{"id":115787,"date":"2020-07-16T19:00:43","date_gmt":"2020-07-17T02:00:43","guid":{"rendered":"https:\/\/www.paloaltonetworks.com\/blog\/?p=115787"},"modified":"2020-07-15T23:48:42","modified_gmt":"2020-07-16T06:48:42","slug":"cortex-xdr-managed-threat-hunting","status":"publish","type":"post","link":"https:\/\/www2.paloaltonetworks.com\/blog\/2020\/07\/cortex-xdr-managed-threat-hunting\/?lang=ja","title":{"rendered":"\u8105\u5a01\u30cf\u30f3\u30c6\u30a3\u30f3\u30b0\u30b5\u30fc\u30d3\u30b9Cortex XDR MTH\u30b5\u30fc\u30d3\u30b9\u3092\u63d0\u4f9b\u958b\u59cb"},"content":{"rendered":"<p style=\"text-align: center;\"><em>\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3001\u30af\u30e9\u30a6\u30c9\u5168\u4f53\u306e\u7d71\u5408\u30c7\u30fc\u30bf\u3067\u904b\u7528\u3059\u308b\u696d\u754c\u521d\u306e\u8105\u5a01\u30cf\u30f3\u30c6\u30a3\u30f3\u30b0\u30b5\u30fc\u30d3<\/em><br \/>\n<em>\u30b9\u306b\u3088\u308a\u96a0\u308c\u305f\u653b\u6483\u3092\u9ad8\u7cbe\u5ea6\u3067\u767a\u898b<\/em><\/p>\n<p><div style=\"max-width:100%\" data-width=\"900\"><span class=\"ar-custom\" style=\"padding-bottom:44.56%;\"><img loading=\"lazy\" decoding=\"async\"  class=\"aligncenter size-full wp-image-111712 lozad\"  data-src=\"https:\/\/www.paloaltonetworks.com\/blog\/wp-content\/uploads\/2020\/05\/Hunter.png\" alt=\"Cortex XDR Managed Threat Hunting combines human expertise with the unique data correlation and detection capabilities built natively into the Cortex XDR platform to help you find hidden attacks with incredible accuracy. \" width=\"900\" height=\"401\" \/><\/span><\/div><\/p>\n<p>\u30d1\u30ed\u30a2\u30eb\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u306f\u3001\u5f0a\u793e\u306e\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u30c1\u30fc\u30e0Unit 42\u306b\u3088\u308b24\u6642\u9593\u4f53\u5236\u306e\u8105\u5a01\u30cf\u30f3\u30c6\u30a3\u30f3\u30b0\u30b5\u30fc\u30d3\u30b9\u300c<a href=\"https:\/\/www.paloaltonetworks.com\/cortex\/managed-threat-hunting\">Cortex XDR Managed Threat Hunting<\/a>\uff08Cortex XDR MTH\uff09\u300d\u3092\u65e5\u672c\u5e02\u5834\u306eCortex XDR\u3092\u5229\u7528\u306e\u304a\u5ba2\u69d8\u5411\u3051\u306b\u3001\u4e00\u822c\u63d0\u4f9b\u3092\u958b\u59cb\u3057\u307e\u3057\u305f\u3002\u3042\u308f\u305b\u3066\u3001\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3001\u30af\u30e9\u30a6\u30c9\u306e\u30c7\u30fc\u30bf\u3092\u7d71\u5408\u3059\u308bXDR\u88fd\u54c1\u300cCortex XDR\u300d\u81ea\u4f53\u306e\u6a5f\u80fd\u5f37\u5316\u3082\u5c55\u958b\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<p>Cortex XDR MTH\u306f\u3001<a href=\"https:\/\/www.paloaltonetworks.com\/blog\/2020\/02\/cortex-managed-threat-hunting\/\">2020\u5e742\u6708\u304b\u3089\u9650\u5b9a\u7684\u306b\u63d0\u4f9b<\/a>\u3057\u3066\u304a\u308a\u3001<a