helpdeskview

تحية طيبة وبعد,

تم العمل على الإجتماع مع الأمن السيبراني وقد قامو بفحص الخوادم الخاصة بشركة ITG 4.65 , 4.66 ولم يجدو اي معلومات ولكنني قمت باخبارهم بالمذكره القديمه التي قمت بتقديمها اليهم والتي تلخص وجود نشاط مشبوه على الخادم 4.60 واخبرتهم بتفاصيل الحدث وتم اعلامي من قبلهم بضرورة اعادة تشغيل الخادم وقمت باعادة تشغيله وعند التحقق تبين بان الخدمة التي يقومون بالبحث عنها تتواجد على الخادم 4.60 وعليه تم تزويدهم بالبريد الالكتروني الذي قمت سابقا بارساله لهم. وقد قامو بسحب الملفات الخاصة بالفايروس.

مع الشكر والتقدير,

تم العمل على استبدال الروابط القديمه التي تعمل من خلال بروتوكول HTTP الى بروتوكول Https

I Was Checked Via :

Check Physicals Hardware
Check CPU (utilization, Processes and Speed)
Check Hard Disks Space, AVG and RW Speed
Check Ram In Use, Available and Cached
Check NIC Card Throughput , Send and Receive
Check IIS Services and Event Viewer
(Check Windows Update (we must restart all servers to deploy new security updates

we have issue on 4.60 as suspicious connection

I was Checked Via :

Check Anti-virus Logs and resolve all Issues
Ensure anti-virus definition updates are occurring
Check scan schedule times
Perform security checks on other applications & files if required
Check for password strength policy
Check Agents Connection and Updates and from where their tack update

I Was Checked Via :

Check All Servers Backup
Check All Agent Version and Log Activity
Ensure backup is running as per schedule
Check Acronis Activity
Check Used and Available Space on Storage
Check Sync Between Main Active Directory and Acronis
Tack Full Copy in External Hard disk for All Database
Check Local Tasks on the servers

I Was Checked Via :

Check Storage Activity
Check Used and Available Space on Storage
Check Sync Between Main Active Directory and Storage
Check All Snap shot Between HQ and Sahab
Check WSUS in Main Active Directory
Check Storage Used Space For Each File and Folder
Check SMP User Authentication

I Was Checked via :

Check All DVR and Cams Connection
Check DVR Local Storage
Check PlayBack For All CamS

I was Checked via :

Check Branches Connectivity
Check All VPN Tunnel
Check Authenticated User List That Login to Trusted-Domain
Check All Activity for based day (Logs, Deny Website, Application and All all used Ports)
Check IDS & IPS Reports and Framework Update
Check Active Policy (Users, Branches Vpn , LL2P VPN

تم التأكد من اتصال جميع اجهزة شبكة الوايرلس وتم التاكد من جميع اصدارات نظام التشغيل لكل جهاز.

I Was Checked Via :

Check All Servers Backup
Check All Agent Version and Log Activity
Ensure backup is running as per schedule
Check Acronis Activity
Check Used and Available Space on Storage
Check Sync Between Main Active Directory and Acronis
Tack Full Copy in External Hard disk for All Database
Check Local Tasks on the servers

Note : I was delete old Backup for MRS, Infinite and volt DataBase From HQ Storage

I was Checked Via :

Check Anti-virus Logs and resolve all Issues
Ensure anti-virus definition updates are occurring
Check scan schedule times
Perform security checks on other applications & files if required
Check for password strength policy
Check Agents Connection and Updates and from where their tack update