£¬£¬£¬£¬ÒÔÔ¤·ÀºÍÕмÜDZÔÚµÄϵͳΣ»£»£»£»£»£»£»ú£¬£¬£¬£¬£¬£¬£¬£¬ÎªÆóÒµµÄÊý×Ö»¯×ªÐÍ֮·±£¼Ý»¤º½¡£¡£¡£¡£¡£¡£¡£¡£
Ò»¡¢À¶ÆÁΣ»£»£»£»£»£»£»ú
2024Äê7ÔÂ19ÈÕ£¬£¬£¬£¬£¬£¬£¬£¬Í»ÈçÆäÀ´µÄÒ»³¡À¶ÆÁΣ»£»£»£»£»£»£»ú£¬£¬£¬£¬£¬£¬£¬£¬Ó°ÏìÁËÊÀ½ç¸÷µØµÄ×éÖ¯ºÍ·þÎñ£¬£¬£¬£¬£¬£¬£¬£¬Ô̺¬»ú³¡¡¢µçÊǪ́ºÍÒ½ÔºµÈ¡£¡£¡£¡£¡£¡£¡£¡£¹ýºó¾ÝCrowdStrike¹ÙÍøÅû¶£¬£¬£¬£¬£¬£¬£¬£¬ÊÇÔÚÆäÈÕ³£ÔËÓª¹ý³ÌÖа䲼ÁËWindowsϵͳµÄ´«¸ÐÆ÷ÅäÖøüУ¬£¬£¬£¬£¬£¬£¬£¬´ËÅäÖøüд¥·¢ÁËÂß¼ÃýÎ󣬣¬£¬£¬£¬£¬£¬£¬µ¼ÖÂÊÜÓ°Ïìϵͳ±ÀÀ£ºÍÀ¶ÆÁ¡£¡£¡£¡£¡£¡£¡£¡£¹ÙÍøÚ¹Ê͵½£¬£¬£¬£¬£¬£¬£¬£¬¹ÌÈ»ÅäÖÃÎļþµÄºó׺ÊÇ¡°sys¡±£¬£¬£¬£¬£¬£¬£¬£¬µ«²»ÊÇÄÚºËÇý¶¯¡£¡£¡£¡£¡£¡£¡£¡£È»¶ø£¬£¬£¬£¬£¬£¬£¬£¬´Ó¹ãÒåÁìÓòÉÏÀ´¿´Ëü»¹ÊÇÊôÓÚÇý¶¯µÄÁìÓò£¬£¬£¬£¬£¬£¬£¬£¬ÆäĿ¼λÓÚC:\Windows\System32\drivers\CrowdStrike¡£¡£¡£¡£¡£¡£¡£¡£
´Ë±í£¬£¬£¬£¬£¬£¬£¬£¬CrowdStrike¹ÙÍø½øÒ»²½ËµÃ÷£¬£¬£¬£¬£¬£¬£¬£¬ÉÏÊöÌáµ½µÄÅäÖñ»³ÆÎª¡°ÐÅ·Îļþ¡±£¬£¬£¬£¬£¬£¬£¬£¬ÊÇFalcon´«¸ÐÆ÷ʹÓõÄÐÐΪ±£»£»£»£»£»£»£»¤»úÔìµÄÒ»²¿ÃÅ¡£¡£¡£¡£¡£¡£¡£¡£ÐÅ·ÎļþµÄ¸üÐÂÊÇ´«¸ÐÆ÷µÄÕý³£²Ù×÷£¬£¬£¬£¬£¬£¬£¬£¬Í¨³£Ã¿Ìì»á½øÐÐÊý´Î£¬£¬£¬£¬£¬£¬£¬£¬ÒÔÏìÓ¦CrowdStrike·¢ÏÖµÄÐÂÕ½Êõ¡¢¼¼ÊõºÍ·¨