href=\"https:\/\/www.paloaltonetworks.com\/blog\/2020\/03\/cortex-ai\/?lang=ja\">\u9867\u5ba2\u74b0\u5883\u3067\u5b9f\u969b\u306e\u653b\u6483\u3092\u7279\u5b9a<\/a>\u3057\u305f\u308a\u3001\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u306e\u30c6\u30b9\u30c8\u3067\u653b\u6483\u65b9\u6cd5\u3092\u89e3\u660e\u3057\u305f\u308a\u3068\u3001\u65e2\u306b\u5927\u304d\u306a\u4fa1\u5024\u3092\u3082\u305f\u3089\u3057\u3066\u3044\u307e\u3059\u3002\u6700\u8fd1\u306e\u30b5\u30a4\u30d0\u30fc\u72af\u7f6a\u96c6\u56e3\u300cAPT29\u300d\u306e\u653b\u6483\u624b\u6cd5\u306b\u5bfe\u3059\u308b\u300cMITRE ATT\uff06CK\u00ae\u300d\u8a55\u4fa1\u30c6\u30b9\u30c8\u3067\u306f\u3001\u653b\u6483\u3055\u308c\u308b\u7bc4\u56f2\u3092\u3088\u308a\u5e83\u304f\u7db2\u7f85\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u3001<a href=\"https:\/\/www.paloaltonetworks.com\/cortex\/cortex-xdr\/mitre\">\u5168\u653b\u6483\u624b\u6cd5\u306e90\uff05\u3092\u691c\u51fa\u3067\u304d\u308b<\/a>\u3068\u3057\u3066\u9ad8\u8a55\u4fa1\u3092\u5f97\u3066\u3044\u307e\u3059\u3002<\/p>\n<p>Unit 42\u306e\u30a2\u30ca\u30ea\u30b9\u30c8\u306f\u3001\u8105\u5a01\u30cf\u30f3\u30c6\u30a3\u30f3\u30b0\u306b\u304a\u3051\u308b\u5e83\u7bc4\u306a\u5c02\u9580\u77e5\u8b58\u3092\u6709\u3057\u3066\u304a\u308a\u3001Sofacy\u3084OilRig\u3001SilverTerrier\u306a\u3069\u306eAPT\u653b\u6483\u306e\u5185\u90e8\u69cb\u9020\u3092\u89e3\u660e\u3057\u305f\u3053\u3068\u3067\u77e5\u3089\u308c\u3066\u304a\u308a\u3001\u6700\u8fd1\u3067\u306f\u65b0\u578b\u30b3\u30ed\u30ca\u30a6\u30a4\u30eb\u30b9\u611f\u67d3\u75c7\u306b\u7279\u5316\u3057\u305f\u8105\u5a01\u3082\u591a\u304f\u767a\u898b\u3057\u307e\u3057\u305f\u3002\u672c\u30b5\u30fc\u30d3\u30b9\u3067\u306f\u3001\u5f7c\u3089\u306e\u6df1\u3044\u5c02\u9580\u77e5\u8b58\u3068Cortex XDR\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u306b\u30cd\u30a4\u30c6\u30a3\u30d6\u306b\u7d44\u307f\u8fbc\u307e\u308c\u305f\u72ec\u81ea\u306e\u30c7\u30fc\u30bf\u76f8\u95a2\u304a\u3088\u3073\u691c\u51fa\u6a5f\u80fd\u3092\u7d44\u307f\u5408\u308f\u305b\u308b\u3053\u3068\u3067\u3001\u96a0\u308c\u305f\u653b\u6483\u3092\u9ad8\u7cbe\u5ea6\u3067\u767a\u898b\u3059\u308b\u3053\u3068\u304c\u53ef\u80fd\u3068\u306a\u308a\u307e\u3059\u3002<\/p>\n<p><div style=\"max-width:100%\" data-width=\"736\"><span class=\"ar-custom\" style=\"padding-bottom:56.25%;\"><img loading=\"lazy\" decoding=\"async\"  class=\"aligncenter wp-image-115788 lozad\"  data-src=\"https:\/\/www.paloaltonetworks.com\/blog\/wp-content\/uploads\/2020\/07\/blog-chart01.png\" alt=\"\" width=\"736\" height=\"414\" \/><\/span><\/div><\/p>\n<p><strong>\u8105\u5a01\u30cf\u30f3\u30c6\u30a3\u30f3\u30b0\u30b5\u30fc\u30d3\u30b9<\/strong><strong>Cortex XDR MTH<\/strong><strong>\u306e\u7279\u9577<\/strong><\/p>\n<ul>\n<li><strong>\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3001\u30af\u30e9\u30a6\u30c9\u5168\u4f53\u306b\u308f\u305f\u308b\u30cf\u30f3\u30c6\u30a3\u30f3\u30b0\uff1a<\/strong>\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3001\u30af\u30e9\u30a6\u30c9\u5168\u4f53\u306b\u308f\u305f\u308b\u91cd\u8981\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c7\u30fc\u30bf\u30bd\u30fc\u30b9\u3092\u3001\u6700\u9ad8\u6c34\u6e96\u306e\u8105\u5a01\u5206\u6790\u306e\u5143\u3001\u5c02\u9580\u5bb6\u304c24\u6642\u9593\u4f53\u5236\u3067\u76e3\u8996\u3057\u307e\u3059<\/li>\n<li><strong>\u4e16\u754c\u7684\u306b\u3082\u8a55\u4fa1\u3055\u308c\u308b\u8105\u5a01\u30cf\u30f3\u30bf\u30fc\uff1a<\/strong>Unit 42\u306e\u30a2\u30ca\u30ea\u30b9\u30c8\u306f\u3001Cortex XDR\u3092\u6d3b\u7528\u3057\u3066\u696d\u754c\u3092\u30ea\u30fc\u30c9\u3059\u308b\u8105\u5a01\u5206\u6790\u304a\u3088\u3073\u30c7\u30fc\u30bf\u63a2\u7d22\u3092\u9042\u884c\u3057\u3001\u6700\u5148\u7aef\u306e\u8105\u5a01\u7814\u7a76\u306e\u5143\u306b\u653b\u6483\u306e\u5bfe\u7b56\u3092\u8b1b\u3058\u307e\u3059<\/li>\n<li><strong>\u5b9f\u7528\u7684\u306a\u8105\u5a01\u30ec\u30dd\u30fc\u30c8\uff1a<\/strong>\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3001\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3001\u30af\u30e9\u30a6\u30c9\u74b0\u5883\u306b\u304a\u3051\u308b\u30ea\u30b9\u30af\u306e\u9ad8\u3044\u8105\u5a01\u3092\u628a\u63e1\u3057\u3001\u5b9f\u7528\u7684\u306a\u5bfe\u7b56\u3092\u3068\u308b\u305f\u3081\u306e\u8105\u5a01\u30ec\u30dd\u30fc\u30c8\u3092\u63d0\u4f9b\u3057\u307e\u3059<\/li>\n<li><strong>\u5b9f\u60c5\u5831\u306b\u57fa\u3065\u304f\u5f71\u97ff\u30ec\u30dd\u30fc\u30c8\uff1a<\/strong>\u8907\u6570\u7d44\u7e54\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u65b0\u305f\u306a\u8105\u5a01\u306b\u5bfe\u3057\u3066\u4e88\u9632\u7b56\u3092\u8b1b\u3058\u308b\u3053\u3068\u304c\u3067\u304d\u308b\u5404\u7a2e\u30ec\u30dd\u30fc\u30c8\u306b\u3088\u308a\u3001\u30a8\u30b9\u30ab\u30ec\u30fc\u30c8\u3059\u308b\u524d\u306b\u30ea\u30b9\u30af\u3092\u6392\u9664\u3067\u304d\u307e\u3059<\/li>\n<\/ul>\n<p>\u73fe\u72b6\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c1\u30fc\u30e0\u304c\u3001\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u306e\u4e8b\u524d\u9632\u5fa1\u306e\u305f\u3081\u306b\u8105\u5a01\u30cf\u30f3\u30c6\u30a3\u30f3\u30b0\u3092\u5b9f\u8df5\u3059\u308b\u305f\u3081\u306e\u6642\u9593\u3084\u30ea\u30bd\u30fc\u30b9\u3092\u78ba\u4fdd\u3067\u304d\u306a\u3044\u3053\u3068\u306f\u5468\u77e5\u306e\u4e8b\u5b9f\u3067\u3059\u3002\u3055\u3089\u306b\u306f\u3001\u8105\u5a01\u30cf\u30f3\u30c6\u30a3\u30f3\u30b0\u306b\u304a\u3044\u3066\u306f\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u9ad8\u3044\u5c02\u9580\u77e5\u8b58\u3092\u6709\u3057\u3001\u4f01\u696d\u5168\u4f53\u306e\u30c7\u30fc\u30bf\u3092\u6df1\u304f\u628a\u63e1\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002Cortex XDR MTH\u306b\u3088\u3063\u3066\u3001Cortex XDR\u306e\u5168\u3066\u306e\u304a\u5ba2\u69d8\u304c\u3001\u696d\u754c\u3067\u6700\u9ad8\u306e\u30a2\u30ca\u30ea\u30b9\u30c8\u3068\u6280\u8853\u306b\u3088\u308a\u8ffd\u52a0\u306e\u7ba1\u7406\u5de5\u6570\u306a\u3057\u3067\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f53\u5236\u3092\u6539\u5584\u3057\u3001\u30b9\u30c6\u30eb\u30b9\u653b\u6483\u304b\u3089\u306e\u4fdd\u8b77\u3092\u5f37\u5316\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<p>\u307e\u305f\u30d1\u30ed\u30a2\u30eb\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u306f\u3001Cortex XDR MTH\u30b5\u30fc\u30d3\u30b9\u306b\u52a0\u3048\u3066\u3001\u30c0\u30c3\u30b7\u30e5\u30dc\u30fc\u30c9\u3084\u30a2\u30e9\u30fc\u30c8\u3001\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u3068\u306e\u7d71\u5408\u3092\u3055\u3089\u306b\u5411\u4e0a\u3055\u305b\u308b\u3001Cortex XDR\u306e\u65b0\u6a5f\u80fd\u3092\u63d0\u4f9b\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<p><strong>Cortex XDR<\/strong><strong>\u6a5f\u80fd\u5f37\u5316<\/strong><strong>\u00a0<\/strong><\/p>\n<ul>\n<li><strong>\u5f37\u5316\u3055\u308c\u305f\u53ef\u8996\u5316\u3068\u30ec\u30dd\u30fc\u30c8\uff1a<\/strong><\/li>\n<\/ul>\n<p>Cortex XDR\u306b6\u3064\u306e\u65b0\u3057\u3044\u30c0\u30c3\u30b7\u30e5\u30dc\u30fc\u30c9\u30a6\u30a3\u30b8\u30a7\u30c3\u30c8\u304c\u8ffd\u52a0\u3055\u308c\u3001\u30a4\u30f3\u30b7\u30c7\u30f3\u30c8\u3092\u30b9\u30c6\u30fc\u30bf\u30b9\u5225\u3067\u3001\u30a2\u30e9\u30fc\u30c8\u3092\u30ab\u30c6\u30b4\u30ea\u3084\u30bd\u30fc\u30b9\u5225\u306a\u3069\u3067\u76e3\u8996\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u3002\u307e\u305f\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u72b6\u614b\u3092\u8a55\u4fa1\u3059\u308b\u305f\u3081\u306b\u30c1\u30e3\u30fc\u30c8\u3092\u67d4\u8edf\u306b\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u3067\u304d\u308b\u30c0\u30c3\u30b7\u30e5\u30dc\u30fc\u30c9\u3092\u69cb\u7bc9\u3067\u304d\u307e\u3059\u3002<\/p>\n<p><div style=\"max-width:100%\" data-width=\"847\"><span class=\"ar-custom\" style=\"padding-bottom:57.02%;\"><img loading=\"lazy\" decoding=\"async\"  class=\"aligncenter wp-image-115801 lozad\"  data-src=\"https:\/\/www.paloaltonetworks.com\/blog\/wp-content\/uploads\/2020\/07\/blog-chart02.png\" alt=\"\" width=\"847\" height=\"483\" \/><\/span><\/div><\/p>\n<p>\u307e\u305f\u3001WildFire\u3068\u306e\u9023\u643a\u5f37\u5316\u306b\u3088\u308a\u3001\u30d5\u30a1\u30a4\u30eb\u3092\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u305f\u308a\u3001Cortex XDR\u7ba1\u7406\u30b3\u30f3\u30bd\u30fc\u30eb\u304b\u3089\u96e2\u308c\u305f\u308a\u3059\u308b\u3053\u3068\u306a\u304f\u3001WildFire\u5206\u6790\u30ec\u30dd\u30fc\u30c8\u3092\u8868\u793a\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u3002Cortex XDR\u306e\u300cCausality (\u56e0\u679c\u95a2\u4fc2)\u300d\u306e\u30ea\u30f3\u30af\u3092\u30af\u30ea\u30c3\u30af\u3059\u308b\u3053\u3068\u3067\u3001WildFire\u306b\u3088\u3063\u3066\u53ce\u96c6\u3055\u308c\u305f\u30d7\u30ed\u30bb\u30b9\u3001\u6642\u7cfb\u5217\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u60c5\u5831\u3092\u8abf\u3079\u308b\u3053\u3068\u304c\u53ef\u80fd\u3067\u3059\u3002<\/p>\n<p><div style=\"max-width:100%\" data-width=\"825\"><span class=\"ar-custom\" style=\"padding-bottom:59.03%;\"><img loading=\"lazy\" decoding=\"async\"  class=\"aligncenter wp-image-115814 lozad\"  data-src=\"https:\/\/www.paloaltonetworks.com\/blog\/wp-content\/uploads\/2020\/07\/blog-chart03.png\" alt=\"\" width=\"825\" height=\"487\" \/><\/span><\/div><\/p>\n<ul>\n<li><strong>\u65b0<\/strong><strong>API<\/strong><strong>\u306b\u3088\u308b\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u30c4\u30fc\u30eb\u3068\u306e\u9023\u643a\u5f37\u5316\uff1a<\/strong><\/li>\n<\/ul>\n<p>API\u5bfe\u5fdc\u304c\u3088\u308a\u67d4\u8edf\u3068\u306a\u308a\u3001\u30d5\u30a1\u30a4\u30eb\u306e\u53d6\u5f97\u3084\u9694\u96e2\u3001\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306e\u30b9\u30ad\u30e3\u30f3\u306a\u3069\u306b\u5bfe\u5fdc\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u3002Cortex XSOAR\u307e\u305f\u306f\u4ed6\u306e\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u306e\u30c4\u30fc\u30eb\u3092\u4f7f\u7528\u3059\u308b\u3053\u3068\u3067\u3001\u30ec\u30b9\u30dd\u30f3\u30b9\u3092\u53d6\u308a\u307e\u3068\u3081\u305f\u308a\u3001\u8907\u6570\u306eCortex XDR\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u304b\u3089\u30c6\u30ec\u30e1\u30c8\u30ea\u3092\u540c\u6642\u306b\u53ce\u96c6\u3057\u305f\u308a\u3059\u308b\u3053\u3068\u304c\u53ef\u80fd\u3067\u3059\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u30d1\u30fc\u30c8\u30ca\u30fc\u307e\u305f\u306f\u30de\u30cd\u30fc\u30b8\u30c9\u30b5\u30fc\u30d3\u30b9\u30d7\u30ed\u30d0\u30a4\u30c0\u30fc\u306f\u3001\u4efb\u610f\u306e\u7ba1\u7406\u30c4\u30fc\u30eb\u3092\u4f7f\u7528\u3057\u3066\u76e3\u8996\u3084\u7ba1\u7406\u3092\u884c\u3046\u3053\u3068\u3082\u3067\u304d\u307e\u3059\u3002<\/p>\n<ul>\n<li><strong>\u96fb\u5b50\u30e1\u30fc\u30eb\u30d9\u30fc\u30b9\u306e\u30a2\u30e9\u30fc\u30c8\u901a\u77e5\uff1a<\/strong><\/li>\n<\/ul>\n<p>\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30d9\u30f3\u30c8\u767a\u751f\u6642\u306b\u3001\u96fb\u5b50\u30e1\u30fc\u30eb\u30d9\u30fc\u30b9\u306e\u30a2\u30e9\u30fc\u30c8\u3092\u5373\u5ea7\u306b\u901a\u77e5\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u3055\u3089\u306b\u3001Cortex XDR\u7ba1\u7406\u30b3\u30f3\u30bd\u30fc\u30eb\u304b\u3089\u30a2\u30e9\u30fc\u30c8\u901a\u77e5\u304a\u3088\u3073\u96c6\u7d04\u306e\u8a2d\u5b9a\u3092\u884c\u3046\u3053\u3068\u3067\u3001\u30a2\u30e9\u30fc\u30c8\u7ba1\u7406\u3092\u52b9\u7387\u5316\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u3002\u307e\u305f\u3001\u300c\u8a2d\u5b9a&gt;\u30a2\u30e9\u30fc\u30c8\u901a\u77e5\u300d\u30da\u30fc\u30b8\u3067\u30a2\u30e9\u30fc\u30c8\u306e\u4ed5\u69d8\u3001\u914d\u4fe1\u30ea\u30b9\u30c8\u3001\u901a\u77e5\u9001\u4fe1\u9593\u9694\u3092\u5b9a\u7fa9\u3059\u308b\u3053\u3068\u3082\u3067\u304d\u307e\u3059\u3002<\/p>\n<ul>\n<li><strong>\u8907\u6570\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u307e\u305f\u304c\u308b\u30ec\u30b9\u30dd\u30f3\u30b9\u306e\u3068\u308a\u307e\u3068\u3081\uff1a<\/strong><\/li>\n<\/ul>\n<p>\u8907\u6570\u306e\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3092\u4e00\u6589\u306b\u30ed\u30c3\u30af\u30c0\u30a6\u30f3\u3055\u305b\u308b\u3053\u3068\u306b\u3088\u308a\u3001\u5371\u967a\u306a\u653b\u6483\u304c\u751f\u3058\u305f\u5834\u5408\u3001\u7d44\u7e54\u5168\u4f53\u306b\u5e83\u304c\u308b\u306e\u3092\u9632\u3050\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u65b0\u6a5f\u80fd\u3067\u306f\u3001\u7ba1\u7406\u8005\u304c\u8907\u6570\u306e\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3092\u540c\u6642\u306b\u9694\u96e2\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u3001\u30ec\u30b9\u30dd\u30f3\u30b9\u6642\u9593\u306e\u77ed\u7e2e\u3068\u7ba1\u7406\u306e\u53cd\u5fa9\u4f5c\u696d\u3092\u306a\u304f\u305b\u307e\u3059\u3002<\/p>\n<p><strong>\u25a0<\/strong><strong>Cortex