Ê½¡£¡£¡£¡£¡£¡£¡£¡£¼´±ãÕæÊÇÒ»´ÎµÄ²âÊÔºöÂÔ£¬£¬£¬£¬£¬£¬£¬£¬Õâ´ÎÊÂÎñÒ²ÌáÐÑÁËÓû§ºÍ°²È«³§É̱ØÐëά³Öʱ¿Ì¾¯Ì裬£¬£¬£¬£¬£¬£¬£¬°²È«·ÀÏß²»ÈÝË¿ºÁиµ¡¡£¡£¡£¡£¡£¡£¡£¡£
¶þ¡¢Î£»£»£»£»£»£»£»úÖÇʾ
Õâ´ÎÍ»·¢ÊÂÎñÈçͳһ¼Ç¾¯ÖÓ£¬£¬£¬£¬£¬£¬£¬£¬Ò²ÔÙ´Î͹ÏÔÁËAgent²»±äÐÔÔÚ¸´ÔÓϵͳ»·¾³ÖеÄÖ÷Ìâְλ¡£¡£¡£¡£¡£¡£¡£¡£¾ßÌå¶øÑÔ£¬£¬£¬£¬£¬£¬£¬£¬AgentµÄ²»±äÔËÐв»½öÒÀÀµÓÚÆäÄÚ²¿¼Ü¹¹µÄºÏÀíÐÔ£¬£¬£¬£¬£¬£¬£¬£¬¸ü¹Ø¼üÔÚÓÚÇý¶¯·¨Ê½µÄ׳ʵÐÔ¼°ÆäÓëϵͳµÄÎ޷켯³É£¬£¬£¬£¬£¬£¬£¬£¬ÒÔ¼°²âÊÔÁ÷³ÌµÄÑϽ÷ÐÔÓëÈ«ÃæÐÔ¡£¡£¡£¡£¡£¡£¡£¡£Òò¶ø£¬£¬£¬£¬£¬£¬£¬£¬½«À´ÔÚAgentϵͳµÄÉè¼ÆÓëÔËά¹ý³ÌÖУ¬£¬£¬£¬£¬£¬£¬£¬Ó¦²ÉÈ¡¸üΪÑϸñµÄ´ëÊ©À´¼ÓÇ¿Çý¶¯²»±äÐÔÆÀ¹À£¬£¬£¬£¬£¬£¬£¬£¬²¢ÒýÈë¸üÏȽøµÄ²âÊÔ¼¼ÊõºÍ²½Ö裬£¬£¬£¬£¬£¬£¬£¬ÒÔÈ«Ãæ¸²¸ÇDZÔÚ·çÏյ㣬£¬£¬£¬£¬£¬£¬£¬´Ó¶ø¹¹½¨ÆðÔ½·¢²»±ä¡¢¿¿µÃסµÄÖÕ¶ËAgentÈí¼þÔËÐÐϵͳ¡£¡£¡£¡£¡£¡£¡£¡£
Èý¡¢8827Ì«Ñô¼¯ÍÅÖն˲úÆ·
1¡¢²»±äÐÔÖÁÉÏ£º8827Ì«Ñô¼¯ÍÅÖն˰²È«²úÆ·µÄÖ÷ÌâÀíÏë
1£©ÔÚÖ÷»ú³¡¾°ÖУ¬£¬£¬£¬£¬£¬£¬£¬ÒµÎñ´óÓÚ°²È«£¬£¬£¬£¬£¬£¬£¬£¬Çý¶¯´æÔÚ²»±äÐÔ²îºÍ¼æÈÝÐÔ²îµÄ±×¶Ë£¬£¬£¬£¬£¬£¬£¬£¬Òò¶øÊ¹ÓÃÎÞÇýµÄÊÂÎñ²É¼¯·½Ê½£¬£¬£¬£¬£¬£¬£¬£¬Ô̺¬¹ý³Ì¡¢Îļþ¡¢ÍøÂçµÈ£¬£¬£¬£¬£¬£¬£¬£¬µ«ÊÇ´«Í³ÎÞÇý²É¼¯µÄÐÅÏ¢±ÈÁ¦µ¥Ò»¡¢·ÖÉ¢£¬£¬£¬£¬£¬£¬£¬£¬¶ÔÓÚÓÐÇý²É¼¯ÊÂÎñµÄ·á˶ˮƽ£¬£¬£¬£¬£¬£¬£¬£¬8827Ì«Ñô¼¯ÍÅÖÕ¶ËAgent½áºÏ¶àÖֲɼ¯ÃªµãËÝÔ´°¸·¢ÏÖ³¡£¬£¬£¬£¬£¬£¬£¬£¬Ê¹Æä´ïµ½ÀàËÆÄں˼¶Çý¶¯µÄ³ÉЧ¡£¡£¡£¡£¡£¡£¡£¡£
2£©ÔÚPC³¡¾°ÖУ¬£¬£¬£¬£¬£¬£¬£¬8827Ì«Ñô¼¯ÍÅ×ñÑÇáÇý¡¢ÉÙÇý»òÎÞÇýģʽ£¬£¬£¬£¬£¬£¬£¬£¬²¢Ñϸñ×ñÊØWindowsÇý¶¯Ä£Ðͳ߶ȣ¬£¬£¬£¬£¬£¬£¬£¬Ê¹ÓõÄÇý¶¯¼¼Êõ¾ù»ùÓÚ΢ÈíµÄ¹«¿ªAPI£¬£¬£¬£¬£¬£¬£¬£¬ÞðÆúδ¹«¿ªAPIºÍÄÚºËhookµÈÈÝÒ×µ¼ÖÂϵͳÀ¶ÆÁµÄ¼¼Êõ¹æ»®£¬£¬£¬£¬£¬£¬£¬£¬²¢Í¨¹ý¾²Ì¬´úÂë²é³¡¢Î¢ÈíÇý¶¯¹¤¾ßÑéÖ¤£¬£¬£¬£¬£¬£¬£¬£¬´Ó±¾ÔÉÏÏ÷¼õÀ¶ÆÁÎÊÌâ³öÏֵĿÉÄÜÐÔ¡£¡£¡£¡£¡£¡£¡£¡£
3£©ÔÚÐÅ´´Öն˽â¾ö¹æ»®ÖУ¬£¬£¬£¬£¬£¬£¬£¬²»±äÐÔ±»ÖÃÓÚÉè¼ÆµÄ×îÇ°ÑØ¡£¡£¡£¡£¡£¡£¡£¡£8827Ì«Ñô¼¯ÍÅͨ¹ý²Ù×÷ϵͳ¹©¸øÉÌÌṩµÄÔÉú»¯½Ó¿Ú£¬£¬£¬£¬£¬£¬£¬£¬³É¹¦¶ã±ÜÄÚºËhookËù´øÀ´µÄ°²È«·çÏÕ£¬£¬£¬£¬£¬£¬£¬£¬ÏÔÖø¼ÓÇ¿ÁËϵͳµÄÕûÌå²»±äÐÔ£¬£¬£¬£¬£¬£¬£¬£¬´Óµ××ÓÉÏÏ÷¼õÁËDZÔڵݲȫ·ì϶¡£¡£¡£¡£¡£¡£¡£¡£ÓÉÓÚÎÞÐè¶î±í¼ÓÔØµÚÈý·½Çý¶¯£¬£¬£¬£¬£¬£¬£¬£¬Ô¤·ÀÁËÇý¶¯·¨Ê½¿ÉÄÜÒýÈëµÄ°²È«Òþ»¼£¬£¬£¬£¬£¬£¬£¬£¬È绺³åÇøÒç³ö¡¢È¨ÏÞÌáÉýµÈÎÊÌ⣬£¬£¬£¬£¬£¬£¬£¬´ó·ù½µµÍÁËϵͳ¿¨¶Ù¡¢ËÀ»úµÈÎÊÌâµÄ²úÉúÂÊ£¬£¬£¬£¬£¬£¬£¬£¬È·±£Ã¿Ò»Ì¨ÖÕ¶ËÉ豸µÄ°²È«ÄÜÁ¦´¦ÓÚ²»±äµÄÔËÐÐ״̬£¬£¬£¬£¬£¬£¬£¬£¬Ãâȥϵͳ±ÀÀ£µÄÀ§ÈÅ¡£¡£¡£¡£¡£¡£¡£¡£