XDR MTH<\/strong><strong>\u306b\u95a2\u3059\u308b\u30aa\u30f3\u30e9\u30a4\u30f3\u30bb\u30df\u30ca\u30fc\u306e\u958b\u50ac<\/strong><\/p>\n<p>\u30d1\u30ed\u30a2\u30eb\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u306f\u3001Cortex XDR MTH\u306b\u3088\u3063\u3066\u304a\u5ba2\u69d8\u306e\u65e5\u3005\u306e\u76e3\u8996\u696d\u52d9\u3092\u3069\u306e\u3088\u3046\u306b\u652f\u63f4\u3057\u3001\u653b\u6483\u306e\u691c\u51fa\u7cbe\u5ea6\u304c\u5411\u4e0a\u3059\u308b\u306e\u304b\u3092\u8aac\u660e\u3059\u308b\u30aa\u30f3\u30e9\u30a4\u30f3\u30bb\u30df\u30ca\u30fc\u30927\u670821\u65e5\uff08\u706b\uff09\u5b9f\u65bd\u3057\u307e\u3059\u3002<\/p>\n<p>\u8a73\u7d30\u3084\u53c2\u52a0\u65b9\u6cd5\u306b\u3064\u3044\u3066\u306f\u3001<a href=\"https:\/\/register.paloaltonetworks.com\/cortexxdrthreathunting\">\u3053\u3061\u3089<\/a>\u306e\u30a6\u30a7\u30d6\u30b5\u30a4\u30c8\u3092\u3054\u89a7\u304f\u3060\u3055\u3044\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3001\u30af\u30e9\u30a6\u30c9\u5168\u4f53\u306e\u7d71\u5408\u30c7\u30fc\u30bf\u3067\u904b\u7528\u3059\u308b\u696d\u754c\u521d\u306e\u8105\u5a01\u30cf\u30f3\u30c6\u30a3\u30f3\u30b0\u30b5\u30fc\u30d3 \u30b9\u306b\u3088\u308a\u96a0\u308c\u305f\u653b\u6483\u3092\u9ad8\u7cbe\u5ea6\u3067\u767a\u898b \u30d1\u30ed\u30a2\u30eb\u30c8\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30b9\u306f\u3001\u5f0a\u793e\u306e\u8105\u5a01\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u30c1\u30fc\u30e0Unit 42\u306b\u3088\u308b24\u6642\u9593\u4f53\u5236\u306e\u8105\u5a01\u30cf\u30f3\u30c6\u30a3\u30f3\u30b0\u30b5\u30fc\u30d3\u30b9\u300cCortex XDR Managed Threat Hunting\uff08Cortex XDR MTH\uff09\u300d\u3092\u65e5\u672c\u5e02\u5834\u306eCortex XDR\u3092\u5229\u7528\u306e\u304a\u5ba2\u69d8\u5411\u3051\u306b\u3001\u4e00\u822c\u63d0\u4f9b\u3092\u958b\u59cb\u3057\u307e\u3057\u305f\u3002\u3042\u308f\u305b\u3066\u3001\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3001\u30af\u30e9\u30a6\u30c9\u306e\u30c7\u30fc\u30bf\u3092\u7d71\u5408\u3059\u308bXDR\u88fd\u54c1\u300cCortex XDR\u300d\u81ea\u4f53\u306e\u6a5f\u80fd\u5f37\u5316\u3082\u5c55\u958b\u3057\u3066\u3044\u307e\u3059\u3002 Cortex XDR MTH\u306f\u30012020\u5e742\u6708\u304b\u3089\u9650\u5b9a\u7684\u306b\u63d0\u4f9b\u3057\u3066\u304a\u308a\u3001\u9867\u5ba2\u74b0\u5883\u3067\u5b9f\u969b\u306e\u653b\u6483\u3092\u7279\u5b9a\u3057\u305f\u308a\u3001\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u306e\u30c6\u30b9\u30c8\u3067\u653b\u6483\u65b9\u6cd5\u3092\u89e3\u660e\u3057\u305f\u308a\u3068\u3001\u65e2\u306b\u5927\u304d\u306a\u4fa1\u5024\u3092\u3082\u305f\u3089\u3057\u3066\u3044\u307e\u3059\u3002\u6700\u8fd1\u306e\u30b5\u30a4\u30d0\u30fc\u72af\u7f6a\u96c6\u56e3\u300cAPT29\u300d\u306e\u653b\u6483\u624b\u6cd5\u306b\u5bfe\u3059\u308b\u300cMITRE ATT\uff06CK\u00ae\u300d\u8a55\u4fa1\u30c6\u30b9\u30c8\u3067\u306f\u3001\u653b\u6483\u3055\u308c\u308b\u7bc4\u56f2\u3092\u3088\u308a\u5e83\u304f\u7db2\u7f85\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u3001\u5168\u653b\u6483\u624b\u6cd5\u306e90\uff05\u3092\u691c\u51fa\u3067\u304d\u308b\u3068\u3057\u3066\u9ad8\u8a55\u4fa1\u3092\u5f97\u3066\u3044\u307e\u3059\u3002 Unit 42\u306e\u30a2\u30ca\u30ea\u30b9\u30c8\u306f\u3001\u8105\u5a01\u30cf\u30f3\u30c6\u30a3\u30f3\u30b0\u306b\u304a\u3051\u308b\u5e83\u7bc4\u306a\u5c02\u9580\u77e5\u8b58\u3092\u6709\u3057\u3066\u304a\u308a\u3001Sofacy\u3084OilRig\u3001SilverTerrier\u306a\u3069\u306eAPT\u653b\u6483\u306e\u5185\u90e8\u69cb\u9020\u3092\u89e3\u660e\u3057\u305f\u3053\u3068\u3067\u77e5\u3089\u308c\u3066\u304a\u308a\u3001\u6700\u8fd1\u3067\u306f\u65b0\u578b\u30b3\u30ed\u30ca\u30a6\u30a4\u30eb\u30b9\u611f\u67d3\u75c7\u306b\u7279\u5316\u3057\u305f\u8105\u5a01\u3082\u591a\u304f\u767a\u898b\u3057\u307e\u3057\u305f\u3002\u672c\u30b5\u30fc\u30d3\u30b9\u3067\u306f\u3001\u5f7c\u3089\u306e\u6df1\u3044\u5c02\u9580\u77e5\u8b58\u3068Cortex XDR\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u306b\u30cd\u30a4\u30c6\u30a3\u30d6\u306b\u7d44\u307f\u8fbc\u307e\u308c\u305f\u72ec\u81ea\u306e\u30c7\u30fc\u30bf\u76f8\u95a2\u304a\u3088\u3073\u691c\u51fa\u6a5f\u80fd\u3092\u7d44\u307f\u5408\u308f\u305b\u308b\u3053\u3068\u3067\u3001\u96a0\u308c\u305f\u653b\u6483\u3092\u9ad8\u7cbe\u5ea6\u3067\u767a\u898b\u3059\u308b\u3053\u3068\u304c\u53ef\u80fd\u3068\u306a\u308a\u307e\u3059\u3002 \u8105\u5a01\u30cf\u30f3\u30c6\u30a3\u30f3\u30b0\u30b5\u30fc\u30d3\u30b9Cortex XDR MTH\u306e\u7279\u9577 \u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3001\u30af\u30e9\u30a6\u30c9\u5168\u4f53\u306b\u308f\u305f\u308b\u30cf\u30f3\u30c6\u30a3\u30f3\u30b0\uff1a\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3001\u30af\u30e9\u30a6\u30c9\u5168\u4f53\u306b\u308f\u305f\u308b\u91cd\u8981\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c7\u30fc\u30bf\u30bd\u30fc\u30b9\u3092\u3001\u6700\u9ad8\u6c34\u6e96\u306e\u8105\u5a01\u5206\u6790\u306e\u5143\u3001\u5c02\u9580\u5bb6\u304c24\u6642\u9593\u4f53\u5236\u3067\u76e3\u8996\u3057\u307e\u3059 \u4e16\u754c\u7684\u306b\u3082\u8a55\u4fa1\u3055\u308c\u308b\u8105\u5a01\u30cf\u30f3\u30bf\u30fc\uff1aUnit 42\u306e\u30a2\u30ca\u30ea\u30b9\u30c8\u306f\u3001Cortex XDR\u3092\u6d3b\u7528\u3057\u3066\u696d\u754c\u3092\u30ea\u30fc\u30c9\u3059\u308b\u8105\u5a01\u5206\u6790\u304a\u3088\u3073\u30c7\u30fc\u30bf\u63a2\u7d22\u3092\u9042\u884c\u3057\u3001\u6700\u5148\u7aef\u306e\u8105\u5a01\u7814\u7a76\u306e\u5143\u306b\u653b\u6483\u306e\u5bfe\u7b56\u3092\u8b1b\u3058\u307e\u3059 \u5b9f\u7528\u7684\u306a\u8105\u5a01\u30ec\u30dd\u30fc\u30c8\uff1a\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3001\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3001\u30af\u30e9\u30a6\u30c9\u74b0\u5883\u306b\u304a\u3051\u308b\u30ea\u30b9\u30af\u306e\u9ad8\u3044\u8105\u5a01\u3092\u628a\u63e1\u3057\u3001\u5b9f\u7528\u7684\u306a\u5bfe\u7b56\u3092\u3068\u308b\u305f\u3081\u306e\u8105\u5a01\u30ec\u30dd\u30fc\u30c8\u3092\u63d0\u4f9b\u3057\u307e\u3059 \u5b9f\u60c5\u5831\u306b\u57fa\u3065\u304f\u5f71\u97ff\u30ec\u30dd\u30fc\u30c8\uff1a\u8907\u6570\u7d44\u7e54\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u65b0\u305f\u306a\u8105\u5a01\u306b\u5bfe\u3057\u3066\u4e88\u9632\u7b56\u3092\u8b1b\u3058\u308b\u3053\u3068\u304c\u3067\u304d\u308b\u5404\u7a2e\u30ec\u30dd\u30fc\u30c8\u306b\u3088\u308a\u3001\u30a8\u30b9\u30ab\u30ec\u30fc\u30c8\u3059\u308b\u524d\u306b\u30ea\u30b9\u30af\u3092\u6392\u9664\u3067\u304d\u307e\u3059 \u73fe\u72b6\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c1\u30fc\u30e0\u304c\u3001\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u306e\u4e8b\u524d\u9632\u5fa1\u306e\u305f\u3081\u306b\u8105\u5a01\u30cf\u30f3\u30c6\u30a3\u30f3\u30b0\u3092\u5b9f\u8df5\u3059\u308b\u305f\u3081\u306e\u6642\u9593\u3084\u30ea\u30bd\u30fc\u30b9\u3092\u78ba\u4fdd\u3067\u304d\u306a\u3044\u3053\u3068\u306f\u5468\u77e5\u306e\u4e8b\u5b9f\u3067\u3059\u3002\u3055\u3089\u306b\u306f\u3001\u8105\u5a01\u30cf\u30f3\u30c6\u30a3\u30f3\u30b0\u306b\u304a\u3044\u3066\u306f\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u9ad8\u3044\u5c02\u9580\u77e5\u8b58\u3092\u6709\u3057\u3001\u4f01\u696d\u5168\u4f53\u306e\u30c7\u30fc\u30bf\u3092\u6df1\u304f\u628a\u63e1\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002Cortex XDR MTH\u306b\u3088\u3063\u3066\u3001Cortex XDR\u306e\u5168\u3066\u306e\u304a\u5ba2\u69d8\u304c\u3001\u696d\u754c\u3067\u6700\u9ad8\u306e\u30a2\u30ca\u30ea\u30b9\u30c8\u3068\u6280\u8853\u306b\u3088\u308a\u8ffd\u52a0\u306e\u7ba1\u7406\u5de5\u6570\u306a\u3057\u3067\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f53\u5236\u3092\u6539\u5584\u3057\u3001\u30b9\u30c6\u30eb\u30b9\u653b\u6483\u304b\u3089\u306e\u4fdd\u8b77\u3092\u5f37\u5316\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002 &hellip;<\/p>\n","protected":false},"author":692,"featured_media":111712,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[6958],"tags":[6955,7090],"coauthors":[7145],"class_list":["post-115787","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-secure-the-future-2","tag-cortex-xdr-ja","tag-threat-hunting-ja"],"jetpack_featured_media_url":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-content\/uploads\/2020\/05\/Hunter.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/115787","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/users\/692"}],"replies":[{"embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/comments?post=115787"}],"version-history":[{"count":2,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/115787\/revisions"}],"predecessor-version":[{"id":115828,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/115787\/revisions\/115828"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/media\/111712"}],"wp:attachment":[{"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/media?parent=115787"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/categories?post=115787"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/tags?post=115787"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/coauthors?post=115787"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}