2¡¢¸ß³ß¶È¿ª·¢Á÷³Ì
8827Ì«Ñô¼¯ÍÅÖն˰²È«²úÆ·ÍŶÓÔÚ²úÆ·¿ª·¢Ê±£¬£¬£¬£¬£¬£¬£¬£¬×ñÊØÄÚ²¿¸ß³ß¶È¿ª·¢¹æ·¶£¬£¬£¬£¬£¬£¬£¬£¬²¢´îÅä´úÂë½»²æÉ󼯣¬£¬£¬£¬£¬£¬£¬£¬×Ô¶¯»¯µÄ°×ºÓ×¢»ÒºÐ¼ì²â£¬£¬£¬£¬£¬£¬£¬£¬Äڴ湤¾ß²é³µÈ£¬£¬£¬£¬£¬£¬£¬£¬ÊµÏÖ¿ÆÑ§ÇÒÑϸñµÄ¿ª·¢Á÷³Ì¡£¡£¡£¡£¡£¡£¡£¡£
3¡¢È«Ãæ²âÊÔÓë·çÏÕ½ÚÔì
8827Ì«Ñô¼¯ÍÅÖն˰²È«²úÆ·¾¹ýÁ÷³Ì±£ÕÏ£¬£¬£¬£¬£¬£¬£¬£¬Ñ¡È¡È«ÃæµÄ²âÊÔ£¬£¬£¬£¬£¬£¬£¬£¬Õë¶Ô¿ÉÄÜÒý·¢²»±äÐÔ·çÏÕ¼°ÒµÎñ³ÁÒª³¡¾°Ñ¡È¡»Ò¶È»·¾³¸üе½ÈÕ³£»£»£»£»£»£»£»·¾³µ½Ö÷Ìâ»·¾³¸üеĵݽøÁ÷³Ì£¬£¬£¬£¬£¬£¬£¬£¬Í¬Ê¹ØûÌåѡȡµãÑéÖ¤¡¢ÃæÍƹ㣬£¬£¬£¬£¬£¬£¬£¬Öð²½ÒÖÔì¼°½â³ý·çÏÕ£¬£¬£¬£¬£¬£¬£¬£¬½µµÍÒì³£ÊÂÎñ´øÀ´µÄÓ°ÏìºÍËðʧ¡£¡£¡£¡£¡£¡£¡£¡£
Àú¾¶þÊ®ÓàÔØÉî¸ûϸ×÷£¬£¬£¬£¬£¬£¬£¬£¬8827Ì«Ñô¼¯ÍÅÔÚWindowsϵͳ°²È«½¨ÉèÁìÓòƾ½èÉîºñµÄÊг¡¶Ñ¼¯Óë¼¼Êõµ×ÔÌ£¬£¬£¬£¬£¬£¬£¬£¬²»ÐÝÍÆ³ö¾ß±¸×³´óÊг¡¾ºÕùÁ¦µÄÖն˰²È«²úÆ·£¬£¬£¬£¬£¬£¬£¬£¬²¢ÒÑ¿í·ºÀûÓÃÓÚÔËÓªÉÌ¡¢µ±¾Ö¡¢µçÁ¦¡¢½ðÈÚµÈÈ«ÐÐÒµÓû§£¬£¬£¬£¬£¬£¬£¬£¬ÒÔ׿ԽƷÖʵIJúÆ·ÓëרҵµÄ°²È«·þÎñ£¬£¬£¬£¬£¬£¬£¬£¬³ÖÐø»¤º½¿Í»§ÔÚÊý×Ö»¯×ªÐ͵ĺ£³±ÖÐÎÈÖØÇ°ÐС£¡£¡£¡£¡£¡£¡£¡£


¾©¹«Íø°²±¸11010802024551ºÅ